Security

eWAY Explained

eWAY is a payment gateway provider allowing you to accept online credit card payments in real time.

With eWAY you can accept secure online and mail order credit card payments. Automate and grow your business online by processing credit card transactions 24/7 from anywhere in the world.

Overview of PCI DSS

PCI DSS (Payment Card Industry Data Security Standards) was developed by the major credit card companies to assist merchants in preventing credit card fraud and to improve security around processing and storing credit card details.

PCI DSS compliance is an important standard for any organisation storing, processing or transmitting credit card data to have and maintain. It ensures that sensitive customer data and the security of all systems that have access to this sensitive information is maintained and secured at all times.

eWAY and PCI DSS

As a Level 1 service provider eWAY is required to remain PCI DSS compliant at all times, undertaking yearly audits and quarterly network scans from an external Qualified Security Assessor to ensure compliance is maintained.

eCommerce merchants whose systems store, process or transmit credit card data must be PCI DSS compliant depending on the number of eCommerce transactions processed annually. The processes eWAY goes through to maintain compliance include a Self-Assessment Questionnaire, an External Vulnerability Assessment and an onsite review by an external Qualified Security Assessor (QSA).

eWAY values its merchants sensitive customer data and strives to ensure that it always remains up to date for any relevant standards. PCI DSS compliancy is extremely important for any payment gateway and eWAY provides all merchants and their customers with the confidence they need to shop safely online.

eWAY utilises McAfeeSecure for its quarterly vulnerability scans and Securus Global to undertake its yearly audit.

Payment Process Explained

Real time payments occur within an average of 3 seconds, even though there is a lot of work going on behind the scenes.

	1. Customer Capture During the payment process your customer will enter their order and credit card details. These details are securely transmitted to the eWAY payment gateway, ready for real time processing.
	2. eWAY Gateway Your customer’s credit card details are encrypted by eWAY, ensuring they are stored securely. Payment information is passed to your Internet merchant facility for authorisation of the credit card supplied.
	3. Banking Network Your Internet merchant facility communicates with your customer’s credit card issuer, confirming the validity of the credit card used and availability of sufficient funds. Once payments are successfully processed they are held in your Internet merchant facility ready for overnight settlement.
	4. eWAY Reports The result of the transaction is sent from the banking network to eWAY where the outcome is recorded within your transaction history. An e-mail receipt is automatically sent to you and your customer with the payment result.
	5. Website Response A real time response is returned to your website, informing your customer of the outcome of their payment.