On-line Merchant Security

EPS Technologies is committed to helping merchants minimize their risk of fraudulent transactions. As part of our ongoing effort, we continually work to inform and educate merchants on our available fraud detection tools and provide recommendations on the features that are available to better protect themselves from fraud and security compromise. All of us at EPS Technologies are committed to security. We have investigated several companies to handle our Internet and credit card processing security. After meeting with numerous companies we chose ISP2 for our server and internet site and Authorize.Net for our credit card gateway.

In the Authorize.Net Merchant Menu User's Guide and Developer's Guide, Merchants can learn about all of the tools and features available on the Authorize.Net system to assist them in reducing incidents of fraud that could potentially take place through their Web site business.

At a system level, Authorize.Net has several anti-fraud features available:

• Address Verification System - AVS is a verification system that compares the billing address information (Street Address and Zip Code) provided by the customer online with the billing address on file at the credit card issuing bank.
• CVV2 - is a three-digit security code appearing in reverse italic at the top of the signature panel on the back of the card. Implementation of this feature requires the user to enter the CVV2 code when making a purchase, helping to confirm that the user is the authorized cardholder.
• Referrer URL - This feature allows a Merchant to designate the URL(s) from which Authorize.Net allows a transaction to take place. The URL must be listed as a "Valid Referrer URL" in the "Manage URLs" portion under "Settings" in the Merchant Interface. Through regular communications such as email, Web site and Merchant Interface changes, Authorize.Net has also advised Merchants on additional actions they can take to detect, prevent and manage fraud:
• Actively use the Address Verification System (AVS) and the CVV2 features listed above
• Change password regularly and use alphanumeric characters
• Monitor transaction batches daily prior to settlement and look for suspicious transaction activity
• For Merchants using the ADC method of integration, use the "Password Required" feature
• For Merchants using the WebLink method of integration, use the "Referrer URL" feature
• Read the Authorize.Net Security "Best Practices" White Paper
• Sign up for the FraudScreen.Net or Transact Secure fraud detection services

If you have any questions on security issues, please contact Authorize.Net Customer Support at support@authorize.net or 1-877-447-3938.