• Do not provide account data to someone over the phone - unless you are the one who initiated the call.
• Protect your business and your customers - do not store unnecessary track data from credit cards.
• Know your employees. Check references or conduct background checks on all your employees.
• Protect yourself against fraudulent online transactions. Sign up to become a Verified by Visa® merchant at www.visa.ca/verified
• Always examine security features on Visa cards when accepting them. Find more information on security features associated with Visa cards.
• To protect both merchants and consumers, Visa is working with acquirers and merchants to help ensure that customer receipts do not contain full account information.
• Visa works with merchants, government and law enforcement to continually improve its fraud prevention measures - you can do your part too. Learn more about what you can do to reduce fraudulent transactions.
• When taking orders over the phone, or over the Internet, ask the customer for the card expiration date, and include it in your authorization request. An invalid or missing expiration date can be an indicator that the person on the other end does not have the actual card.
• Use fraud detection tools such as the Card Verification Value 2 (CVV2) as part of the authorization process. CVV2 is a three-digit security number imprinted on the signature panel of Visa cards to help validate the cardholder has the genuine card in their possession. As of April 2005, if the merchant submits the CVV2 value for authentication and the Issuer is not participating in the validation, then the merchant will be protected from any potential fraudulent transactions.
• Never ship a valuable order unless it has been authorized, and it checks out.
• Be on the lookout for purchases where multiple cards are used from a single IP (Internet Protocol) address, or those where orders are charged to multiple cards but are shipped to the same address - these could signal fraudulent activity.
• Be alert for transactions with several of the following characteristics: first-time shopper, larger than normal orders, orders consisting of several of the same item, orders made up of 'big-ticket' items, orders shipped 'rush' or 'overnight', and orders shipped to an international address.

Back to top

• Data security should be a top priority for all e-tailers. To find out what you can do to protect your customers' information, refer to the Account Information Security Program requirements at www.visa.ca/ais.
• Compare numbers. The account number printed on a customer's Visa card must match the account number printed on the sales draft.
• Compare numbers. The four-digit number printed below the card must match the first four digits of the account number.
• Always compare signatures when accepting a Visa card for payment.
• Skimming is an illegal act that helps criminals obtain credit card account information to produce counterfeit cards. If you see anyone in your workplace using a device that is not part of your day-to-day activity, call your Visa merchant processing centre or company security immediately.
• Watch out for customers who purchase a lot of merchandise without regard to size, style, colour or price, or those who try to distract or rush you during the sale. This type of behaviour could signal card fraud.
• Never risk your own safety or the safety of others in the vicinity in an attempt to stop fraudsters.
• Ensure all staff are educated on proper acceptance procedures. Find out more information on how to spot a fraudulent card.
• The Visa Account Information Security (AIS) Program helps protect your customers' sensitive information while promoting consumer confidence leading to competitive advantage for your business.
• Visa requires all Visa-accepting merchants to be AIS compliant. To find out how your business can meet these standards, visit www.visa.ca/ais
• Protect yourself and your customers against identity theft - collect only essential data.
• Protect systems and data from viruses, and update security software frequently.
• Immediately investigate and report to Visa any suspected loss of Account or Transaction information.
• Encrypt data maintained on databases or files accessible from the Internet, and any data sent across networks

Back to top