SagePay & OpenCart

[joshgeake]

Hello all,

I'm researching a better payment processor/merchant account and since SagePay has a very good Opencart integration using this...

www.opencart.com/index.php?route=extension/extension/info&extension_id=7349

...I thought that using SagePay as at least a payment gateway could be a good idea.

So, because the information just doesn't seem to exist out there, does anyone use SagePay and have an integrated form in the checkout? If so, which version of SagePay do you use? (Form, Server, Server+iForm or Direct Injection?)

Does SagePay force you to pay their ~£100 per year PCI tax so they can remotely scan your server?

It's all such a joke given that some customers still send me unwanted emails with their full card details in...

 

[ProjectOcto]

Hi Josh - let me help you for a change!

Why are you looking to change payment gateway - from what to SagePay, and why?

Why do customers email you with their details - it is possible for you to raise an order in the admin and email a payment link to customers, which is far more secure, devoids you of multiple PCI-DSS compliance rules, and also creates an account to encourage users to use again.

 

[joshgeake]

Well we're with PayPal Pro because it's got the simplest iframe payment gateway. Three boxes and they're done, no payment address fields etc. Problem is it's very expensive for my seasonality.

Why do they email me with their credit card numbers? Because they're in a rush, perhaps on a bus etc and they trust us!

 

[HobbyMounts]

We use SagePay and have to say the support is excellent. Talked me through alot of the CV2 and 3DSecure anti-fraud settings.

 

[LMDServicesUK]

Hello all,

I'm researching a better payment processor/merchant account and since SagePay has a very good Opencart integration using this...

www.opencart.com/index.php?route=extension/extension/info&extension_id=7349

...I thought that using SagePay as at least a payment gateway could be a good idea.

So, because the information just doesn't seem to exist out there, does anyone use SagePay and have an integrated form in the checkout? If so, which version of SagePay do you use? (Form, Server, Server+iForm or Direct Injection?)

Does SagePay force you to pay their ~£100 per year PCI tax so they can remotely scan your server?

It's all such a joke given that some customers still send me unwanted emails with their full card details in...

Be aware irrespective of who you use for your gateway, your Merchant account provider will charge you for PCI Compliance as this is insisted on by the Card Schemes, even PayPal are now introducing these charges for their Pro Merchants.

It is a condition of having a merchant account, not whose gateway you decide to use.

Also I appreciate your comments re your customers sending you their card details via email, which is pretty Blo*** stupid and leaves them wide open to Fraud and if they ever tried to claim against a fraudulent transaction, they would be turned down, for not protecting their card data e.g. your fault not ours.

Furthermore it leaves you as a merchant wide open to potential fraud claims as you have no way of showing that you have not passed on any provided card details to a third party..

Whether we like it or not PCI compliance is massively reducing card fraud for everyone, and helping Merchants win Charge Back claims so a pain yes, but IMHO a necessary one.

Sorry to be negative but you are leaving yourself wide open..

Mark

 

[LMDServicesUK]

We use SagePay and have to say the support is excellent. Talked me through alot of the CV2 and 3DSecure anti-fraud settings.

And at £ 25 PCM I would hope so ! there are a lot cheaper more reliable alternatives around, especially if you are processing less than £ 500 PCM.

I presume then they have explained to you how to turn the basic security settings on which most gateway providers now enable by default rather than leaving the Merchant to discover they are switched off and have to be turned on manually..

Mark