Worldpay Zinc

[Merchant UK]

I rarely get credit card payments because i tend to get people to do bank transfers but i guess it would be a great add on with the ability to enable customers to pay with their credit or debit card.

Looking at this new service from worldpay - Zinc, Its ticking all the right boxes, even on payasyougo. https://www.worldpayzinc.com/

with fee of 2.75% on PAYG its not too bad a fee with funds in your account in 4 days and no monthly fees

My main question is do you still need a merchant account with this or is it not needed, Normally a merchant account is for online and web based transactions.

Anyone using this service? and does it work for you?

 

[Merchant UK]

Oh well looks like i'm the first one here to give this a go. I've signed up online and now just need to wait whilst they do their checks

 

[Talay]

Nope, no merchant account. Fee is all inclusive.

Funds transferred are gross. Your commissions are billed monthly.

A few of us here had it in its previous incarnation during beta testing and into production.

 

[vvaannmmaann]

Merchant Did you look into any others? Put "card payments" into the search box.Several threads there about it.

 

[LMDServicesUK]

Hi MerchantUK

No the service includes your Merchant account as it is a true PAYG service, and as long as your customers are happy using the mobile card reader device you should find it works well for you.

However you will need to become PCI Compliant (you are still handling the card and therefore their cardholder data..) , so DO NOT IGNORE this activity, when they advise you re getting certified.

The non compliance fines can hit up to £ 50 a month, so be warned..

Please do post some feedback once you have been using the service for a while.

Rgds

Mark

 

[Talay]

Hi MerchantUK

No the service includes your Merchant account as it is a true PAYG service, and as long as your customers are happy using the mobile card reader device you should find it works well for you.

However you will need to become PCI Compliant (you are still handling the card and therefore their cardholder data..) , so DO NOT IGNORE this activity, when they advise you re getting certified.

The non compliance fines can hit up to £ 50 a month, so be warned..

Please do post some feedback once you have been using the service for a while.

Rgds

Mark

Don't go worrying about this frightening remark from a seller of a competing service. He pounces on every thread regarding card payments. PCI compliance issues can apply across the whole spectrum.

WorldPay are up for the hand holding on this one. They know they cannot screw the small guys over with daft charges out of all proportion to the business transacted.

Give them a call. They have their technology issues as all these services have but I find them very approachable on the phone. Tel. 0330 333 3601 (Old number 0870 010 3601)

 

[LMDServicesUK]

Don't go worrying about this frightening remark from a seller of a competing service. He pounces on every thread regarding card payments. PCI compliance issues can apply across the whole spectrum.

WorldPay are up for the hand holding on this one. They know they cannot screw the small guys over with daft charges out of all proportion to the business transacted.

Give them a call. They have their technology issues as all these services have but I find them very approachable on the phone. Tel. 0330 333 3601 (Old number 0870 010 3601)

Talay, I am not trying to scare anyone, I merely advised he OP that this is something they will have to deal with, and I know from my own experience it is something far too many Merchants ignore to their cost.

ALL Merchant Service Providers HAVE to operate a PCI Compliance scheme, irrespective of the technology being used where a Merchant handles customer card holder data, Fact. Which means the Merchant has to become compliant

The requirement is clearly stated in the Worldpay Zinc T's & C's, so I am not trying to scaremonger, and I did not mention our equivalent service as I did not feel it was appropriate on this occasion.

The PCI DSS committee are due to publish a new PCI Mobile system standard later this year, so hopefully this will make the whole process a little less painful for small traders.

A good link to explain PCI Compliance and what a Merchant needs to do can be found at

http://www.theukcardsassociation.org.uk/security/What_is_PCI%20DSS.asp

I am sorry if you feel that I am " jumping on" posts re card payments, but that is what I do for a living, so I will continue to work on raising the profile and image of our industry, which as we all know has had too many cowboys in it and there are many people like me in the Industry who want to correct this situation.

I am always going to add comments onto threads where I believe I can help a poster, or offer an alternative view, to help educate potential users or actual users of Merchant Services as this is my area of expertise.

Funnily enough I thought that was the whole point of this forum ?

Fellow posters and readers can always choose to follow my suggestions or not as they see fit..

 

[ZipserSir]

I appreciate your insights LMS!

Rather than focus on the penalties - how much does it cost for a merchant using Zinc to be PCI compliant?

That is a more interesting question!

 

[smo]

PCI compliance depends on your setup, it will differ from company to company as everyone handles card data differently.

We have been using Zinc since before it was "Zinc" and it was in beta testing, it does what it says on the tin

 

[ScotComp]

I've used Intuit pay as well which was pretty good.

 

[LMDServicesUK]

I appreciate your insights LMS!

Rather than focus on the penalties - how much does it cost for a merchant using Zinc to be PCI compliant?

That is a more interesting question!

It depends on the Merchant Services Provider, the charges per annum range from £ 30 to £ 60 a year, some charge monthly others annually.

In our case we pay the first years fees for the Merchant, and then we charge £ 4.99 PCM per account.

Hope this helps.

Rgds

Mark

 

[Nochexman]

PCI compliance depends on your setup, it will differ from company to company as everyone handles card data differently.

We have been using Zinc since before it was "Zinc" and it was in beta testing, it does what it says on the tin

Hi smo - so as a Zinc user how much do you pay to be PCI compliant?

 

[WorldPay Zinc]

Hi All,

As the current guidelines on PCI Compliance are not a good fit for our MicroMerchant (small business and sole traders) customers, WorldPay Zinc is currently in talks with the major card schemes to try and come up with a more suitable PCI solution. Our keypads themselves are accredited as required and no customer payment details are stored on either the device or keypad.


Hope that helps.

Cheers,
Emma

 

[LMDServicesUK]

So do your Merchants still have to become PCI Compliant under the existing scheme as per any other merchant that handles card holder data (as per your own T's & C's) ?

e.g. you are putting the customers card in your device for a payment or refund, either as a F2F or CNP transaction (I understand you also provide a virtual terminal as part of the service),so you must handle card holder data.

I appreciate the data is not stored locally but neither is it stored locally with a conventional card terminal, and the Merchant has to be PCI compliant.

 

[Merchant UK]

I appreciate the data is not stored locally but neither is it stored locally with a conventional card terminal, and the Merchant has to be PCI compliant.

I think its because you have a paper receipt with a conventional Card terminal and thats the problem.

I'm under the understanding as Emma says in her post because no information is actually stored by the Worldpay Zinc account holder the the PCI compliant part may be slightly OTT.

On a lighter note, just received my Zinc KeyPad, and i'm impressed, less than a week from application to final approval and the Keypad arrival.

Well done Worldpay for a super easy startup!! Highly recommended

I would however like some more Card logo stickers as i only received one :redface:

 

[LMDServicesUK]

Tx Merchant,

Sorry the point I was making is that if a Merchant handles any cardholder data (which in your case would be if you used the Virtual terminal facility), this is subject to the PCI Guidelines.

I completely agree the current rules are OTT for a mobile payment system user, and I know they are working on a new Mobile payments version of the standard to address this new technology.

Unfortunately this whole programme is being driven by the Card Schemes so it is not going to go away !

Be really interested to see how well you and your customers get on with it, and I hope you will be happy to post your experiences in due course.

Kind regards

Mark

 

[Merchant UK]

Tx Merchant,

Sorry the point I was making is that if a Merchant handles any cardholder data (which in your case would be if you used the Virtual terminal facility), this is subject to the PCI Guidelines.

I see where your coming from Mark, but although you are handling a Keypad you let the customer insert their card and type in their pin, your not handling the card at all, The transaction goes though with no risk at all to either yourself or the customer. Surely the date is encrypted within the keypad so no loss of data is possible from either the Keypad or mobile phone?

I would imagine this may be different when handling phone orders and doing customer not present transactions, but to be honest i'm not looking at using this service on a daily basis only occasionally, its an additional service to offer my customers the chance to pay by card. At best i guess i would use it 1 or 2 times a month.

Thats the beauty of this, theres no monthly charges or rentals, Once you've brought the keypad there's nothing more to pay until you start taking payments.

I will look into this PCI DSS thing but i'm not going to loose too much sleep about it in the early days. This is a new idea, a new way forward for an easier way for small businesses to accept card payments without all the unnecessary hassle and costs associated with a full blown merchant account and fixed card terminal.

Will of course get back to you with how i'm setting it all up and let you know when i've made my first transaction

 

[WorldPay Zinc]

Hi Merchant,

We are in the process of ordering a surplus of 'We Accept...' stickers so that you will soon be able to request more by calling our Customer helpdesk.

In the meantime, if you would like to send me a private message with your business/address details I can pass them on to our Operations team and see if they can organise some more for you.

Cheers,
Emma

 

[Nochexman]

I see where your coming from Mark, but although you are handling a Keypad you let the customer insert their card and type in their pin, your not handling the card at all

Really interesting discussion.

So the question that occurs to me is does this mean that Zinc should not be used for Card Not Present transactions?

 

[WorldPay Zinc]

Whilst we are working to refine the PCI rules for our WorldPay Zinc customers there is no need for them to stop accepting CNP transactions.

Cheers,
Emma[FONT=&quot]
[/FONT]

 

[Nochexman]

Thanks Emma.

Whilst we are working to refine the PCI rules for our WorldPay Zinc customers there is no need for them to stop accepting CNP transactions.

...OK, but in the meantime they do need to be PCI compliant for CNP - I guess?

 

[CardswitcherUK]

It does all seem to be a vague area - PCI costs and these PAYG devices. Having read the threads couldn't see any definitive statements about whether there was any future potential additional merchant liability.

We asked izettle about this and their product and they categorically told us there was no additional merchant cost re PCI. Is this the same for all of these PAYG propositions ?

 

[LMDServicesUK]

Certainly as far Judo/MobilePay is concerned there is no requirement currently to register as PCI compliant or pay a management Fee.

But in our case we never handle the card holder data, but I think we are still a little bit in limbo until the new PCI DSS Mobile standard is published, which to date whilst heavily rumoured, no dates have been announced so far for publication.

Could be that because these systems do not include a conventional merchant account they have managed to excuse themselves from PCI Compliance so far..

Would welcome any input from anyone involved with PCI who is also a member of UKBF..

Just my thoughts of course

Mark

 

[Merchant UK]

being PCI compliant with mobile terminals is relatively new at the moment, however being PCI compliant is pretty much about common sense than having to pay a company to help you do it, some of which are very expensive for something which any decent business owner with a bit of savvy could do for themselves.

You can check out all the PCI DSS questionnaires here http://www.level4pci.org/component/content/article/3-pci-dss/2-what-is-pci-dss-compliance

Just fill in the ones which apply to you, some have examples of how they should be filled (in Red- Just edit to add yours)

To be compliant, a Level 4 business must complete the relevant to PCI-DSS Self Assessment Questionnaire(SAQ) and submit it to their merchant services provider on an annual basis.

Thats it its so easy and no need to pay someone to do it for you, you only need to do one per year, and then your covered

 

[LMDServicesUK]

Tx Merchant UK,

This is a really useful post for Merchants who need to deal with PCI Compliance, and thus avoid the fines that are imposed if you do not self certify yourself.

Thanks for taking the time to provide this really useful information, and I hope fellow Forum members will read and act on it rather than ignoring it until the fines hit their merchant accounts..

Many thanks

Mark