Our webshop provides the secure bank card payment solution of the CIB Bank to our customers. The security of your transaction is established by the separation of data. With the use of the system the eStore receives only the quantity of the ordered commodity and the delivery address from the consumer, while CIB Bank exclusively the card data necessary for the transaction process performed on a 256-bit TLS (Transport Layer Security) encrypted communication channel. The webshop does not receive any data transmitted via the payment page, as these data are available for the CIB Bank only. After the transaction has been completed, the webshop sends an immediate payment processing response. In order to use bank card payment solution, your internet browser shall support TLS encryption.
The total amount due for the purchased goods/services is immediately debited in your card account. Please read thoroughly the detailed description below.
------------------------------------------------------------------------------------------------------------
Welcome to our webshop operated with the secure online payment solution of the CIB Bank.
We shortly describe below how you can shop in a safe and reassuring way.
When shopping, you should pay attention to the following matters:
· Read the information about the webshop, the terms and conditions of the purchase and the delivery as well as the payment terms and conditions.
· Please read carefully the security conditions provided by the Webshop since these will guarantee the security of your data.
· Keep the record of (file) any and all information related to your purchase.
· Keep track of the transaction data connected to your payment (transaction ID, authorisation code).
· Prevent your confidential card information from getting misused by any unauthorised access.
· Use a browser that enables the TLS encryption protocol. [TLS deploys whenever a web browser or application transmits data over a network].
About security
TLS stands for the accepted encryption procedure Transport Layer Security. Our bank has a 256-bit encryption key to protect the communication channel. A company named VeriSign ensures CIB Bank to use the 256-bit key to secure TLS-based encryption. Currently, 90% of the global e-commerce uses this encryption method. Before tzransmission, the browser used by the customer encrypts the cardholder data with the help of TLS before sending them; thus, the data sent to CIB Bank are indecipherable (encrypted) and cannot be used by unauthorised persons.
Accepted bank card types
CIB Bank’s online payment system settles transactions performed by Mastercard/Maestro bank cards, VISA and VISA Electron bank cards belonging to the VISA product family (the use of Electron cards is subject to approval by the issuing bank) as well as internet/web cards suitable for online use.
The steps of the payment procedure
1. On the Webshop’s website, select the goods/services the countervalue of which you wish to pay by bank card.
2. Following this, you will be redirected to the webpage of CIB Bank that guarantees secure payment, where you shall enter your card data to start the payment process.
3. After entering the card data, you can initiate the transaction by clicking the Payment button.
4. After successful authentication, the payment process will continue.
5. Once the payment is completed, you will be redirected to the Webshop where you will receive a confirmation of the result of the transaction.
In case of payment by bank card, after a successful transaction – i.e. the acceptance after verifying the validity of the bank card and the availability of necessary funds – CIB Bank will start debiting your account with the price of the goods or services.
If you are not redirected from the payment page back to the Webshop, the transaction will be considered unsuccessful. If you click “Back” or “Refresh” button of the browser on the bank’s payment page, or close the browser window before you could be redirected to the webshop, the payment will qualify as unsuccessful.
If you wish to receive more information about the outcome of the transaction and – in case of its failure – about the reasons and details thereof, please contact the Bank managing your account.
FAQ about online card payment
CARD ACCEPTANCE
What types of card can I pay with?
You can pay with all embossed VISA and MasterCard cards, and certain VISA Electron and V Pay cards. Whether or not you can use VISA Electron cards for online payments depends on the bank that issued the card. VISA Electron bank cards issued by CIB can be used for online purchases.
Which banks’ cards are suitable for online payments?
All VISA and MasterCard/Maestro cards that the card-issuing bank has authorised for internet payment, as well as ‘web cards’ issued specifically for internet use.
Can I pay with a shopping card?
Point-collecting cards, used for storing loyalty points, issued by merchants/service providers, cannot be used to pay online.
Can I pay with a co-branded card?
All co-branded cards that are MasterCard or VISA-based cards suitable for internet payments can be used to pay.
THE PAYMENT PROCESS
How does the background process for online payment work?
After choosing ‘bank card’ as the method of payment on the website of the merchant/service provider, you initiate payment, and are then directed to the Bank’s payment page having a secure communication channel. For payment, you need to give your card number, card expiry date and the 3-digit security code on the signature stripe on the reverse side of the card. The transaction is launched by you, and then the card undergoes a real-time authorisation process, in which the authenticity of the card details, the available funds and the spending limit are all checked. If all the data necessary for continuing the transaction are appropriate, your account-keeping (card-issuing) bank blocks the payable amount on your card. The debiting (deduction) of the amount from your account takes place within a few days depending on your bank managing your account.
What is the difference between online and conventional card purchase?
There are transactions where the card is actually presented in the store (Card Present) and where it is not physically present (Card Not Present). Card Present transactions take place using a device called POS terminal. After the card has been swiped and the PIN keyed in, the terminal contacts the card holder’s bank via the authorisation centre and, depending on the type of card and its issuer, either the VISA or the MasterCard network. This is where the validity and funds verification check (authorisation) takes place. The POS terminal (and the merchant) receives the approval or rejection via the same route, only in reverse order. The customer signs the receipt. Card Not Present transactions are transactions where the bank card is not physically present. These include transactions executed by post, telephone or electronically (via the internet), in which case you (card holder) launch the transaction by giving your requested card data via a secure (256-bit encrypted) payment site. If the transaction is successful, you receive an authorisation number, which is the same as the number that would be shown on the paper receipt.
What does reservation mean?
As soon as the transaction comes to the bank’s attention, it is followed by reservation (blocking), as the actual debiting can only take place once the official data arrive, which can take a few days, and during this time it would otherwise be possible to spend the amount of the purchase again. Therefore, through reservation, the money used for a purchase or cash withdrawal is separated and blocked. The reserved amount is still part of the account balance, so it earns interest, but cannot be spent again. Reservation ensures that transactions without sufficient funds are refused although the account balance would, in principle, still permit them.
UNSUCCESSFUL PAYMENTS AND ACTIONS TO TAKE
When can a transaction be unsuccessful?
Usually this happens when the payment order is not accepted by the card-issuing bank (i.e. the bank that gave you the card), or it might be due to a telecommunication or IT fault that prevents the authorisation request from reaching the card issuer when using a bank card.
Card-related errors
· The card is not suitable for online payments.
· Use of the card over the internet is blocked by the bank managing the account.
· Use of the card is blocked.
· Incorrect card data (card number, expiry date, security code on the signature strip) has been given.
· The card has expired.
Account-related errors
· There are insufficient funds to execute the transaction.
· The amount of the transaction exceeds the card spending limit.
Connection-related errors
· The connection was probably lost during the transaction. Please try again.
· The transaction timed out. Please try again.
Technical errors
· If you are not returned from the payment site to the website of the merchant/service provider, the transaction is unsuccessful.
· If you have left the payment site, but you return to the payment site using the browser’s “back”, “reload” or “refresh” function, the system will automatically refuse the transaction for security reasons.
What to do if the payment procedure is unsuccessful?
A transaction ID is generated for every transaction, and we recommend you to make a note of this. If during the payment attempt the transaction is refused by the bank, please contact the bank managing your account.
Why do I have to contact the bank managing my account if the payment was unsuccessful?
Upon the verification of the card, the account-managing (card-issuing) bank notifies the (accepting) bank of the merchant collecting the amount whether the transaction can be executed. The accepting bank cannot disclose confidential information; only the bank that identifies the card holder is entitled to do so.
What does it mean if I get an SMS text message from my bank on the reservation/blocking of the payable amount, but the merchant/service provider indicates that payment was unsuccessful?
This can happen if the card verification has taken place on the payment site, but you have not returned to the website of the merchant/service provider. In this case the transaction is classified as incomplete, and it is automatically deemed unsuccessful. When this happens, the amount is not charged to your card, and the reservation is terminated.
SECURITY
What do VeriSign and 256-bit encrypted TLS communication channel mean?
TLS stands for the accepted encryption procedure Transport Layer Security. Our bank has a 256-bit encryption key that protects the communication channel. A company called VeriSign allows CIB Bank to use the 256-bit key that helps us ensure the secure TLS-based encryption. Currently, 90% of the world’s e-commerce uses this encryption method. The browser used by the customer encrypts the card holder’s data with the help of TLS before sending them; thus, the data are sent to CIB Bank in encrypted form and cannot be interpreted by unauthorised persons.
After the payment, my browser warned me that I am leaving a secure zone. Is the security of my payment still assured?
Absolutely. The payment process takes place via a 256-bit encrypted communication channel, so it is totally secure. After the transaction, you are returned to the merchant’s website, and if the merchant’s website is not encrypted, your browser will warn you that you are leaving the encrypted channel. This does not represent a threat in terms of the security of the payment.
What is the CVC2/CVV2 code?
At MasterCard this is short for Card Verification Code, and at Visa, for Card Verification Value, and it is a numerical value coded onto the magnetic stripe of the bank card, which can be used to determine the authenticity of the card. The CVC2 code, which is the last three digits of the number printed on the reverse of MasterCard/Maestro cards, must be provided during online purchases.
What does Verified by Visa mean?
Visa card holders who are registered in the Verified by Visa system can choose a password or a security verification based on biometric identification (face recognition, fingerprint or other human features) at the bank that issues the card, which they use to identify themselves when making internet-based purchases, and which protects against the unauthorised use of Visa cards. CIB Bank accepts cards issued under the Verified by Visa system.
What does MasterCard SecureCode mean?
Maestro card holders who are registered in the Mastercard ID check system can choose a password or a security verification based on biometric identification (face recognition, fingerprint or other human features) at the bank that issues the card, which they use to identify themselves when making internet-based purchases, and which protects against the unauthorised use of Mastercard/Maestro cards. CIB Bank accepts cards issued under the Mastercard ID check system.
