Security of payments

Visionbox.it’s online secure payment management platform is managed by one of Italy’s largest acquirers of payment card transactions, Banca Intesa Sanpaolo, which has a long experience in terms of transaction security and guarantees its merchants and their customers (cardholders) the maximum security currently available in the field of distance sales.

In particular, Intesa San Paolo fully meets the following security standards:

CVV (CARD VERIFICATION VALUE)

This code is shown on credit cards and is used as an additional security element for CNP (Customer Not Present) transactions – it is typically used in e-commerce transactions.

The use of this security code is intended to ensure that the purchaser has physical possession of the credit card.

With VISA and MASTERCARD, the 3-digit CVV is printed on the back of the credit card. On AMERICAN EXPRESS cards, the 4-digit CVV is printed on the front of the credit card, above the long code.

3DSECURE (VERIFIED BY VISA – MASTERCARD SECURE CODE)

This code consists of a password that the credit card holder must enter after prompting by the website of the merchant from whom the goods are purchased.

It is used only for e-commerce transactions and is an additional security element to the CVV. The holder must enter the same password previously stored on the website of the card issuer. Only in this way can the transaction be considered secure, since it is assumed that only the true owner of the credit card knows the password.

3DSecure applies to VISA and MASTERCARD payment cards.

PCI DSS (PAYMENT CARD INDUSTRY – DATA SECURITY STANDARD)

This abbreviation refers to the leading global security standard for companies using payment card details in any form (credit cards, debit cards, prepaid cards etc). This standard is regulated by the PCI Security Standard Council, which is essentially responsible for supervising and controlling the management of

payment card data for all stakeholders (banks, merchants, and intermediaries) in order to reduce the number of fraudulent transactions. All stakeholders are subject to an annual surveillance check by a QSA (Qualified Security Assessor).