セキュリティソリューション

▼ Security solution

GMO Payment Gateway provides safe and secure security measures.

payment from the previous payment at the time, payment until after, safe and secure payment provides an environment your

According to a survey, there were 918 information leaks worldwide in the first half of 2017, an increase of nearly 164% from the same period of the previous year. More than 1.9 billion personal and account information leaks, of which up to 74% are malicious outsiders.

In such an environment, it is important for companies to anticipate security damage in advance and consider countermeasures. The GMO-PG, as the environment in which you are able to peace of mind to more merchants, "payment before," "payment at the time," "payment at all stages of post", offers security solutions.

Strengthening security measures for credit card transactions

2020年3月に、クレジット取引セキュリティ対策協議会(※1)から、「実行計画2019」の後継として「クレジットカード・セキュリティガイドライン」が発表されました。これは2017年3月8日に公表された「実行計画2017」、2018年3月1日に発表された「実行計画2018」、2019年3月4日に発表された「実行計画2019」が2020年3月末をもって実施期限を迎えたため、その後継としてセキュリティ取組方針を定めたものになります。内容としては実行計画を踏襲しており大きな変更はありません。また、2021年4月に施行済みの「割賦販売法の一部を改正する法律(改正割賦販売法)」では、クレジットカード決済を利用する非対面加盟店(EC事業者やコールセンターでの受注時にカード決済を利用する通販事業者など)はクレジットカード情報の適切な管理と不正使用対策が義務付けられています。そのため、改正割賦販売法の実務指針である「クレジットカード・セキュリティガイドライン」への対応が必要になります。
(※1)クレジット取引に関わる幅広い事業者及び経済産業省が参画して2015年3月に設立

もっとくわしく

Strengthening security measures

 ・・・割賦販売法(クレジットカード・セキュリティガイドライン)対応

Credit card information leakage measures (non-retention of card information)

Tokenization
It is a security service that can reduce the risk of information leakage by replacing the credit card number entered by the purchaser with another character string (token) to communicate payment
IVR payment service
This is a service that uses IVR (automatic voice system) to make Credit card payment
Cyber protector
Cyber protector
専用タブレット
It is a service that makes Credit card payment by using a tablet terminal dedicated payment processing that is separated from your network.
BPO
BPO
It is a service that outsources faxes, postcards, orders at call centers, and card payment processing operations themselves to companies that have acquired PCI DSS. It is possible to introduce our affiliated companies.
メールリンク
It is a service that makes payment by sending the payment screen URL to the purchaser's email address. payment screen is provided by us, your company can realize payment processing without storing, processing, or transmitting the card information.
リダイレクト(リンク)型
Since we provide the payment screen, you can realize payment processing without saving, processing and transmitting card information.
Member ID payment
Member ID payment (card information storage service)
This is a service in which we keep the card information entered by the customer. We will contribute to reducing the security risk of businesses that make many repeat purchases and businesses recurring payment

Credit card fraud measures

Fraud prevention service (Sift)
We provide "Sift", a fraudulent transaction prevention service that utilizes machine learning, as an Optional Services PG Multi-Payment Service
By having machine learning take charge of tuning fraudulent rules, which was conventionally done manually, it is possible to reduce costs and operational load and identify suspicious transactions.
Fraud prevention service (ReD Shield)
A security service Actual in preventing fraudulent transactions around the world. By scrutinizing the "user information" and "order details" held by the member store, it is possible to identify suspicious transactions and contribute to reducing the risk of chargeback fraud
3Dセキュア
In addition to the credit card number and expiration date, customers enter the Internet-specific ID and password issued by each credit card company on the Internet to make Credit card payment Contributes to spoofing prevention measures.
Security Code
In addition to the credit card number, this service authenticates you by asking you to enter the last 3 digits (4 digits on the front side in the case of AMEX) printed on the back of the card. You can check if you have the card.
chargeback compensation group insurance
It is a service that compensates for damages when fraud occurs.
If chargeback occurs, you can compensate for sales that are not paid by your credit card company.
Fraudulent address detection service
Fraudulent address detection service
By inquiring the purchaser information etc. in the "Unauthorized Use Destination List" held by the card company, it is possible to use it as one of the reference information when identifying whether or not the unauthorized destination is.
Mass attack blocking service
Mass attack blocking service
It is a service that blocks authorization requests by setting the detection logic. By using this service, you can prevent the damage caused by unauthorized mass attacks.

Introduction of other security services

SSL
It is a technology that encrypts the information passed over the Internet and realizes secure communication. You can obtain the following SSL server certificate (both new application and renewal) by purchasing a coupon from us.