February 2024 Summaries

Merchant-initiated authentication, or 3RI, is a 3D Secure 2.2 capability that lets authorized merchants charge a customer’s card for future card-not-present transactions without requiring the customer to participate each time. It supports business models involving recurring subscriptions, installment or buy-now-pay-later payments, split shipments, and refund reversals when returned goods are not received or are unsuitable. While traditional in-store retailers generally have less need for 3RI, it is particularly important for travel agencies, e-commerce sellers, rental companies, hotels, restaurants, and other businesses where payments may occur over time or final charges are not known at the initial authorization. As part of the broader 3D Secure fraud-prevention protocol, properly completed authentication can also shift fraud liability from merchants to card issuers, although the customer verification process may sometimes add friction or confusion during checkout.

January updates delivered more than a tenfold performance improvement to Token Search and Token List endpoints, helping engineers quickly locate tokenized sensitive data for customer support, debugging, validation, and metadata-based workflows without storing the underlying information. Elements now supports custom card brands and closed-loop gift card BINs by allowing organizations to extend recognized card patterns, addressing payment needs in specialized markets and verticals. A new open-source Shopify JavaScript package also enables Node.js users, including merchants and payment facilitators, to decrypt Shopify Payment App payloads for custom credit card processing, and it is preinstalled in the Reactor environment. Additional changes allow code removal from Proxies, correct Portal log and dashboard statistic displays, improve tokenization compatibility with Chrome version 86 and earlier, and enhance EU request routing.

Payment operations encompass the processes businesses use to manage accounts receivable, accounts payable, transaction processing, refunds, treasury activities, and payment-provider fees, becoming increasingly important as digital commerce, instant transactions, and international sales add complexity. For online merchants with narrow margins, effective operations can improve payment approval rates, control processing costs, manage currencies, reduce chargebacks, and protect customer relationships through clear cancellation, refund, and payment-update procedures. Automation and flexibility are emphasized, particularly through using multiple payment service providers to retry soft declines, route payments efficiently, avoid cross-border fees, secure favorable processing rates, and maintain card data for recurring payments and account-updater services. By overseeing the full payment ecosystem, including currency conversion and treasury management, businesses may turn payment operations from an administrative necessity into a source of cost savings, revenue opportunities, and stronger financial performance.

Online dating and related businesses, including matchmaking, agencies, escort services, and companionship platforms, are expanding alongside a market projected to grow from $7.94 billion in 2023 to nearly twice that amount by 2030. Classified under MCC 7273, dating and escort services are considered Visa Tier 1, high-brand-risk merchants because of their potential exposure to illegal activity, consumer harm, fraud, disputes, and chargebacks. Subscription billing, unclear customer expectations, reputational concerns over statement descriptors, stolen-card use, and fake profiles can all heighten payment risks. Recommended practices include understanding card-network rules, using experienced high-risk payment providers, maintaining transparent terms and cancellation processes, delivering responsive customer service, complying with PCI DSS, monitoring transactions, and engaging specialized compliance and fraud partners. Basis Theory positions its tokenization, card collection, and proxy tools as a way for such businesses to reduce PCI compliance obligations, retain control of payment data, and switch among processors more easily; its customer Passes reportedly implemented these tools in two weeks to support provider redundancy and payment cascading after facing an unexpected processor shutdown.