Secured Payment

Why We Chose PAYBOX

The Principles of Online Payment Security

Thanks to advanced technology and the elimination of paper records containing clear-text credit card numbers, we can confirm that paying by card on PAYBOX-affiliated sites is more secure than in most local physical stores.

Every stage of the payment process between the buyer and PAYBOX is fully encrypted and protected. We use the SSL (Secure Socket Layer) protocol coupled with electronic banking systems.

• Data Privacy: This means that order information and credit card numbers do not circulate in clear text over the Internet.
• No Data Retention: PAYBOX does not store card numbers after transmitting the transaction to the merchant's bank.
• Restricted Access: No individual has access—neither electronically nor in printed form—to the buyers' credit card details.
• Zero Risk: The risk of having your credit card number "hacked" during a purchase on a website equipped with PAYBOX SYSTEM is zero.

Security Steps During Online Payment

For every payment request, the buyer is redirected from the merchant server to the PAYBOX SYSTEM payment server, which is directly connected to the banking network.

1. Encrypted Access: The buyer arrives on an SSL-encrypted payment page.
2. Data Entry: Entry of the card number, expiry date, visual cryptogram (CVV), and authorization request. The link between the buyer and the PAYBOX SYSTEM server is established via HTTPS, a secure protocol that encrypts all exchanged information. This protects data sent over the Internet and guarantees that the card number cannot be intercepted by a third party. The PAYBOX homepage identifies the merchant, proving the business has been authenticated.
3. Bank Verification: Once the card number passes the first level of control (Luhn algorithm, blacklists, etc.), the server sends an authorization request to the merchant's bank center using standardized banking protocols over a specialized telecommunications network.
4. Authorization: The bank's authorization center returns an authorization number or a refusal. If accepted, PAYBOX SYSTEM:
   • Displays a payment receipt on the buyer's screen (optional).
   • Sends the receipt via email to both the buyer and the merchant.
   • Crucially, the card number is NEVER sent back to the merchant.
5. Redirection: The buyer is automatically redirected back to the merchant's website to continue their visit.

Advanced Fraud Prevention

PAYBOX Services has developed a proprietary process allowing PAYBOX SYSTEM to monitor cardholder behavior in real-time. This prevents the payment server from being used to test automatically generated card numbers or for other types of attacks:

• BIN searches (by increment, derivation, or mask).
• Multiple attempts with different expiration dates.
• Random IP addresses.
• "Nomadic" cards, etc.

To use a PAYBOX card payment service, a merchant must hold a dedicated "VAD" (Distance Selling) e-commerce account with a recognized banking institution.

PAYBOX Platform Certification

Following rigorous audits, VISA EUROPE recently approved PAYBOX SERVICES under the AIS (Account Information Security) program. This confirms that PAYBOX applies the highest levels of security and integrity, supported by continuous technological monitoring. PAYBOX SERVICES was the first French operator to be certified under this demanding program.

PAYBOX SERVICES holds multiple approvals and certifications from GIE Cartes Bancaires, VISA, and MASTERCARD, as well as private issuers and acquirers for both Distance Selling and Proximity Payment (PAYBOX PROXI) services.

Furthermore, PAYBOX SERVICES is PCI-DSS (Payment Card Industry Data Security Standard) certified by VISA and MASTERCARD. This annual certification guarantees the ongoing security and integrity of the platform.