Accept card payments safely.

Our merchant risk hub provides a wide range of best practice resources to help your business accept scheme credit or debit card payments safely.

Whether you're just starting out as a Westpac merchant or want to add new payment channels to your existing business, our guides, tips and articles make it easy to understand your responsibilities and how to better protect your business.

Here you'll find information that can help you reduce the risk of card fraud, stay up to date with Visa, Mastercard® and UnionPay International scheme rules, meet your compliance requirements and manage payment disputes. So that you can make your business more secure and deliver a great payment experience to your customers.

Protect your payment channels.

Find out how to strengthen the security of every payment channel you use in your business.

In-store payment (card present)

This type of transaction is made in a face-to-face environment where a customer physically presents their card and swipes, inserts or taps it on your EFTPOS terminal to make a payment.

In-store payment safety

Online payment (card not present)

This type of transaction is made online through a website and is also referred to as an e-commerce transaction.

Online payment safety

Over the phone payment (card not present)

Also referred to as mail order/telephone order (MOTO), this type of transaction is processed using a virtual or physical terminal.

Phone payment safety

Recurring payment (card not present)

This refers to a payment that is taken regularly from a customer's bank account for the ongoing delivery of goods or services (e.g. a weekly gym membership).

Recurring payment safety

Reduce the risks.

It's important to comply with the rules and requirements set by Westpac and the schemes (Visa, Mastercard and UnionPay International) to reduce the risk of fines, payment disputes or losing your merchant facility.

Meet your PCI DSS compliance requirements

Every business that accepts scheme debit or credit cards must comply with the Payment Card Industry Data Security Standard (PCI DSS). Find out how to make your business compliant.

Payment Card Industry Data Security Standard

Protect your payment environment

When cardholder information has been accessed by an unauthorised person with the intention to commit fraud, this is known as an account data compromise (ADC). Find out how you can help prevent and respond to an ADC.

Account data compromise

Help prevent payment disputes

Payments must be processed according to Visa, Mastercard and UnionPay International rules. Find out how to keep your business compliant at every stage of the payment cycle and what to do if a cardholder raises a payment dispute.

Payment disputes

Prepare your business for eight-digit BINs.

The International Organisation of Standards (ISO) is expanding the length of the issuing Bank Identification Number (BIN) from six to eight digits. This comes into effect from April 2022, so it's important to get your systems ready for the change.

Risk thought leadership articles.

The fight against non-stop fraud

July 2021

Provides an overview of supply chain cyber attacks, questions you need to be asking your internal teams and vendors as well as practical tips to prevent your business falling victim or being used in these types of attacks.

Non-stop fraud

Financial crime

June 2020

An update on financial fraud and scams targeting businesses, the psychological tactics fraudsters use and how to empower your people to recognise and deal with these fraudulent requests.

Financial crime

Credit card fraud

July 2019

Ideas to help protect your business and customers from credit card fraud - including recommendations on identifying risks, mitigating those risks and what to do if there's a breach.

Credit card fraud

Cyber security

March 2019

An overview of the latest cyber security threats we face in our business and simple strategies you can easily implement to protect your business.

Cyber security

Things you should know.

The information on this page is intended as a guide only. We make no warranty or representation, express or implied, regarding the accuracy of any information, statement or advice contained on this page. We recommend you seek independent advice before acting or relying on any of the information on this page. All opinions, statements and analysis expressed are based on information current at the time of writing from sources which Westpac believes to be authentic and reliable. Westpac issues no invitation to anyone to rely on this material.

Mastercard® is a registered trade mark and the circles design is a trade mark of Mastercard International Incorporated.

Links to other sites are provided for convenience only and Westpac accepts no responsibility for the availability or content of such websites.