Best Practices for eCommerce API Payments
Whether you’re using Square’s API or one of our partners, accepting eCommerce payments is a great way to establish or grow your business. It’s also important to take additional precautions on these types of orders to prevent fraud and disputes. Even a successful payment could be from a card that hasn’t yet been reported as stolen or compromised.
Be Cautious of Requests for Immediate or Expedited Shipping
Additionally you can check to see if the shipping address is a private or residential address. Mail drop locations such as Australia Post stores or freight forwarders are commonly associated with fraud and we do not recommend shipping to them.
Be Cautious of Large Orders for Expensive or Rarely Purchased Items
If the order seems out of the ordinary or too good to be true, you may want to request additional information from the buyer about their order.
Double Check the Billing Address with the Shipping Address
If the addresses are not near each other or are in a different state or country, it may be an indication that the buyer is not the true cardholder.
Provide Tracking Information and Delivery Confirmations
If you’re shipping a product, make sure to keep the tracking information and a signed delivery receipt showing goods delivered to the cardholder’s billing address.
Obtain Acknowledgement of Services Rendered
If you’re providing an in-person service, the card should be processed using a chip capable reader, like the Square Reader instead of via an eCommerce method. If you choose to accept an eCommerce payment for a service, be sure to have an itemised invoice with a statement of acknowledgement of services rendered to the cardholder’s satisfaction which has been signed and dated by the cardholder.
Obtain Acknowledgement of Terms and Conditions
At the time of checkout, have the cardholder electronically accept your terms and conditions of the sale, including your cancellation or return policy. Keep a record of this on file by attaching a copy to their customer profile in your Customer Directory.
Monitor Declined Cards
Declined cards can be a sign that someone is trying to pay using stolen credit card information. If you notice an order with mismatched billing and shipping information, review possible attempts to use multiple cards by logging into your Dashboard, selecting Sales > Transaction Status. If a customer attempted to pay with multiple cards within a short time frame, refund the successful payment.
eCommerce Platform Merchants
Third party eCommerce platforms (such as BigCommerce and Ecwid) may offer additional solutions such as Signifyd to minimise your risk. While we currently don’t offer this option, you may be able to find a solution on these platforms that works best for your business.
eCommerce API Merchants
If you’re using the developer API, consider passing additional information to Square about your orders such as buyer email addresses and shipping information. More order details help us to better protect you.