Glossary

When discussing online payments and e-commerce, many industry terms are used, which can sometimes be confusing. Below, you will find a list of commonly used terms with descriptions of their meanings in relation to OnPay and online payments.

Term Description
3D-Secure A security protocol designed to add an extra layer of protection to online payments by asking the customer to authenticate the payment using a unique authentication code provided by their bank. The process is managed by the card issuer.
Acquirer A financial institution that processes payments on behalf of the card issuer. An acquiring agreement is needed to receive card payments.
Acquiring agreement A contract between a merchant and an acquirer that allows for receiving card payments.
ACS Access Control Server. A component of the 3D Secure protocol.
API Application Programming Interface. Used for custom software integrations to communicate with OnPay.
Capture The process of finalizing a payment, specifically transferring a payment amount from the customer to the merchant. (Will be marked with "Approved" in the log when successful)
Dankort Secured by Nets 3D Secure validation of Dankort payments in Denmark, typically using MitID.
Data controller The merchant.
Data processor In this case, OnPay.
Data subject The card holder/customer.
Cardholder The end customer (the person holding the card in their hand).
Liability shift The transfer of responsibility for fraudulent transactions from the merchant to the card issuer or acquirer, depending on the payment method and authentication used.
PSP Payment Service Provider. This is equal to the service OnPay offers.
SCA Strong Customer Authentication. A security protocol required by the Payment Services Directive 2 (PSD2), which aims to reduce fraud. In practice this is achieved using 3D Secure and is required for all EU payments. In some cases SCA can be achieved using a wallet service.
SSL Secure Socket Layer. A security protocol that encrypts data transmitted over the internet.
Response codes Codes returned by a PSP or acquirer indicating a simplified status of a payment transaction.
TLS Transport Layer SSecurity. A security protocol that encrypts data transmitted over the internet.
URL Uniform Resource Locator. The address of a resource on the internet, such as a web page or file. Commonly known as a web- or internet address.

Notice: Information regarding coverage of any fraudulent transactions carried out with Dankort Secured by Nets and 3D-Secure: Nets does not have liability shift (coverage) for fraudulent transactions carried out through Dankort Secured by Nets. However, this is the case in the event of fraud on transactions carried out with 3D-Secure.