Payment Cards and eCommerce Overview

Policy information pertaining to the Payment Card Industry – Data Security Standard (PCI-DSS), and McMaster University Merchant requirements, is incorporated in Policy for the Acceptance of Payment Cards and eCommerce Payments. and The Information Security Policy can be found in link https://informationsecurity.mcmaster.ca/section/policy/.

McMaster University has targeted policy compliance for the university at the Self Assessment Questionnaire (SAQ) “C” level in order to cover the majority of our merchants who are using SAQ-A through C processes.

All McMaster University merchants are required to be in compliance with the PCI-DSS and McMaster University Policies, specifically Policy for the Acceptance of Payment Cards and eCommerce Payments. Overall responsibility for coordination of PCI compliance rests with McMaster University IT Security and Financial Affairs.

The following guidelines are presented to assist Merchants with understanding their role in compliance with PCI-DSS.

• Procedures for the Acceptance of Payment Cards and eCommerce Payments
• Fraud Policy
• Statement on Collection of Personal Information and Protection of Privacy
• Skimming Prevention – Best Practices for Merchants
• Chargeback tips

Terms of Reference

The University’s Preferred Payment Provider accepts the following payment methods:

Payment Cards:

1. Visa and Visa Debit
2. MasterCard and MasterCard Debit
3. AMEX
4. Interac
5. Discover
6. Union Pay
7. Diners Club
8. JCB
9. QR code payments (to be added soon)

Gift cards:

1. Moneris gift, promo or loyalty cards
2. Third party Gift cards

Moneris Checkout (new pay page)

1. Includes all above (1-8)
2. Google Pay
3. Apple Pay (to be added soon)

Requests to add and remove payment cards to the existing merchants should be submitted to Financial Affairs – Manager Financial Reporting with the merchant information