Security and Fraud

We take the data security of our customers very seriously

We have a multitude of automated and manual checks in place to protect you from fraudulent transactions. Our security protocols are as, if not more, robust than South African banks.

PCI-DSS Level 1 Compliant

All your customers' credit card payments are done in our secure environment.

Extended Validation SSL

We use Extended Validation SSL with 2048-bit encryption, the highest level encryption available.

Secure servers

Our website, payments page and help site are hosted on secure servers, safeguarding against phishing attacks.

ASV Scans on a weekly basis

We run weekly network scans to look for new possible vulnerabilities and certify quarterly.

3D Secure

This extra layer of security is used for all online transactions using a credit card.

Two-factor authentication

This extra layer of security is available to restrict access to your PayFast account.

GEO IP Tracking

By monitoring where transactions originate from we can look for mismatches with the card’s issuing country.

Validation checks

Payments and card details are automatically checked against large online databases of blacklisted details.

BIN/IIN Validation

Checks the card-issuing bank locations and merchants can choose to enable/disable payments from certain countries.

Web application firewall

PayFast utilises WAF technologies to detect and stop malicious activity before it reaches our servers.

Fraud Reviews

All suspicious transactions are manually reviewed by our support team.