Before you take payments

Overview

The OnlinePay dashboard gives you a unified view of all your transactions acquired through certain products provided by your bank in real-time, including OnlinePay, EFTPOS Now, EFTPOS Flex, and EFTPOS Air, all in one dashboard.

ℹ️

Note

For St George, BankSA, and Bank of Melbourne merchants, transactions will display OnlinePay and EFTPOS Now transactions only.

The OnlinePay dashboard provides performance analytics and real-time transaction listings, with the ability to take payments and process refunds direct from the dashboard.

⚠️

Important

You may have access to fraud management features such as blocking rules or via the use of a third-party provider, to enable real-time decisioning and intelligence that is intended to reduce fraud. You are responsible for reviewing any fraud management features and assessing whether they will impact your business processes. We are not responsible to you in relation to their effectiveness in reducing fraud or the impact to your business processes.

Set up user roles

You will be provided with an admin account to access your OnlinePay dashboard. This account enables you to establish other users as required to help manage your payments. The admin account will be setup with Merchant Admin and Merchant Supervisor access, which provides access to all product features, including establishing blocking rules for transactions, and access to process refunds.

An admin account can create and manage users in the dashboard via Administration > Account Setup > Users.

See Set up roles for more information about different roles and their permissions.

Set up digital wallets

OnlinePay supports both Apple Pay and Google Pay™ for all payments except Virtual Terminal. In order to take payments using Apple Pay or Google Pay on your Checkout or payment links, you will need to set up your wallets as a payment method.

You can access your digital wallet configuration in the OnlinePay dashboard under Administration > Advanced Settings > Wallets.

See Digital wallet payments for more information.

Customise your theme

OnlinePay provides a default theme for your Checkout page. You can customise the theme to match the look and feel of your own site by adding your logo, colours, and font. When the theme is set as the default it will be applied to all Checkout and Pay by Link pages.

Theme customisation is available in the dashboard under Administration > Advanced Settings > Checkout Themes or using the Checkout API. See Customise your Checkout for more information about creating a theme in the dashboard, or Customise the Checkout theme for information about using the Checkout API.

Review blocking rules

You can set rules that will enable OnlinePay to block transactions from processing based on those rules. The blocking rules can help you to stop potentially fraudulent transactions. The rules apply to future payments only.

Blocking rules apply to all facilities linked to your Merchant ID (MID). You can set multiple blocking rules. The transaction will be blocked if any of the rules are triggered, and may result in legitimate transactions being blocked.

ℹ️

Note

If you use a Shopping Cart integration or external fraud tool, you may choose to use tools solely provided via these providers, or they can be used in combination with the OnlinePay blocking rules.

⚠️

Important

your bank has established some default blocking rules on your behalf. You should review these rules and make updates as necessary before you start taking payments.

We recommend that you review these rules on a regular basis. See Protecting your business against card fraud for further information.

You can manage your blocking rules in your dashboard under Administration > Advanced Settings > Blocking Rulesets. See Manage Blocking Rules for more information.

Set up surcharging

Merchants must follow the card payment surcharge rules when accepting card payments via OnlinePay. Surcharging is the practice of charging a customer an additional fee to help recover the cost of accepting card payments. your bank provides information about card payment surcharge rules for merchants in The rules for card payment surcharges.

By default, no surcharge is applied to transactions made using OnlinePay features. You can set up surcharging in the dashboard under Administration > Payment Provider Contracts > Contract Name. Surcharge can be configured at the bottom of the contract settings page.

The surcharge amounts you set will be applied to all transactions processed through OnlinePay. You can set a percentage of the transaction amount as the surcharge.

⚠️

Important

You must ensure that any surcharge applied does not exceed the cost of accepting card payments, please refer to The rules for card payment surcharges for more information.

3D Secure

3D Secure is a service that provides an extra layer of protection to our merchants and their customers for their online purchases and may deter unauthorised transactions. This additional layer of authentication gives business owners protection because it shifts the liability away from them to the cardholder’s bank for fraudulent chargebacks. The service is called Visa Secure (previously Verified by Visa) and Mastercard ID Check™ (formerly Mastercard SecureCode).

Merchants are automatically enrolled in 3D Secure with onboarding to OnlinePay.
You can review your 3D Secure settings via your dashboard under Administration > Advanced Settings > 3DS Contract or via the 3D Secure API.

ℹ️

Note

Check the blocking rules that have been applied to your organisation to ensure that they are appropriate for your business. These rules stop failed 3D Secure transactions from processing.

Modifying or removing 3D Secure blocking rules may allow transactions that have failed 3D Secure authentication to be processed.

Notifications and webhooks

You can set up notifications and webhooks to get updates on certain events or payment actions that occur. Data sent in the notifications will be sent to your email or chosen URL endpoint. Examples of events or payment actions are Sale approved, Refund approved, or Refund declined.

ℹ️

Note

Notifications can be delivered to only one email address per notification.

Users with Merchant Admin and Merchant Supervisor roles can create and update notifications and webhooks in the dashboard under Administration > Advanced Settings > Notifications.