As e-commerce fraud rises, new security standards (PCI DSS 4.0.1) will take effect in March 2025, requiring online retailers to secure their entire website, strengthen authentication, and monitor third-party scripts and payment pages. Merchants must assess their compliance level, implement necessary security controls, and document efforts to meet the new requirements, with larger businesses facing stricter rules.
South Africa: New Security Rules for Online Payments
Public
Other countries
Author: Ivana Picajkić
Category:
General subject related
Views:
177
Content accuracy validation date:
28.03.2025
Content accuracy validation time:
08:35h
As e-commerce grows, so do security threats like e-skimming, where hackers steal credit card data by exploiting website vulnerabilities. To combat this, PCI DSS 4.0.1, a stricter security standard, will take effect in March 2025, requiring online merchants to strengthen their payment security measures.
What are the important changes for retailers?
- Full-Site Security – Merchants must secure their entire website, not just the payment form, to prevent cyberattacks,
- Stronger Authentication – Enhanced password rules and multi-factor authentication are mandatory,
- Third-Party Script Monitoring – Merchants must track and authorize all scripts, including those from third parties, to prevent unauthorized access to customer data,
- Payment Page Monitoring – Retailers must set up alerts to detect unexpected changes that may indicate a security breach.
Merchants are categorized into four levels based on transaction volume, with larger businesses facing stricter requirements:
- Level 1: Over 6 million transactions per year
- Level 2: 1-6 million transactions per year
- Level 3: 20,000-1 million transactions per year
- Level 4: Fewer than 20,000 transactions per year
What are the next steps for retailers?
- Determine your compliance level: Your PCI DSS scope (the extent to which you need to comply with the standard) is determined by how you handle cardholder data,
- Understand the requirements by reviewing the PCI DSS v 4.0.1 (Available for download through the PCI Security Standards Council),
- Assess your current security level by identifying gaps and areas for improvement,
- Implement necessary security controls based on your chosen integration method,
- Document your compliance efforts, which requires you to maintain records of policies, procedures, and assessments.
A good step to ensure readiness before the deadline is also speaking to a security expert or a webmaster.
Other news from Other countries
Vietnam's New Invoice Regulations Take Effect June 1, 2025
Public
Other countries
Author: Ivana Picajkić
Other countries
Author: Ivana Picajkić
Decree 70/2025/ND-CP revises invoice issuance timing for high-volume services and adds rules for insurance, lottery, casino, and prize-based electronic games. Starting June 1, 2025, business households with annual revenue ≥1 billion VND (38,454.14USD) and enterprises selling goods must use e-invoices from cash registers. Erroneous invoices are prohibited. Adjustments to Invoice Issuance Deadlines... Read more
VAT Refund in Mexico: Get Up to 16% VAT
Public
Other countries
Author: Ema Stamenković
Other countries
Author: Ema Stamenković
Mexico offers foreign tourists up to 16% VAT refunds on purchases at affiliated stores, with minimum purchase amount of $1,200 and payment methods of cash, credit, or debit card. When customers are visiting Mexico, they can get back up to 16% of the VAT (Value Added Tax) they pay on purchases at participating stores. To get this refund, there are a few things you need to keep in mind: You need... Read more
South Africa Updates VAT Rules for Foreign Digital Suppliers (April 2025)
Public
Other countries
Author: Ljubica Blagojević
Other countries
Author: Ljubica Blagojević
South Africa’s new VAT rules (Regulations No. 5993, effective 1 April 2025) update the treatment of electronically supplied services by foreign digital providers. B2B-only suppliers no longer need to register for VAT, while B2C and mixed suppliers must register if their turnover exceeds the threshold. Intra-group digital services are VAT-exempt under specific conditions. The changes aim to moderni... Read more
Netherlands and EU's ViDA: New VAT Rules for Platforms in Accommodation & Transport
Public
Other countries
Author: Ljubica Blagojević
Other countries
Author: Ljubica Blagojević
Under the EU’s ViDA initiative, new VAT rules from March 2025 make platforms in the accommodation and transport sectors liable for VAT on short-term stays (≤30 nights) and road transport, unless the supplier provides a valid VAT/OSS ID or qualifies under an SME scheme. B2C services are taxed where used, B2B where the recipient is based. Platforms must keep transaction records for 10 years. The rul... Read more
Understanding U.S. Sales Tax for Online Retailers
Public
Other countries
Author: Ivana Picajkić
Other countries
Author: Ivana Picajkić
In 2024, U.S. ecommerce reached $1.192 trillion, with most online purchases involving taxable goods. Sales tax rates vary across more than 13,000 jurisdictions, and the applicable rate depends on state-specific sourcing rules, typically based on the shipping address, but sometimes the seller’s or billing address. Retailers must stay compliant with each state’s rules, including how shipping fees ar... Read more
Vietnam's New E-Invoicing Rules: What You Need to Know (Starting June 1, 2025)
Public
Other countries
Author: Ema Stamenković
Other countries
Author: Ema Stamenković
Vietnam's Decree 70/2025/ND-CP amends Decree 123/2020/ND-CP, enhancing e-invoicing for digital and cross-border businesses. It expands e-invoicing scope, sets issuance timelines, mandates invoice content and format, and requires businesses with over VND 1 billion(38483.80USD) revenue to use cash register e-invoices linked to tax authorities. Vietnam is updating its e-invoicing system through Decre... Read more
Latvia Embraces Digital Invoicing
Public
Other countries
Author: Ema Stamenković
Other countries
Author: Ema Stamenković
Latvia is implementing mandatory e-invoicing starting in 2025 to simplify transactions, boost tax compliance, and reduce the shadow economy. The centralized model will be implemented for B2G transactions and B2B transactions in 2026. The initiative aims to reduce tax evasion, increase efficiency, and standardize EU-compliant formats. Challenges include technical upgrades, staff training, and initi... Read more