The operating principle of One Click Payment technology consists in storing the buyer’s card data (the buyer enters it on the payment page of the online store when paying for the first time) for further automatic use for future purchases.
Easy, isn’t it?
Your merchants simply collect and store their buyers’ credit card numbers, link each card to its owner’s account, and when a regular buyer places another order, all they have to do is ask politely whether Sir or Madame wants the shop to debit their account (such-and-such card number) with the cost of the purchase.
The buyer just clicks the button “I accept” or “Pay” and the shop itself will send the previously saved card number and all the necessary information to the payment service provider to complete the transaction.
But there is one catch.
Card data is sensitive and valuable information, which is constantly hunted for by all sorts of cybercriminals. The card payment industry has a strict PCI DSS standard designed to prevent this information from getting into the wrong hands.
Any member of the e-commerce market, dealing with card data, must undergo certification for compliance with this standard. For most online stores it is usually too expensive and difficult to go through. And, therefore, they have no right to collect and store their customers’ card data. The good news is they don’t really need this right, because the One Click Payment technology uses the so-called “tokens”.