Tuesday, January 6, 2009

The New Paymex

I had a crack at installing Paymex on my osCommerce website this evening. I will try to summarise the experience:

Paymex provide an osCommerce module for download from their website. It is mind numbingly simple to install. A simple upload of files is all that is required. There is absolutely no php editing required. This is always a plus for me. osCommerce code is painful enough and in a production environment any update that does not require php code editing is very useful.

5 out of 5 for installation.

There is only one item of identification required by the Paymex module config. A business id. This looks remarkably like a windows uid. I just copy pasted it from the Paymex website while logged in there.
There is the option to have the paymex module enabled or disabled, Test mode or Production mode, set the acknowledged order status and the sort order.

So not much to configure really and very simple to understand.

4 out of 5 for configuration. Not enough detail. Concerns around security especially with regard to certificates on IPN.

Functionallity ( osCommerce Module Specific )
I would have liked to see something there about enabling or disabling IPN ( instant payment notification ) and the URL for the IPN. This made me wonder about what Paymex do about IPN. Those of you with osCommerce websites you will know that IPN is critical. The site has to be notified on successful completion of a sale. Without it the products stock count doesn't get updated and the order is left in a pending / preparing state.

Paymex offer do provide autmatic IPN for either RETURN URL, HTTP POST or HTTP GET. The provided osCommerce module has the IPN option set to RETURN URL. This means that if the web browser is closed or the customer navigates away from the site, then the site will NOT BE NOTIFIED of the successful completion of a sale. The merchant will, however, still receive an email from Paymex with information on the sale so all is not lost.

2 out of 5 for Functionality. Once the osCommerce module included HTTP POST based IPN and details on how ssl is implemented throughout the IPN process, I will gladly upgrade this to a 4 or a 5 out of 5.

Sadly, Paymex has a very poor reputation right now. I am not really convinced that it is all deserved. From what I understand, one of their merchants was involved in some kind of fraud and the resulting card scheme charge-back brought the business into massive debt. Unfortunatley the damage has been done. The problem for merchants was that their funds in the Paymex account was compromised.

To fix the situation the new Paymex ( not sure if its new owners or what ? ) have done a deal with a big New Zealand bank to set up a trust account that will hold the merchants' funds. Are they saying that this bank will secure all funds in that account?

Lets hope that the merchants' money will actually be deposited there. I wonder if merchants can request from the bank, a statement showing the funds in the trust account.

I will be watching Paymex closely and deciding if they should process my transactions.

I do like the simplicity of their solution. I also like that they are in New Zealand.

No comments: