Onafriq
PCI DSS evidence
We make payments as easy as making a phone
VerifiedOnafriq and PCI DSS
Onafriq is listed in the Visa Global Registry of Service Providers for PCI DSS (Listed on the Visa Global Registry as PCI DSS validated through 2027-08-31), dated 9 Jul 2010, assessed by VikingCloud, Inc.. CertReports last verified this on 19 Oct 2026 from the registry.
Evidence
- Kind
- Attestation
- Issued or listed
- 9 Jul 2010
- Expires or valid through
- 31 Aug 2027
- Auditor or assessor
- VikingCloud, Inc.
- Scope
- THIRD PARTY SERVICER
| Source | Captured | Quote | Links |
|---|---|---|---|
Visa Global Registry of Service Providers Official registry · HTTP 200 | 19 Oct 2026 | Ticketmaster Canada, LP/iATS, LLC: PCI DSS, assessor VikingCloud, Inc., valid through 2027-08-31 | Live pagesha256 babb38d205 |
Visa Global Registry of Service Providers Official registry · HTTP 200 | 17 Sep 2026 | Global Technology Partners: PCI DSS, assessor Prescient Security, LLC, valid through 2027-07-31 | Live pagesha256 2554540aa8 |
- Kind
- Attestation
- Issued or listed
- 23 Feb 2007
- Expires or valid through
- 31 Jan 2027
- Auditor or assessor
- BroadBand Security, Inc. (BBSec)
- Scope
- PAYMENT FACILITATOR, THIRD PARTY SERVICER
| Source | Captured | Quote | Links |
|---|---|---|---|
Visa Global Registry of Service Providers Official registry · HTTP 200 | 19 Oct 2026 | NHN KCP CORP: PCI DSS, assessor BroadBand Security, Inc. (BBSec), valid through 2027-01-31 | Live pagesha256 edf4b7885f |
What is not public
- The Visa registry lists the assessor and the date the validation runs through, not the services in scope of the attestation of compliance.
What PCI DSS means, and what it does not
Only a registry listing (Visa Global Registry, Mastercard SDP) or an AOC letter is strong evidence. In the Visa registry only rows validated as PCI DSS with a validation date count; Third Party Agent registrations are not PCI evidence.
Read the PCI DSS guide and browse all vendors with evidenceQuestions buyers ask
Is Onafriq PCI DSS compliant?
Onafriq is listed as a PCI DSS validated service provider, assessed by VikingCloud, Inc., valid through 31 Aug 2027, as of 19 Oct 2026.
How does CertReports verify this?
Every state carries a capture date, a source and a snapshot link. Registry rows come from the official registry data; vendor statements come from the vendor’s own page or trust centre; nothing is inferred. Vendors can dispute any row and corrections ship within two business days.
Change history
- 19 Oct 2026PCI DSS renewedExpiry moved from 2027-07-31 to 2027-08-31.
- 19 Oct 2026PCI DSS auditor changedAuditor changed from Prescient Security, LLC to VikingCloud, Inc..
Alternatives with PCI DSS evidence
Similar vendors (shared product tags or the Payments category) whose PCI DSS row is verified or vendor-stated, ranked by similarity.
Pay10 Services Private
Payments
Pay10 offers secure digital payment gateway solutions with seamless digital transactions, cross-border payments, and fast, reliable payment
Veem Payments
Payments
Veem makes global payments simple, with competitive exchange rates and no hidden
2C2P
Payments
2C2P is a payment service provider that helps companies in emerging markets accept and make payments
cross switch
Payments
Cross Switch helps you simplify, scale and streamline your payments — from pay-ins to pay-outs, local and
Oceanpayment
Payments
Online payment processing for global
Aleta Planet
Payments
Aleta Planet accelerates business growth with customisable payment solutions, facilitating seamless transactions across
Rapyd Financial Networks
Payments
Accept, send and manage payments to anyone
Zamupay
Payments
Zamupay is a licensed payment gateway for Kenya and
Understand PCI DSS evidence
All articlesISO 27001 Annex A: What Buyers Should Actually Ask For
Solomon Amos · 23 Oct 2026 · 9 min read
TISAX Explained: What the AL1 to AL3 Levels Actually Mean
Solomon Amos · 16 Oct 2026 · 9 min read