What Is Third-Party Risk Management (TPRM)? A Practical Guide
Solomon Amos · 2 Nov 2026 · 10 min read
VerifiedOxPay M Sdn Bhd is listed in the Visa Global Registry of Service Providers for PCI DSS (Listed on the Visa Global Registry as PCI DSS validated through 2027-07-31), dated 18 Oct 2023, assessed by SISA. CertReports last verified this on 2 Nov 2026 from the registry.
| Source | Captured | Quote | Links |
|---|---|---|---|
Visa Global Registry of Service Providers Official registry · HTTP 200 | 2 Nov 2026 | OxPay (M) Sdn Bhd: PCI DSS, assessor SISA, valid through 2027-07-31 | Live pagesha256 5dcf11d9ce |
Visa Global Registry of Service Providers Official registry · HTTP 200 | 26 Oct 2026 | OxPay (M) Sdn Bhd: PCI DSS, assessor SISA, valid through 2027-07-31 | Live pagesha256 8cffe2d300 |
| Source | Captured | Quote | Links |
|---|---|---|---|
Visa Global Registry of Service Providers Official registry · HTTP 200 | 19 Oct 2026 | OxPay (M) Sdn Bhd: PCI DSS, assessor SISA, valid through 2027-07-31 | Live pagesha256 c72d0dcc4b |
| Source | Captured | Quote | Links |
|---|---|---|---|
Visa Global Registry of Service Providers Official registry · HTTP 200 | 2 Nov 2026 | ECKOH: PCI DSS, assessor MCI Communications, Inc. dba Verizon Business Services, valid through 2026-09-30 | Live pagesha256 1ab8175716 |
Visa Global Registry of Service Providers Official registry · HTTP 200 | 26 Oct 2026 | ECKOH: PCI DSS, assessor MCI Communications, Inc. dba Verizon Business Services, valid through 2026-09-30 | Live pagesha256 ece3ccbd21 |
Visa Global Registry of Service Providers Official registry · HTTP 200 | 17 Sep 2026 | OxPay (M) Sdn Bhd: PCI DSS, assessor SISA, valid through 2027-07-31 | Live pagesha256 e4c7feb972 |
Only a registry listing (Visa Global Registry, Mastercard SDP) or an AOC letter is strong evidence. In the Visa registry only rows validated as PCI DSS with a validation date count; Third Party Agent registrations are not PCI evidence.
Read the PCI DSS guide and browse all vendors with evidenceOxPay M Sdn Bhd is listed as a PCI DSS validated service provider, assessed by SISA, valid through 31 Jul 2027, as of 2 Nov 2026.
Every state carries a capture date, a source and a snapshot link. Registry rows come from the official registry data; vendor statements come from the vendor’s own page or trust centre; nothing is inferred. Vendors can dispute any row and corrections ship within two business days.
Similar vendors (shared product tags) whose PCI DSS row is verified or vendor-stated, ranked by similarity.
No same-category vendor has PCI DSS evidence in the index yet.
Solomon Amos · 2 Nov 2026 · 10 min read
Solomon Amos · 23 Oct 2026 · 9 min read