payment security mechanism