There are always some risks associated with making online payments, both for customers and merchants. So, there are three security measures to look out for and understand whether your eCommerce Payment Gateway is responsible:
Secure Socket Layer (SSL) - the merchant is responsible for
Payment Card Industry Data Security Standard (PCI DSS) - the member storing customer’s payment details are responsible for
3D Secure - all payment gateways and banks are using this method. But, investigate more if you are using global entities.

These are some main factors to consider to select the right eCommerce Payment Gateway:

• Availability: Confirm the availability of the payment gateway you choose.
• Transaction fees: The payment gateway must charge fair transaction fees.
• Recurring payments: eCommerce businesses need to set up recurring payments for their subscription services.
• Security: Choose a payment gateway that follows security standards by Payment Card Industry Data Security Standard (PCI DSS) compliance.

A hosted eCommerce Payment Gateway will redirect the customers away from your website to continue with the payment process and you can’t control the customers during the payment process. When the customer goes to pay, they redirect to the PSP page. The customer provides his payment details like credit card or bank details there. And after verification, the payment is made securely by the PSPs. After completing the payment successfully, the customer is again redirected to the eCommerce page.