The story
POLi Version 3 was released in July 2012 and enabled payments on Macs and mobile devices; neither was possible on previous versions. The implementation logs into a user's online banking interface from an automated virtual machine using a user's provided bank credentials, in order to direct debit the purchase amount.
Version 2 is a.NET Framework ClickOnce application. This version is still operational in New Zealand Payments for several banks. This version to was built with security at the expense of user experience, as the process of downloading the.NET ClickOnce application is poor, and requires additional plugins for Firefox and Chrome.
POLi Version 1 was an ActiveX control. This version was used by some, but never gained traction due to security concerns with ActiveX. This version is no longer operational. Greg Day, a security analyst at McAfee stated "Using ActiveX for online payments is the kind of thing that would make me run a mile. [It] is probably the most used route for hackers to get in... and steal personal information.". Since 2008 the system has been operating on the.NET technology platform. This still gives rise to possible security breaches via downloading untrusted software, and the possible infiltration of malware.
In July 2023, Australia Post announced that the Australian arm of POLi Payments would close down at the end of September that year.
From Wikipedia’s article on POLi Payments, shared under CC BY-SA 4.0.5