GoFuckYourself.com - Adult Webmaster Forum - View Single Post

Validus · 07-14-2006, 07:21 AM

So what I don?t understand is this.

They ask me to send front & back of my credit card to them! This would mean that they have and store my CVC2 code. Now, reading the MasterCard regulations...

9.15.7 Storage of Account, Cardholder, and Transaction Data
A merchant and any DSE must not store in any system or in any manner, discretionary card-read data, CVC 2 data, PIN data, Address Verification Service (AVS) data, or any other prohibited information as set forth in the MasterCard Standards including, but not limited to, sections 2.5.5.1.1 and 2.8.2.1 of the Security Rules and Procedures manual, except during the authorization process for a transaction, that is, from the time an Authorization Request message is transmitted and up to the time the Authorization Request Response message is received.

2.1.6.2.9 Prohibited Information

?

MasterCard prohibits the recording of PIN data and CVC 2 data in any manner
for any purpose.

10.2.2 CVC 2 Data Storage Standards
Acquirers, merchants, or any agent representative thereof (including TPPs and DSEs), and any POI terminals or devices operated by any such entity, must not store CVC 2 data in any manner for any purpose. Issuers should not expect CVC 2 data in recurring transaction Authorization Request/0100 messages. At its discretion, MasterCard may impose a noncompliance assessment of up to USD 100,000 per individual violation, with a maximum aggregate assessment of USD 500,000 for additional or continuing violations during any consecutive 12-month period, for failure to comply with this requirement.

Now I might be missing something here, but this worries me. What is going to happen with my credit card copy? Where does it go? Who all gets access to my credit card number and CVC code?

I don?t know about this. Not like I am walking to my local bank branch or anything.

07-14-2006, 07:21 AM
Validus Confirmed User Industry Role: Join Date: Jul 2001 Location: Calgary, Canada Posts: 4,012	So what I don?t understand is this. They ask me to send front & back of my credit card to them! This would mean that they have and store my CVC2 code. Now, reading the MasterCard regulations... 9.15.7 Storage of Account, Cardholder, and Transaction Data A merchant and any DSE must not store in any system or in any manner, discretionary card-read data, CVC 2 data, PIN data, Address Verification Service (AVS) data, or any other prohibited information as set forth in the MasterCard Standards including, but not limited to, sections 2.5.5.1.1 and 2.8.2.1 of the Security Rules and Procedures manual, except during the authorization process for a transaction, that is, from the time an Authorization Request message is transmitted and up to the time the Authorization Request Response message is received. 2.1.6.2.9 Prohibited Information ? MasterCard prohibits the recording of PIN data and CVC 2 data in any manner for any purpose. 10.2.2 CVC 2 Data Storage Standards Acquirers, merchants, or any agent representative thereof (including TPPs and DSEs), and any POI terminals or devices operated by any such entity, must not store CVC 2 data in any manner for any purpose. Issuers should not expect CVC 2 data in recurring transaction Authorization Request/0100 messages. At its discretion, MasterCard may impose a noncompliance assessment of up to USD 100,000 per individual violation, with a maximum aggregate assessment of USD 500,000 for additional or continuing violations during any consecutive 12-month period, for failure to comply with this requirement. Now I might be missing something here, but this worries me. What is going to happen with my credit card copy? Where does it go? Who all gets access to my credit card number and CVC code? I don?t know about this. Not like I am walking to my local bank branch or anything.