For MasterCard:
http://www.mastercardmerchant.com/do...hant_rules.pdf
Page 5-2:
Quote:
2.8.2.1 Disclosure Restrictions for CVC 2 Data
Acquirers, merchants, and merchant service providers may not store CVC 2
data in any manner or for any purpose.
Assessments for failure to adhere to these CVC 2 data use and safeguarding
rules will apply. MasterCard may impose a noncompliance assessment of up
to USD 100,000 for each violation if the acquirer, or any of its merchants or
Member Service Providers (MSPs), fails to comply with these requirements
within 30 days of discovery or notice of noncompliance.
|
So as you can clearly see, for ANY Acquirers, merchants, and merchant service providers TO STORE CVV2 NUMBERS IN ANY WAY, SHAPE, OR FORM, IS ILLEGAL, AND DEALT WITH VERY STRICTLY ...
Could we start a CLASS ACTION to keep Epassporte honest I wonder??