Visa Regs & Cascading Billing/Programming Question

[TheJimmy]

Hey yall,

for those of you that do cascading billing I have a quick question.

A programmer I'm working with on building my top layer affiliate script mentioned that he thought it was 'illegal or not kosher' by Visa's regs to 'store' the CC info, so he was very iffy about adding the cascading billing/process to the script...


HOWEVER, I know that it is doable, is it acceptable to just store all other pertinent info and just retain the CC # in memory, but not permanently stored?

or am I'm way off the mark?

thanks in advance for anyone that replies that knows what the hell I"m talking about...


hit me up on ICQ if you prefer: 5702550

[Petr]

If I'm not mistaken, you can store the cc details only if you are a mechant account holder. If you use any kind of third party billing solution, you actually do not have an access to CC number and expiration at all. So even if you use some kind of cascading proggy (such as MPA2), surfers have to submit this info over and over again. You can only pass through their name, address, username, password and email address.

[SextrafficPete]

jimmy you homo

[TheJimmy]

I'm only g4y for you Petey-wheaty ;)

you know DAT...

[drunkdollars]

Most cascading billiing has the surfer re enter CC info .

This is if im not mistaken a regulation by ibill epoch etc

[Kimmykim]

Visa/MC do not allow anyone but the merchant account holder to access the cc information. I believe anyone you see doing it differently is violating the policy and wont be doing it once the processor sees it.

[TheJimmy]

See, I just needed to hear the gospel from KK


Thanks everyone, I think I got it....enough anyways to move it forward...


gratzie

[Chris Mallick]

Originally posted by Kimmykim
Visa/MC do not allow anyone but the merchant account holder to access the cc information. I believe anyone you see doing it differently is violating the policy and wont be doing it once the processor sees it.

And....

If you are a merchant you must encrypt the data and pass Visa's CISP (Customer Information Security Proceedure) Audit. It only takes about 6 weeks and costs a bit over $40K. The good news is it is also a giant pain in the ass to go through. One of the toughest audits I've ever seen.

Bottom line: Don't store the data unless you have passed the CISP... you could lose your merchant account.

Just my

C