For those who have their own merchant accounts

Collapse
X
 
  • Time
  • Show
Clear All
new posts
  • Validus
    Confirmed User
    • Jul 2001
    • 4012

    #16
    Originally posted by sperbonzo
    That is correct. CVV is quite often used for initial authorization in order to pass a gateways fraud screening, but is not mandated for all transactions, and is not used for rebills. The processing gateway is not allowed to store the CVV any more than the merchant is. It is actually up to the acquring bank as to whether or not the CVV is required for all transactions or not.

    For example, when you use your card at a gas pump, or ATM, the CVV is not required. It varies from bank to bank, MCC to MCC, and transaction type to transaction type.

    Oh, interesting. Ah well, I must have read the regulations wrong then. This is what it says:

    An acquirer?s fraud loss control program must meet the following minimum
    requirements, and preferably will include the recommended additional
    parameters. The program must automatically generate daily fraud monitoring
    reports or real-time alerts. Acquirer staff trained to identify potential fraud
    must analyze the data in these reports within 24 hours.

    To comply with the fraud loss control Standards, acquirers also must transmit
    complete and unaltered data in all card-read authorization request messages,
    and also CVC 2 for all Card Not Present (formerly MO/TO), voice, and
    e-commerce transactions.

    Additionally, acquirers with high fraud levels must:

    ? Install ?read and display? terminals in areas determined to be at high risk
    for fraud or counterfeit activity, or
    ? Install EMV chip terminals

    Comment

    • sperbonzo
      I'd rather be on my boat.
      • May 2003
      • 9750

      #17
      Originally posted by Validus
      Oh, interesting. Ah well, I must have read the regulations wrong then. This is what it says:

      An acquirer?s fraud loss control program must meet the following minimum
      requirements, and preferably will include the recommended additional
      parameters. The program must automatically generate daily fraud monitoring
      reports or real-time alerts. Acquirer staff trained to identify potential fraud
      must analyze the data in these reports within 24 hours.

      To comply with the fraud loss control Standards, acquirers also must transmit
      complete and unaltered data in all card-read authorization request messages,
      and also CVC 2 for all Card Not Present (formerly MO/TO), voice, and
      e-commerce transactions.

      Additionally, acquirers with high fraud levels must:

      ? Install ?read and display? terminals in areas determined to be at high risk
      for fraud or counterfeit activity, or
      ? Install EMV chip terminals

      No, you aren't reading it wrongly, (and notice that it applies specifically to card-not-present/MOTO transactions), however, in different areas of the VISA regulations (which are the size of a full set uf encyclopedia) there are detailed exceptions and conditions. Also associated member banks (banks, not processors) can negotiate certain conditions with VISA to allow for exceptions. Also protocols and procedures vary in each of the six VISA regions.
      Michael Sperber / Acella Financial LLC/ Online Payment Processing

      [email protected] / http://Acellafinancial.com/

      ICQ 177961090 / Tel +1 909 NET BILL / Skype msperber

      Comment

      • trashymedia
        Confirmed User
        • Sep 2005
        • 157

        #18
        Surprised

        I am surprised that Versign is doing adult, as many of the big companies pulled out around when Card Services dropped all of us. We have two tangible account through Net Billing and love the service. Their fees may be even cheaper as we had a friend that used Verisign, and if I recall correctly, his setup fees were outrageous...
        Jeff
        Trashy Bucks pays you 60% recurring for life on subscription sales or 25.00 per join, 30% for every DVD sold and 5% for webmaster referrals! Got interracial, cumshot, fetish, foot worship, video on demand or amateur niche traffic?


        ICQ 172067634

        Comment

        • NETbilling
          Confirmed User
          • Jan 2002
          • 8598

          #19
          Originally posted by baycouples
          Why not?
          Hi,

          Storing CVV2 #s is strictly against card association rules and could result in huge fines leading to hundreds of thousands of dollars. If you are seeing a 50% decline rate in rebills there is certainly a problem with eith initial trasnactions or the scrubbing itself. What is the highest reason for the declines that you are seeing?

          Mitch

          p.s. Thank you for the kind words everyone.


          Mitch Farber
          CEO - NETbilling, Inc.
          Email / Phone: 888-357-8166 / 661-252-2456
          Transaction processing & 24/7 call center services with exceptional rates and flexibility, since 1998!

          Comment

          • sfera
            Confirmed User
            • Aug 2005
            • 8597

            #20
            mvc sounds like a good option

            Comment

            • baycouples
              Confirmed User
              • Mar 2004
              • 1341

              #21
              OK! OK! I got it! Can't store the CVV/CVC code. But here's how I'll do it:

              Check for CVV/CVC code at the first upgrade and only allow the upgrade if that's correct. Then I'll store all of the information EXCEPT for the CVV/CVC code and rebill customers without using it in the future.

              Is that a good plan?

              Comment

              • NETbilling
                Confirmed User
                • Jan 2002
                • 8598

                #22
                Originally posted by baycouples
                OK! OK! I got it! Can't store the CVV/CVC code. But here's how I'll do it:

                Check for CVV/CVC code at the first upgrade and only allow the upgrade if that's correct. Then I'll store all of the information EXCEPT for the CVV/CVC code and rebill customers without using it in the future.

                Is that a good plan?
                You are not storing credit card #s are you?

                Mitch


                Mitch Farber
                CEO - NETbilling, Inc.
                Email / Phone: 888-357-8166 / 661-252-2456
                Transaction processing & 24/7 call center services with exceptional rates and flexibility, since 1998!

                Comment

                • baycouples
                  Confirmed User
                  • Mar 2004
                  • 1341

                  #23
                  Originally posted by NetBilling
                  You are not storing credit card #s are you?

                  Mitch
                  Not right now, but I will start to. Why?

                  Comment

                  • Fetish
                    Confirmed User
                    • Mar 2005
                    • 823

                    #24
                    We have used Netbilling for years. Nobody else comes close to them as far as service and support. Verisign sucks (we used them previously).

                    Comment

                    • baycouples
                      Confirmed User
                      • Mar 2004
                      • 1341

                      #25
                      Originally posted by Fetish
                      We have used Netbilling for years. Nobody else comes close to them as far as service and support. Verisign sucks (we used them previously).
                      What are the good points about the Netbilling and what are the negative points about VeriSign?

                      Comment

                      • venus
                        Confirmed User
                        • Jan 2003
                        • 3112

                        #26
                        I have a merchant account with humboldt bank and use netbillings secure gateway and call center, they are awsome.

                        50% sounds way high...talk to mitch at netbilling.com
                        Muscle/Fitness Adult Affiliate Program
                        Since 1997 www.venuscash.com

                        Comment

                        • venus
                          Confirmed User
                          • Jan 2003
                          • 3112

                          #27
                          Don't do that, your gonna get squigged by visa/MC ... you will also need to get your computer audited by security metrics ( http://www.securitymetrics.com/ ) or similar company before you do something like that.


                          Originally posted by baycouples
                          Not right now, but I will start to. Why?
                          Muscle/Fitness Adult Affiliate Program
                          Since 1997 www.venuscash.com

                          Comment

                          • venus
                            Confirmed User
                            • Jan 2003
                            • 3112

                            #28
                            first all, dont do anything stupid... stop what your doing, your about to get yourself seriously screwed!
                            get with netbilling and you will not have any problems, you wont go to jail or get any multi million dollar fines.
                            I read what you are thinking of doing.. dont do it..your gonna get fucked by bubba

                            Originally posted by baycouples
                            What are the good points about the Netbilling and what are the negative points about VeriSign?
                            Muscle/Fitness Adult Affiliate Program
                            Since 1997 www.venuscash.com

                            Comment

                            • Validus
                              Confirmed User
                              • Jul 2001
                              • 4012

                              #29
                              Talk with Mitch... LOL

                              Comment

                              • baycouples
                                Confirmed User
                                • Mar 2004
                                • 1341

                                #30
                                Originally posted by venus
                                Don't do that, your gonna get squigged by visa/MC ... you will also need to get your computer audited by security metrics ( http://www.securitymetrics.com/ ) or similar company before you do something like that.
                                I do Securty Metrics scan every quater. So, I'm fine. But why would I get hassled by Visa/MC for doing my own rebills?

                                Comment

                                Working...