show last 4 digits of cc on invoice and customer email

[wcw]

Re: show last 4 digits of cc on invoice and customer email

I think he is using the same token in the mail manager module to display it in the emails.

[cway]

Re: show last 4 digits of cc on invoice and customer email

We're using EmporiumPlus' MailManager and Toolkit to get the last 4 digits of the credit card on the Invoice screen and in Merchant and customer emails.

This is the code I'm using:

<mvt:if expr="PaymentMethod EQ 'paynet:VISA'">
Last 4 digits of &mvt:order:pay_data;&nbsp;<mvt:item name="toolkit" param="newsubstring|card4|g.paymentnet_cardnumber,13,4" />
&mvte:global:card4;
</mvt:if>

[zazen06]

Re: show last 4 digits of cc on invoice and customer email

Thanks so much - looks like it's exactly what's needed here.

[wcw]

Re: show last 4 digits of cc on invoice and customer email

There are a couple things different if you use a different payment module.
paynet:VISA
g.paymentnet_cardnumber
would be different.

[cway]

Re: show last 4 digits of cc on invoice and customer email

Here's other code we're using to display other payment methods.
This is in a custom page that is called from a Mail Manager item:

<p><b>Payment Details:</b><br>

<mvt:if expr="PaymentMethod EQ 'check:check'">
&mvt:order:pay_data;
</mvt:if>

<mvt:if expr="PaymentMethod EQ 'paynet:VISA'">
Last 4 digits of &mvt:order:pay_data;&nbsp;<mvt:item name="toolkit" param="newsubstring|card4|g.paymentnet_cardnumber,13,4" />
&mvte:global:card4;
</mvt:if>

<mvt:if expr="PaymentMethod EQ 'paynet:MASTERCARD'">
Last 4 digits of &mvt:order:pay_data;&nbsp;<mvt:item name="toolkit" param="newsubstring|card4|g.paymentnet_cardnumber,13,4" />
&mvte:global:card4;
</mvt:if>

<mvt:if expr="PaymentMethod EQ 'paynet:DISCOVER'">
Last 4 digits of &mvt:order:pay_data;&nbsp;<mvt:item name="toolkit" param="newsubstring|card4|g.paymentnet_cardnumber,13,4" />
&mvte:global:card4;
</mvt:if>

<mvt:if expr="PaymentMethod EQ 'paynet:AMEX'">
Last 4 digits of &mvt:order:pay_data;&nbsp;<mvt:item name="toolkit" param="newsubstring|card4|g.paymentnet_cardnumber,13,4" />
&mvte:global:card4;
</mvt:if>

<mvt:if expr="PaymentMethod EQ 'phonein:phonein'">
Last 4 digits of credit card: &mvt:order:pay_data;&nbsp;
<br><mvt:item name="phonein" param="html_message" />
</mvt:if>

</p>

In the Main Section of Mail Manager, put the code of the page:
We used: customer_email
Be sure to use Store Morph Template and something like "Your Order #%order_id% from our store" as the item Title.

And don't forget to assign mailman and toolkit to the page.

What is returned on the Invoice and emails is not pretty. For example, it returns this for checks:
:CHECK_NUMBER=1234

For credit cards, it does something like:
Last 4 digits of =Visa 8542

If anybody finds a way to replace this with something custom, let me know.

Thank you to EmporiumPlus for their help!
Cway

[Pete McNamara]

Re: show last 4 digits of cc on invoice and customer email

display the last 4 digits of the customers credit card number in the .... customer or merchant emails

This is a really bad idea - it's just making it easy for identity and/or credit card fraud. For fraudsters, the first 8 numbers are simple to determine, the next 4 more difficult and the last 4 the most difficult. So, you are going to supply potential frausdsters with the answer to the most difficult part of the puzzle, in an unencrypted email - equivalent to writing it on a postcard.

Display it on the Invoice screen most certainly, but not in an email.

[srmb]

Re: show last 4 digits of cc on invoice and customer email

I came across this thread which was of great help and thought I'd post the modified code that worked for me in the INVC page using Authorize.net.

<br><mvt:item name="fonts" param="hdr_font">
<mvt:if expr="'check' CIN g.PaymentMethod">
<b>Paid by: Check #&mvt:global:check_number;</b>
</mvt:if>
<mvt:if expr="'paypal' CIN g.PaymentMethod">
<b>Paid by: Paypal</b>
</mvt:if>
<mvt:if expr="'Visa' CIN g.PaymentMethod">
<b>Paid by: Visa Card XXXX-<mvt:item name="toolkit" param="newsubstring|card4|g.AuthorizeNet_Card_Num, 13,4" />
&mvte:global:card4;</b>
</mvt:if>
<mvt:if expr="'AmerExp' CIN g.PaymentMethod">
<b>Paid by: American Express Card XXXX-<mvt:item name="toolkit" param="newsubstring|card4|g.AuthorizeNet_Card_Num, 12,4" />
&mvte:global:card4;</b>
</mvt:if>
<mvt:if expr="'MasterCard' CIN g.PaymentMethod">
<b>Paid by: MasterCard XXXX-<mvt:item name="toolkit" param="newsubstring|card4|g.AuthorizeNet_Card_Num, 13,4" />
&mvte:global:card4;</b>
</mvt:if>
<mvt:if expr="'Discover' CIN g.PaymentMethod">
<b>Paid by: Discover Card XXXX-<mvt:item name="toolkit" param="newsubstring|card4|g.AuthorizeNet_Card_Num, 13,4" />
&mvte:global:card4;</b>


This worked for showing the Card Type / Payment Method on the HTML Customer Email (couldn't show last 4 digits as toolkit can't be assigned):

<mvt:if expr="'Visa' CIN g.PaymentMethod"><b>Paid by: Visa</b></mvt:if>
<mvt:if expr="'MasterCard' CIN g.PaymentMethod"><b>Paid by: MasterCard</b></mvt:if>
<mvt:if expr="'AmerExp' CIN g.PaymentMethod"><b>Paid by: American Express</b></mvt:if>
<mvt:if expr="'Discover' CIN g.PaymentMethod"><b>Paid by: Discover</b></mvt:if>
<mvt:if expr="'paypal' CIN g.PaymentMethod"><b>Paid by: Paypal</b></mvt:if>
<mvt:if expr="'check' CIN g.PaymentMethod"><b>Paid by: Check #&mvt:global:check_number;</b></mvt:if>

[Siamese-Dream.Com]

Re: show last 4 digits of cc on invoice and customer email

Just a note:

I bought some inventory the other day from a wholesaler in Virginia.

The confirmation email contained the FIRST 4 digits AND LAST 4 digits of the CC number, AND the expiration date, AND the CVV number (plus, of course, the billing address as well, along with the card holder's name).

I don't know what state everybody is in, but here in California, that is pretty much a violation of about four different consumer privacy laws right there...

[garciap]

Re: show last 4 digits of cc on invoice and customer email

Recording the CVV number is a violation of all merchant agreements, and subject to up to a $10,000 fine per incident. You might point that out to them, and get a new card while you're at it from your bank.

[Siamese-Dream.Com]

Re: show last 4 digits of cc on invoice and customer email

Thank You, Garciap:

is there any place out there that actually says that - I would love to be able to point them in the right direction.

Mark

[garciap]

Re: show last 4 digits of cc on invoice and customer email

Yeah, it's in their merchant agreement under data security. It's also been part of the Visa data security brief since at least 2007. I'm sure it's other places too. It's a violation to store the CVV code anywhere, scrap of paper, carbon knucklebuster receipt, or electronic record. You cannot store it to use it twice. And there's no need to use it twice for a recurring customer because they were verified the first time they used it. There is a separate requirement for blanking out all but the last 4 digits of a card number on a receipt. That one is more recent.