Adding CCV

[tlarbet]

We are running mm5.5 with credit card simple validation (we run cards through our store credit card machine). We need to add the ccv code box to our checkout since we are being penalized by our credit card company for not using it. How can we do this?

Thanks.

[d_host]

Re: Adding CCV

You need a real-time payment gateway which passes the CVV2 code in the background to your merchant processor for verification. Then you only get a response back from them, either Match or No-Match. The CVV2 code is not meant to be collected and stored the way you'd like, using Simple Validation. Miva Merchant supports quite a few payment gateways out of the box, and there are also some additional 3rd party modules available.

(As a side note, you may also want to check with your merchant processor to make sure what you do - process "card not present" transactions on a swipe terminal designed for "card present" transactions - is not violating their rules. In most cases this is grounds for account termination, so it's worth checking into to make sure you are using the correct tools to handle credit card processing.)

[tlarbet]

Re: Adding CCV

Thanks - We'll check with our merchant processor first to see what they say. I know of alot of other small businesses who do this though with no problem. They just don't generate enough business on their websites to justify the extra expenses associated with another merchant processor.

[tlarbet]

Re: Adding CCV

I checked with my client and here is her reply:

I'm stumped by this persons response. What we do is perfectly legal - as a matter of fact the electronic swipe CC machine I use, asks during each transaction if it is being generated at the store or by phone/internet. The reason I asked to have it is because the CC companies see it as an extra piece of insurance that it is a valid transaction and they reward me by not charging me an extra fee when have it and key it in along with the credit card number, expiration date, address & zip code.

---------------

So my question remains - is it possible to add a field on the payment page to ask for the ccv code.

Thanks.

[d_host]

Re: Adding CCV

Technically - yes.

Ethically - I wouldn't recommend it. CVV2 is a security code - it's not meant to be stored the way you are envisioning. Hence the reason why you will not see this option available with the Simple CC Validation module.

[Mark Hood]

Re: Adding CCV

Using the cvv2 at a terminal is legal. This is for card in hand where the mag stripe will not work. It is also fine to use over the phone. The problem comes from storing the information. You are not allowed to keep the two together.

perhaps this will help
http://www.bbbonline.org/eexport/doc...guide_cvv2.pdf

or this page 13
http://usa.visa.com/download/merchan...ud-control.pdf

[Siamese-Dream.Com]

Re: Adding CCV

Your state MIGHT also have laws regarding whether you can store if for later use, too.

[Rick Wilson]

Re: Adding CCV

To pile on here, Remik, et al above are correct, The only LEGITIMATE way to accept CVV codes in an online shopping cart is to use a real time payment gateway. So it comes down to if they'll save more than $25 or so (the average cost of an extra account) per month in lower fees and saved time by using a real time gateway.

If they do any volume at all (over $1,000 per month) in their online store, I would strongly recommend a real time gateway in addition to their brick and mortar account.

[tlarbet]

Re: Adding CCV

SIGH this is getting way too complicated. The bottom line is the credit card machine merchant my client is using has requested that she enter this code for all her transactions or she will be charged an extra fee. She does not store any credit card information for future use - she makes all customers, even return customers enter the information new. She has a very small store and does mostly wholesale business on her website - is lucky to generate $1,000 per month but it is increasing monthly.

Neither of us see where this code is any more valuable then having the credit card number, customer address and name and expiration date.... except for the fact she is trying to save the extra transaction fee. The fact that the machine allows her to process online and phone business and asks for the code should be enough to allow us to gather this information.

The bottom line is TECHNICALLY - is there a way to gather this information without having to set up a new account or purchase another module from miva. Can anyone help me with this? If so and you don't want to say so on this thread, please email me privately at [email protected].

Thanks.

[Rick Wilson]

Re: Adding CCV

Neither of us see where this code is any more valuable then having the credit card number, customer address and name and expiration date.... except for the fact she is trying to save the extra transaction fee.

Most of us on here would most likely agree with you that the rules governing PCI-DSS Compliance are a little convoluted and mostly useless.

Regardless what you're asking to do is expressly forbidden and precisely why it's not built into the cart natively.

[Mark Hood]

Re: Adding CCV

not without a module

[Rick Wilson]

Re: Adding CCV

purchase another module from miva

No, we would lose our ability to get certified from Visa and Mastercard and thus have to go out of business if we provided you the ability to do this in any way.

If you do it, it will require a third party module.

[wcw]

Re: Adding CCV

Please don't get any of the 3rd party module developers involved as they don't want to be sued and put out of business either. Do not collect the CVV where it would be stored on the server for any amount of time, i.e. not even for a millisecond. Do not send the CVV in a non-secure email either because it could be captured and would most surely reside on a mail server somewhere.

[Siamese-Dream.Com]

Re: Adding CCV

I know this is not the information you want to hear, but I hope it helps...

One option is to call the customer at the time you are going to process the card, and then ask them over the phone what the CVV number is.

My wholesale suppliers usually have me FAX my cc info (including the CVV) to them. If she is selling mostly wholesale, then maybe she she can use some sort of Purchase order module and let her customers know that she will be faxing them later.

And finally, I get really, really good rates with my credit card processor (RBS World Pay, formerly known as LYNK). She might be able to get really good rates from them, too. Plus there is a module that works with Miva Merchant 5 (although not officially supported).

Hope this helps.