September 24th, 2014 by Elma Jane

The CVV Number (Card Verification Value) on your credit card or debit card is a 3 digit number on VISA, MasterCard and Discover branded credit and debit cards. On your American Express branded credit or debit card it is a 4 digit numeric code.

The codes have different names:

American Express – CID or unique card code.

Debit Card – CSC or card security code.

Discover  – card identification number (CID)

Master Card – card validation code (CVC2)

Visa  – card verification value (CVV2) 

CVV numbers are NOT your card’s secret PIN (Personal Identification Number).

You should never enter your PIN number when asked to provide your CVV. (PIN numbers allow you to use your credit or debit card at an ATM or when making an in-person purchase with your debit card or a cash advance with any credit card.)

Types of security codes:

CVC1 or CVV1, is encoded on track-2 of the magnetic stripe  of the card and used for card present transactions. The purpose of the code is to verify that a payment card is actually in the hand of the merchant. This code is automatically retrieved when the magnetic stripe of a card is swiped on a point-of-sale (card present) device and is verified by the issuer. A limitation is that if the entire card has been duplicated and the magnetic stripe copied, then the code is still valid.

The most cited, is CVV2 or CVC2. This code is often sought by merchants for card not present transactions occurring by mail or fax or over the telephone or Internet. In some countries in Western Europe, card issuers require a merchant to obtain the code when the cardholder is not present in person.

Contactless card and chip cards may supply their own codes generated electronically, such as iCVV or Dynamic CVV.

Code Location:

The card security code is typically the last three or four digits printed, not embossed like the card number, on the signature strip on the back of the card. On American Express cards, the card security code is the four digits printed (not embossed) on the front towards the right. The card security code is not encoded on the magnetic stripe but is printed flat.

American Express cards have a four-digit code printed on the front side of the card above the number.

MasterCard, Visa, Diners Club,  Discover, and JCB credit and debit cards have a three-digit card security code. The code is the final group of numbers printed on the back signature panel of the card.

New North American MasterCard and Visa cards feature the code in a separate panel to the right of the signature strip. This has been done to prevent overwriting of the numbers by signing the card.

Benefits when it comes to security:

As a security measure, merchants who require the CVV2 for card not present payment card transactions are required by the card issuer not to store the CVV2 once the individual transaction is authorized and completed. This way, if a database of transactions is compromised, the CVV2 is not included, and the stolen card numbers are less useful. Virtual Terminals and payment gateways do not store the CVV2 code, therefore employees and customer service representatives with access to these web-based payment interfaces who otherwise have access to complete card numbers, expiration dates, and other information still lack the CVV2 code.

The Payment Card Industry Data Security Standard (PCI DSS) also prohibits the storage of CSC (and other sensitive authorization data) post transaction authorization. This applies globally to anyone who stores, processes or transmits card holder data. Since the CSC is not contained on the magnetic stripe of the card, it is not typically included in the transaction when the card is used face to face at a merchant. However, some merchants in North America require the code. For American Express cards, this has been an invariable practice (for card not present transactions) in European Union (EU) states like Ireland and the United Kingdom since the start of 2005. This provides a level of protection to the bank/cardholder, in that a fraudulent merchant or employee cannot simply capture the magnetic stripe details of a card and use them later for card not present  purchases over the phone, mail order or Internet. To do this, a merchant or its employee would also have to note the CVV2 visually and record it, which is more likely to arouse the cardholder’s suspicion.

Supplying the CSC code in a transaction is intended to verify that the customer has the card in their possession. Knowledge of the code proves that the customer has seen the card, or has seen a record made by somebody who saw the card.

 

Posted in Best Practices for Merchants, EMV EuroPay MasterCard Visa, Point of Sale, Visa MasterCard American Express Tagged with: , , , , , , , , , , , , , , , , , , , , , , , , , , , , , , , , , , , , , , , , , , , , , , , , , , , , , , , , , , , , , , , , ,

December 12th, 2013 by Elma Jane
Virtual Merchant Processing Gateway

Virtual Merchant Processing Gateway

Virtual Merchant

A virtual merchant is a website that sells goods and services to the public via online transactions with debit and credit card processing. The end result is a fully online experience where consumers can virtually visit a store to browse goods, purchase them fully online and receive them in the mail several days later, all from the comfort of your personal computer.

Virtual Merchant Element

Virtual merchants are made up of multiple features that basically make a website into an online store. Online stores provide e-commerce capabilities in the form of processing payments for orders and then shipping the goods or services either digitally or physically. Some brick and mortar companies may create a Web presence that only describes the store or displays the goods it sells, but they may not sell anything online.

Virtual merchants are a different breed from simple informational websites, utilizing a merchant account to create a secure online storefront. Merchant accounts create a contract between the store and online credit card processing companies. As part of this merchant account agreement, the virtual merchant pays the processor vendor a percentage of each transaction made via the online store. In some cases, this fee comes out to a monthly rate with a set per-transaction fee.

Virtual Merchant Services

Many virtual merchant services exist that cater to both online and offline business presences, though many that specialize in online retail offer more features and functionalities. These service providers offer virtual terminals to create a fully-functional payment gateway for processing purchases and creating a fluid shopping experience. Companies like National Transaction Corporation stand out as among the most popular of options due to their low merchant account fees and comprehensive virtual merchant services.

Benefits of Virtual Merchant

Virtual merchants expand the functionality of a website beyond a simple informational resource into a usable storefront. As is the case with most any type of online service, a virtual merchant service will help reduce overall work and costs associated with creating an online storefront, freeing you up to run your business as it was meant to be.

Using virtual merchant services for your website can benefit business in the following ways:

1. Easily integrates with your existing website for brand continuity

2. Facilitates more positive sales experiences

3. Improves customer service levels

4. Reduces administration and maintenance times for online retail websites

5. Removes geographic barrier from consumers, allowing for national and international sales

Secure information

Making each transaction as secure as possible becomes a main selling point of any company trying to build credibility through a Web presence. Virtual merchant services become an ideal solution as they offer all the necessary security measures to protect and keep private each buyer’s payment information.

The end result becomes that the payment process is protected through secured-socket layering (SSL) encryption to prevent data interception during an order, and account information is stored in multi-tiered firewall protection.

Straightforward online ordering

The most important part of any online purchasing experience is the ease of the ordering process. Through the use of features like a shopping cart, purchasing all items in the cart and creating an account to remember purchasing information all contributes to customer retention. When a consumer chooses to buy their goods online, a typical order processing form will entail entering credit card and billing address information as well as a shipping address and shipping options.

Each of these functionalities is ultimately governed through virtual merchant software to ensure a seamless and painless experience. The software is often available in one of two formats, either hosted or in-house. As a hosted solution, the virtual merchant service maintains the payment portal and allows you to edit its look and essentially create your store on their servers and databases. As an in-house solution, you install the software onto your own website servers and integrate the merchant application into the existing website. Both offer inherent benefits from customization to reliable management, but it ultimately depends on a company’s overall needs.

Posted in Best Practices for Merchants, Credit card Processing, Credit Card Reader Terminal, Credit Card Security, e-commerce & m-commerce, Electronic Payments, Internet Payment Gateway, Mobile Point of Sale Tagged with: , , , , , , , , , , , , , , , , , , , , , ,