Friday, October 14, 2011

Credit Card Capture: Card Security Codes

Many Genbookers ask us why we do not capture card security codes (also called Card Verification Value codes, or CVV, CVV2, CVC2 and CID) — the 3 or 4-digit codes found on the backs of credit cards — as part of our Credit Card Capture feature. The answer to that is 2-fold: We do capture the codes, however we cannot store them (and thus cannot make them available to businesses using Genbook). 

The Credit Card Capture feature requests the card security code when clients input their credit card details. That code is then used as part of the credit card validation process.

However, it is a violation of Payment Card Industry Data Security Standards (PCI DSS) to store card security codes after a transaction. The transaction, in this case, is the validation of the credit card. Once that is performed, the code must be discarded.

If you encounter difficulties charging cards Genbook captures, we recommend contacting your merchant services provider for information and instructions on circumventing the need for the card security code. While it is not always necessary to have the code in order to charge a card, added steps may be required when charging a card without it. We regret any inconvenience this causes.

More detailed information about PCI DSS rules regarding credit card security codes can be found here. For more information on all PCI DSS guidelines, please visit PCI Security Standards Council website.