Cybersource & CVV #

Hi ,

I just got an order from a customer that was cleared through Zencart but actually failed through Cybersource for an invalid CVV. So I tried a sale myself with a false CVV and I never got an error telling me I had a bad cvv number. I would have been allowed to check out.

I am going to try and trace it through cybersource, but I was wondering if anyone else has had this problem with them?

Thanks - zen 1.2.7d

Did you try to complete the sale with the client's CVV manually through Cybersource?, and did it work then?

it was stopped at cybersource for a failed cvv code. That is the problem. I think there is something about the payment module that doesn't check to see if the cvv code is filled out.

As I indicated, in my first post. I can place an order without the cvv code entered.

Quote:

---

Originally Posted by romanus

it was stopped at cybersource for a failed cvv code. That is the problem. I think there is something about the payment module that doesn't check to see if the cvv code is filled out.

As I indicated, in my first post. I can place an order without the cvv code entered.

---

I ran a check with no CVV...Zen would not move forward without something in the data field... so that's good.

But then I put a bogus CVV number in to see what would happen - Zen sent it to CS, CS did nothing except to send it back, and Zen showed a completed sale... so Cybersource didn't process the order properly and Zen just responded naturally (which, for me is a problem because my distributor will receive automatic notice to ship the order).

In Cybersource, there are settings to require the CVV info for each card (HOP Settings), but this didn't result in a 'false' return for some reason. It didn't record anything at Cybersource for my test.

Let us know what you find out from Cybersource... it sounds like it might be an issue that can be resolved from their end.

Yeah, and I bet when you get your statement at the end of the month you will find that you have been charged an additional 1% and 1.3% for "Non and Mid" qualified transactions.

I have been on hold with cybersource for about 30 minutes so far

There is something wrong with the payment module. It isn't parsing the data properly and allowing orders to be placed.

I will let you know what the fix is. In the meantime I have switched back to the zencart CC module.

After goint through the cybersource contribution, it looks like there is no AVS or CVV validation built into it. I can actually put any name into the name fields and put any address or cvv into it and as long as I have the right credit card number and the right expiration date, it will capture the funds.

Kind of a bummer. Is this what you find to be true as well?

Quote:

---

Originally Posted by romanus

... as long as I have the right credit card number and the right expiration date, it will capture the funds.

---

Isn't this series of validations a function of the gateway operation? I mean, ok- maybe Zen allows anything to be sent through, but should'nt Cybersource know better and return a 'false' response if the information isn't verified?

From Zen checkout - using a valid name and CC#, but a bogus CVV, Cybersource accepts the sale for 'review' with the following information listed:

Authorization Status Failed
# Failure Reason(s) The order failed for the following reasons: CVN declined


So it's doing it's job there...but it is sending back the wrong message to Zen ('true' for Receipt instead of 'false' for a Decline). This must be a problem that Cybersource can address. I'll see what headway I can make with their tech support.