CVV Numbers with Offline Processing

[epibeta]

I have a client who is doing manual offline credit card transactions with his ZenCart store. He wants to include CVV numbers in transactions whenever possible for added security, but I'm a little confused regarding the collection of CVV numbers in ZenCart. At the bottom of this tutorial article, it states the following:

NOTE: You should never collect CVV data if you are manually processing credit card orders, as having that information is a violation of terms of service with credit card companies.

As I understand it, it is violation of credit card companies' terms of service to store the CVV number AFTER the transaction has taken place - the initial collection of a number to use in a transaction isn't a problem. so why does ZenCart simply not collect the number at all for offline transactions? Wouldn't the store owner need the number in the first place in order to complete the transaction? Or are offline processing store owners never supposed to use CVV numbers ever?

Clearly I'm a little confused on the topic, so if somebody could help me understand, that would be great!

Thanks,
Epibeta.

[Merlinpa1969]

If you are using the stock CC module
ZC does collect the CVV and send it in the split email

[epibeta]

Eek! I'm a little embarrassed to admit that I didn't even notice the "Collect & store the CVV number (true/false)" option. I've switched it to true and the CVV field has appeared in my checkout form.

So, I guess the question is now... what happens to that CVV number after it has been collected and the transaction has been processed? I see that it gets encrypted and stored in the db, but at some point does the system automatically dispose of it in order to comply with regulations? Or does the number need to be manually removed somehow?

Thanks for your help,
epibeta.

[Merlinpa1969]

when you update the order you need to tell it to delete it

from your admin orders page, click on the "mask this" link next to the cvv numbers

[vickilapp]

Hi,
I'm a bit confused. My ZenCart (version 1.3.7.1) has never shown me what the CVV number is.

I am using the standard credit card module. For "Collect & Store the CVV number" I had selected True.

It does not come in the email nor does it show up on the orders page. I have not found any other way to find the CVV number that the customer has entered.

Any ideas? Thanks!

Vicki
http://beadinspirations.com