Customer complaint today

[BlancoNino]

Originally posted by: GeekDrew

Originally posted by: BlancoNino
Well what *can* you do with a credit card number anyway? Stores require it to be swiped with the physical card and shopping online will only let you ship it to the billing address. I'm not saying there isn't anything you can do, just simply asking what.

That depends on the access that the store employee has. Many POS terminals don't require the card to be physically swiped; it can be typed in.

Well I don't know of any stores that accept just telling a CC number to buy something.

 

[AgaBoogaBoo]

Originally posted by: BlancoNino

Originally posted by: GeekDrew

Originally posted by: BlancoNino
Well what *can* you do with a credit card number anyway? Stores require it to be swiped with the physical card and shopping online will only let you ship it to the billing address. I'm not saying there isn't anything you can do, just simply asking what.

That depends on the access that the store employee has. Many POS terminals don't require the card to be physically swiped; it can be typed in.

Well I don't know of any stores that accept just telling a CC number to buy something.

It requires a CVV code and expiration date, but places like pizza delivery do this very often over the phone.

 

[silverpig]

Originally posted by: BlancoNino
Well what *can* you do with a credit card number anyway? Stores require it to be swiped with the physical card and shopping online will only let you ship it to the billing address. I'm not saying there isn't anything you can do, just simply asking what.

Aren't there credit card making machines? Sure they'll look fake, but they'd do perfectly fine at the gas pump.

 

[BlancoNino]

Originally posted by: Baloo
You are not getting the point. The store needs the info is true, but the employees at the register do not need it, and should not have access to receipts with full CC numbers on them. What you don't understand, is that many fraudulant CC charges are done by people who get the CC numbers from those receipts.

Employees have access to CC numbers everywhere. This is not news. When you hand the card to somebody, they can see it. Hell, have you ever ordered pizza for delivery? You give them the number over the phone and they type it in...there are thousands of transactions done like that across the country every day.

 

[akshatp]

Originally posted by: Atheus
Chip and Pin For The Win.

Unfortunately that technology hasnt made it over to this side of the pond yet.

That being said, SO WHAT if they have your CC number. If there is a charge on your statement that wasn't authorized/made by you, call the CC company and tell them! Its THAT simple people. Sign a piece of paper and off your statement it goes! You even get a shiny new card for all of your troubles.

 

[AgaBoogaBoo]

Originally posted by: akshatp

Originally posted by: Atheus
Chip and Pin For The Win.

Unfortunately that technology hasnt made it over to this side of the pond yet.

That being said, SO WHAT if they have your CC number. If there is a charge on your statement that wasn't authorized/made by you, call the CC company and tell them! Its THAT simple people. Sign a piece of paper and off your statement it goes! You even get a shiny new card for all of your troubles.

Exactly - I'm not sure why people get worried.

To the OP: I would just give a response over their head and that basically tells them that you follow standard procedure put in place by blah blah blah and that if you feel there is an issue, you need to contact your CC provider to look into it, however you can guarantee that they follow industry standards and it's part of an agreement you made, because otherwise they would stop allowing you to process their credit card.

 

[alkemyst]

Originally posted by: GeekDrew

What *should* be a violation should be any access to it that is non-electronic.

More importantly encrypted and hopefully on dedicated/internal lines only.

At a mortgage company we have an occassional person thinking we don't need their SS# at all to run credit. Some even bring up examples that their 'Credit Card Company' shows them their scores live without ever entering a SS#

 

[yuppiejr]

Originally posted by: QED

Originally posted by: Baloo
<div class="FTQUOTE"><begin quote>Originally posted by: QED

Why would you be concerned about an employee stealing a card number off of the merchant copy of the receipt, but NOT be concerned when you hand that same employee your actual credit card (16-digit numbers and all)?

And for those that have asked, the store NEEDS to keep your card number in some shape or form until they settle with their merchant provider. Ideally, it should be encrypted in some database and not printed on a hard copy... but they do need to keep it for a short while at a minimum.</end quote></div>

You are not getting the point. The store needs the info is true, but the employees at the register do not need it, and should not have access to receipts with full CC numbers on them. What you don't understand, is that many fraudulant CC charges are done by people who get the CC numbers from those receipts.

No, I get it. My current contract involves implementing new procedures and standards to allow my client's (a Fortune 100 company) POS and credit-card processing software to meet PCI requirements.

The problem is not that the card number is printed on the merchant's copy of the receipt, per se. The problem is, what does the merchant do to restrict access to those receipts? If they are simply left in a box behind the counter for anyone to take, that is a clear violation of the PCI requirements. Even storage at a register with no access restrictions is a PCI violation.

Amen brotha... same boat here, getting to PCI level 1 compliance is a huge PITA from a systems and process standpoint that I'm currently dealing with as well. What consumers assume "people behind the regsiter" should and shouldn't have is irrelevant. If they don't like it they need to be taking it up with their credit card issuer rather than the merchant who is only playing by the CC company's rules. The bank decides what rules the merchant must follow to protect them from chargebacks/disputes/etc...

In most cases where swipe terminals with receipt printers are used, the merch copy will have the full CC number and expiration printed on it which must be retained for 48 hours. The key is ensuring the merchant is storing these in an access limited manner (lockbox, etc..) and destroying them after the required time period has passed. I'm sure most retailers would prefer to avoid the hassle but it's just the way they have to do business in order to offer consumers the convenience of credit card payments.

If you don't like it, use cash...

 

[Fineghal]

That's odd, our stand alone CC reader prints a merchant copy with a transaction code and CC#. No expiration date or CCV code. I've never had anyone worried about the receipts. The scariest part to me as always been how easy it is to get a magnetic stripe reader/encoder.

$350 or so and I can swipe your card an extra time while ringing up your purchase, my "reader" copying all of your CC info. The creepy part is I don't need your card anymore. With a decent encoder, I can change the information on MY card to match yours. If I'm willing to commit credit card fraud, I'm sure as heck willing to bet the minimum wage register worker isn't going to compare the number on the card to the number that just rang through on his POS machine as long as the name and signature match.

 

[Axoliien]

Our system connects to the CC company and passes the info, but stores the credit company ID info and the approval code and transaction code instead of CC information. The only problem is that when we've had issues where there was double charging, etc, they have to go to their CC company and it has to be worked out from that end because we have no CC information. We also can't look up history because we don't keep the CC info, which also pisses people off. You can't make everyone happy I guess.

 

[BobDaMenkey]

Originally posted by: Triumph
I don't see why MY cc number should be blotted out on MY copy, but left in full on a copy that I give to complete strangers? Please explain that to me.

Because we still have it on file in our system. If you do that, half the time we'll go back and print up another copy.

 

[Turin39789]

A store I worked at had that issue, someone mentioned it and we made a call to our pos company, and about 2 minutes of changing a setting ourselves in the swiping machine and no more credit card number on the receipt