Address update issue

Previous Topic Next Topic
 
classic Classic list List threaded Threaded
3 messages Options
Reply | Threaded
Open this post in threaded view
|

Address update issue

Abdullah Shaikh-3
When you Update the Postal Address from eCommerce Profile, to associate the
new (update) Postal Address with Credit Card, we create a new Credit Card
associated with the new Postal Address.

But my client don't want to store the Credit Card Number, for this we masked
the number with "*" except the last 4 digits, and for this reason the
updateCreditCard services fails because of number validation and there the
Postal Address could not be update.

Can't we store Credit Card Numbers ? does they come under PCI standard ? I
have checked on internet some says we can & some says we can't.

The only solution that seems to me for this is not to mask the number or to
just update the contact mech id of new Postal Address on existing credit
card instead of creating the new credit card.
Reply | Threaded
Open this post in threaded view
|

Re: Address update issue

Jacques Le Roux
Administrator
Quick answer : yes you can store Credit Card Numbers, only CVV is prohibited.
Note : It depends of the PCI level required by your client. I don't remember which one requires to not store Credit Card Numbers.
But in most case the level with Credit Card Numbers stored is enough.

Jacques

From: "Abdullah Shaikh" <[hidden email]>

> When you Update the Postal Address from eCommerce Profile, to associate the
> new (update) Postal Address with Credit Card, we create a new Credit Card
> associated with the new Postal Address.
>
> But my client don't want to store the Credit Card Number, for this we masked
> the number with "*" except the last 4 digits, and for this reason the
> updateCreditCard services fails because of number validation and there the
> Postal Address could not be update.
>
> Can't we store Credit Card Numbers ? does they come under PCI standard ? I
> have checked on internet some says we can & some says we can't.
>
> The only solution that seems to me for this is not to mask the number or to
> just update the contact mech id of new Postal Address on existing credit
> card instead of creating the new credit card.
>


Reply | Threaded
Open this post in threaded view
|

Re: Address update issue

Abdullah Shaikh-3
Thanks Jacques .. will check out regarding the PCI level which permits to
store Credit Card Numbers as time permits, will update the thread

On Fri, Oct 30, 2009 at 5:36 PM, Jacques Le Roux <
[hidden email]> wrote:

> Quick answer : yes you can store Credit Card Numbers, only CVV is
> prohibited.
> Note : It depends of the PCI level required by your client. I don't
> remember which one requires to not store Credit Card Numbers. But in most
> case the level with Credit Card Numbers stored is enough.
>
> Jacques
>
> From: "Abdullah Shaikh" <[hidden email]>
>
>  When you Update the Postal Address from eCommerce Profile, to associate
>> the
>> new (update) Postal Address with Credit Card, we create a new Credit Card
>> associated with the new Postal Address.
>>
>> But my client don't want to store the Credit Card Number, for this we
>> masked
>> the number with "*" except the last 4 digits, and for this reason the
>> updateCreditCard services fails because of number validation and there the
>> Postal Address could not be update.
>>
>> Can't we store Credit Card Numbers ? does they come under PCI standard ? I
>> have checked on internet some says we can & some says we can't.
>>
>> The only solution that seems to me for this is not to mask the number or
>> to
>> just update the contact mech id of new Postal Address on existing credit
>> card instead of creating the new credit card.
>>
>>
>
>