All Questions
Tagged with credit-card pci-dss
15 questions
75
votes
2
answers
60k
views
Minimum requirements for storing last 4 digits of credit card number?
We have a merchant website that uses Autorize.net's CIM and AIM. Our users may have multiple credit cards so we'd want to give them opportunity to distinguish between credit cards that they use on ...
- 5,467
6
votes
3
answers
5k
views
Creditcard store first six digits PCI reference
I need to store masked PAN with first six digits and last four digits along with the card expiry month and year. Is it safe to do it according to the PCI rules?
Regarding four digits has been ...
- 163
10
votes
5
answers
11k
views
Storing CVC / CVV / CVV2 until payment is processed
I need to store the payment info of a transaction.
We have a script that reads which transactions haven't yet been sent to our ERP (the business management software), to then send it. This script ...
- 103
18
votes
3
answers
29k
views
Is storing CVV compliant with PCI standards?
From personal, job-related experience I know that many "Booking Engines" store the CVV info for customers' credit cards from the time a reservation is made until the time the guest leaves the hotel. ...
- 871
6
votes
3
answers
5k
views
Storing credit card information for later manual processing
I am rebuilding a clients eCommerce site using Wordpress and WooCommerce as the framework.
Their current eCommerce site takes the credit card information and stores it for later manual processing. To "...
- 73
5
votes
2
answers
19k
views
Does sending credit card info over email violates PCI DSS?
Being in the US, I have noticed that more and more companies ask to send sensitive credit card information (all information that is required to make a transaction) over a plain email. I believe that ...
- 1,765
4
votes
2
answers
2k
views
Using browser AJAX to initiate credit card transaction with processor?
Let's say that I have a website where people can make purchases, donations, etc.
The entire website is served with https.
I store the information regarding the purchases (item, quantity, price) as ...
- 211
4
votes
3
answers
770
views
What are the security implications of a device like Coin?
Coin is a new device aimed at replacing up to 8 credit cards in your wallet with a single device.
It apparently works by scanning the credit card data into a mobile application that syncs with the ...
user10211
4
votes
0
answers
92
views
Major UK company seems to be handling customer & card data recklessly [duplicate]
A company I used to work for is passing customer's personal details as well as card data (number, expiration date, name, CVV2 and the contents of the magstripe thanks to a reader) through Windows XP ...
- 12.9k
3
votes
3
answers
5k
views
Why does Amazon ask for the CVC/CVV if it bills without it?
I have a follow-up question relating to this question:
How does Amazon bill me without the CVC / CVV / CVV2?
If amazon.com can bill without the CVV why does it ask for it the first time information ...
- 39
2
votes
1
answer
823
views
How much information is released when paying with a debit card
How much information is released when paying with a debit card?
Is it possible for a vendor to grab your name and address from your debit card and send you things in the mail?
- 23
2
votes
1
answer
1k
views
PCI Compliance requirement when storing card data on user's device
I have an application where I take the user to a PCI compliant payment gateway for completing the payment. I want to give the functionality of "Remember my card" so that the user does not have to ...
- 129
2
votes
1
answer
4k
views
Are banks required to be PCI compliant?
Since credit card transactions like cash advance can be performed at most ATMs, are banks required to be PCI DSS compliant?
- 2,053
1
vote
1
answer
1k
views
PCI DSS - Recorded Phone Conversations
I am using the using the following image from FishNet Security as a sort of guide for the data flow diagram required by PCI DSS as defined by:
1.1.3 Current diagram that shows all
cardholder ...
- 113
1
vote
4
answers
645
views
Collecting banking, credit-card statements from users
I want to build a service that collects user spending history with their permission. Users would send over (banking, credit card) account statements and I would extract, store the following ...
- 2,169