Show Complete Credit Card Number in Payment

[davet]

I recently upgraded to Optigold 3.3.7 but now the complete credit card does not show in the payment history. How do I fix it so it shows the complete number? Currently the first 4 digits are missing from the payment history.

[digitalpoint]

It has been fixed for 3.3.8.

[davet]

any ideas as to when 3.3.8 will be released? I am getting more & more support questions relating to this issue. Customers think there is something wrong with their payment & expect us to have it fixed ASAP.

[digitalpoint]

Probably towards the end of this week. BTW, if you set it to not show the entire credit card (which is a bad idea anyway IMO), it will work fine.

[davet]

when will 3.8.8 be released to fix this problem? Your last post in June said it would probably be available towards the end of the week.

Is there any chance it has been fixed by now? I am amazed at how many customers contact me because they think the wrong card was charged.

[ezzinet]

The problem is not that it sends the card number to anyone ... it's ok if it's not fixed on our side - but here's where the confusion creeps in ...

Say a customer has a VISA # 4128-3900-1234-1234 ...

When it processes the transaction, and creates a receipt, it only posts the last 12 characters ... i.e. 3900-1234-1234 - but that is internal, so as I said, no issues ...

But is sends the customer a receipt saying ....

BE IT KNOWN, that the undersigned hereby acknowledges receipt of the sum of $XX.xx paid by AmEx

Now THIS is whay confuses the customer ... because they don't have an AMEX on file - they have a VISA !!

Hence, the receipt uses the information from the 2nd set of characters to determine how the customer paid ... if the 2nd set is, for example "0123" it will say ...

BE IT KNOWN, that the undersigned hereby acknowledges receipt of the sum of $XX.xx paid by CrCd

This is generic enough - so it's not an issue ... but in a lot of cases, the 2nd set is a 3xxx or 4xxx or 5xxx or 6xxx and is causing a lot of confusion

Your last post talks about a solution in JUNE ... summer's over - it's the end of AUGUST now :-)

[digitalpoint]

3.3.8 should be available for download now.

[john]

But is sends the customer a receipt saying ....

BE IT KNOWN, that the undersigned hereby acknowledges receipt of the sum of $XX.xx paid by AmEx

Now THIS is whay confuses the customer ... because they don't have an AMEX on file - they have a VISA !!

Hence, the receipt uses the information from the 2nd set of characters to determine how the customer paid ... if the 2nd set is, for example "0123" it will say ...

BE IT KNOWN, that the undersigned hereby acknowledges receipt of the sum of $XX.xx paid by CrCd

This is generic enough - so it's not an issue ... but in a lot of cases, the 2nd set is a 3xxx or 4xxx or 5xxx or 6xxx and is causing a lot of confusion


Do you mind sharing your method for displaying the card type on the receipt, I haven't been able to figure that one out yet.

[nighthawke]

I don't like the idea of showing full CC #'s on receipts either. In fact, that is almost stepping over the line of privacy laws that are in place to protect consumers. Tell your custies that those #'s are omitted for the sake of personal and financial privacy.

We have NEVER, in the history of the ISP's I have worked for, EVER had someone complain about why their full CC # are not being shown on their receipts.

In fact I have records showing folks approving our privacy policies that we have had in effect, that have exceeded all privacy laws in effect then and now. No, don't even try to do that. If some crackhead gets ahold of a full CC #, game over man. You'll never live it down.

[EGS]

I do not understand why you want to show complete credit card numbers in payments, and why this application would even let you do so. I believe that is a violation of personal and financial privacy laws...I know I wouldn't want my ISP to see my credit card number, no matter how reputable they are.

Companies realize this and mostly respect this. That's why a lot of user-based sites that require a username and password state that they will "never ask you for your password" or something along the lines of that. That's because there can always be corrupt individuals who will take that information and abuse it, and that's a definate and big risk when it comes to credit cards.

And if that information comes in a receipt via email, then it is gauranteed NOT safe and any hacker can view that information and use it for their own advantage. That's abuse and theft right there..

[nighthawke]

I'll add on to what i've posted and submit a appeal to Shawn.
http://www.ironmountain.com/US/solutions/business/privacy.asp
This portal shows what is required for is ISP/CSP owner/operators need to do to ensure the safety and protection of our clients and customers.

In fact, I would consider revealing the full Credit Card # on anyone's receipt to be a federal and state violation of that person's privacy.

Shawn, please pull that feature with the next build? It's too dangerous to do that for our customer's sake.

[digitalpoint]

You already have to specifically enable it to store full credit card numbers. It stores partial by default (it's always been like that).

[EGS]

You already have to specifically enable it to store full credit card numbers. It stores partial by default (it's always been like that).
Thus the reason why it needs to be changed..

[nighthawke]

We have warned him not to do it. But if he wants to, let him go ahead and do it at his own peril.

I'm going to leave it at that and if he does get in trouble, it's his company that will pay.

[KevinK]

VISA/MasterCard regs I think mention the “show only the last 4 digits” thing. Very dangerous to show the whole credit card number. Wouldn’t do it…

[WhiteMarker]

I have heard good things from this affiliate program: https://www.acclaimnetwork.com/ do you know anything about it?

[PayItForward]

Thus the reason why it needs to be changed..

He's saying it stores PARTIAL credit card numbers by default.

You have me confused now. Do you want it to show the full number, or do you not want it to show the full #?