Show Complete Credit Card Number in Payment

I recently upgraded to Optigold 3.3.7 but now the complete credit card does not show in the payment history. How do I fix it so it shows the complete number? Currently the first 4 digits are missing from the payment history.

 

any ideas as to when 3.3.8 will be released? I am getting more & more support questions relating to this issue. Customers think there is something wrong with their payment & expect us to have it fixed ASAP.

 

when will 3.8.8 be released to fix this problem? Your last post in June said it would probably be available towards the end of the week.

Is there any chance it has been fixed by now? I am amazed at how many customers contact me because they think the wrong card was charged.

 

The problem is not that it sends the card number to anyone ... it's ok if it's not fixed on our side - but here's where the confusion creeps in ...

Say a customer has a VISA # 4128-3900-1234-1234 ...

When it processes the transaction, and creates a receipt, it only posts the last 12 characters ... i.e. 3900-1234-1234 - but that is internal, so as I said, no issues ...

But is sends the customer a receipt saying ....

BE IT KNOWN, that the undersigned hereby acknowledges receipt of the sum of $XX.xx paid by AmEx

Now THIS is whay confuses the customer ... because they don't have an AMEX on file - they have a VISA !!

Hence, the receipt uses the information from the 2nd set of characters to determine how the customer paid ... if the 2nd set is, for example "0123" it will say ...

BE IT KNOWN, that the undersigned hereby acknowledges receipt of the sum of $XX.xx paid by CrCd

This is generic enough - so it's not an issue ... but in a lot of cases, the 2nd set is a 3xxx or 4xxx or 5xxx or 6xxx and is causing a lot of confusion

Your last post talks about a solution in JUNE ... summer's over - it's the end of AUGUST now

 

Do you mind sharing your method for displaying the card type on the receipt, I haven't been able to figure that one out yet.

 

I don't like the idea of showing full CC #'s on receipts either. In fact, that is almost stepping over the line of privacy laws that are in place to protect consumers. Tell your custies that those #'s are omitted for the sake of personal and financial privacy.

We have NEVER, in the history of the ISP's I have worked for, EVER had someone complain about why their full CC # are not being shown on their receipts.

In fact I have records showing folks approving our privacy policies that we have had in effect, that have exceeded all privacy laws in effect then and now. No, don't even try to do that. If some crackhead gets ahold of a full CC #, game over man. You'll never live it down.

 

I do not understand why you want to show complete credit card numbers in payments, and why this application would even let you do so. I believe that is a violation of personal and financial privacy laws...I know I wouldn't want my ISP to see my credit card number, no matter how reputable they are.

Companies realize this and mostly respect this. That's why a lot of user-based sites that require a username and password state that they will "never ask you for your password" or something along the lines of that. That's because there can always be corrupt individuals who will take that information and abuse it, and that's a definate and big risk when it comes to credit cards.

And if that information comes in a receipt via email, then it is gauranteed NOT safe and any hacker can view that information and use it for their own advantage. That's abuse and theft right there..

 

I'll add on to what i've posted and submit a appeal to Shawn.
http://www.ironmountain.com/US/solutions/business/privacy.asp
This portal shows what is required for is ISP/CSP owner/operators need to do to ensure the safety and protection of our clients and customers.

In fact, I would consider revealing the full Credit Card # on anyone's receipt to be a federal and state violation of that person's privacy.

Shawn, please pull that feature with the next build? It's too dangerous to do that for our customer's sake.

 

Thus the reason why it needs to be changed..

 

We have warned him not to do it. But if he wants to, let him go ahead and do it at his own peril.

I'm going to leave it at that and if he does get in trouble, it's his company that will pay.

 

VISA/MasterCard regs I think mention the “show only the last 4 digits” thing. Very dangerous to show the whole credit card number. Wouldn’t do it…

 

I have heard good things from this affiliate program: https://www.acclaimnetwork.com/ do you know anything about it?

 

He's saying it stores PARTIAL credit card numbers by default.

You have me confused now. Do you want it to show the full number, or do you not want it to show the full #?

 

Acclaim is a pretty well recognized credit card affiliate network. 2 other well-respected networks are NCS Reporting and CardOffers.

 

Showing the entire credit card number is likely in violation of either:

1) U.S. Fair and Accurate Credit Transactions Act of 2003 ( http://www.ftc.gov/os/statutes/031224fcra.pdf)

Excerpt:

(g) Truncation of Credit Card and Debit Card Numbers
(1) In general. Except as otherwise provided in this subsection, no person that accepts
credit cards or debit cards for the transaction of business shall print more than the
last 5 digits of the card number or the expiration date upon any receipt provided
to the cardholder at the point of the sale or transaction.


2) PCI ( Payment Card Industry ) standards. From the PCI Data Security Standard:

"3.3 Mask PAN when displayed
(the first six and last four digits are
the maximum number of digits to be
displayed).
Notes:
This requirement does not
supersede stricter requirements in
place for displays of cardholder
data—for example, for point-ofsale
(POS) receipts"

I'd highly recommend you mask the credit card number, or you'll find yourself in trouble on two fronts ( the "law" and the Visa/Mastercard overlords ).