Why do credit card forms ask for Visa, Mastercard, etc.?
ux.stackexchange.com
Why do credit card forms ask for Visa, Mastercard, etc.?
1–10 of 99 posts
Re: Why do credit card forms ask for Visa, Mastercard, etc.?
#2Could someone who deals with PCI compliance please explain some other nuances of credit cards that I've been curious about:
* Fault/Decline Codes returned from processors like CyberSource. How are these factored? How do processors do Regex on names/addresses? [1][2]
* CVV numbers and what they mean/how they are treated in the system? If CVV number is included does this increase chargeback protection?
* How CHIP cards work differently in the processing system, if at all?
* Do "knuckle-busters" (carbon copy physical imprints) follow any sort of compliance anymore?
[1] http://apps.cybersource.com/library/documentation/dev_guides... [2] http://apps.cybersource.com/library/documentation/dev_guides...
Re: Why do credit card forms ask for Visa, Mastercard, etc.?
#3I think it was just a convention and made people feel better about having entered the form correctly. It makes sense to tell a merchant what type of card you are using even though someone "in the know" might know that it can be sussed from the digits.
Most payment gateways still require it even though it's probably superfluous.
I've also wondered why forms ask for name on card even though I'm pretty sure it's not checked by most/all processors and would never lead to a decline. Worse is that hardly any merchants pre-fill it if they've already collected your name.
Re: Why do credit card forms ask for Visa, Mastercard, etc.?
#4Why do credit card forms ask you to enter the credit card number without spaces between the clusters of digits, when it's simple for the machine to parse with or without them?
Re: Why do credit card forms ask for Visa, Mastercard, etc.?
#5Mostly it's because of PCI DSS and dinosaurs in the market leaving very little customizability of the iframes they provide.
Re: Why do credit card forms ask for Visa, Mastercard, etc.?
#6Working for nonprofits and church's, I know we do it because AMEX and others charge higher rates per transaction than say VISA, thus some clients only take VISA and giving a select list of options, lets the user know to use that type of card.
Re: Why do credit card forms ask for Visa, Mastercard, etc.?
#7Could someone who deals with PCI compliance please explain some other nuances of credit cards that I've been curious about: * Fault/Decline Codes returned from processors like CyberSource. How are these factored? How do processors do Regex on names/addresses? [1][2] * CVV numbers and what they mean/how they are treated in the system? If CVV number is included does this increase chargeback protection? * How CHIP cards…
Checks are typically very simple, no regex-ing involved.
First, names are not really checked.
For addresses, usually only the number (and sometimes just first three digits) are checked as well as the zip.
Generally the processor tries to decline as few txns as possible and instead deliver the information to the merchant to make a decision. The merchant can usually pre-configure error codes that it would like the processor to decline. This might be preferable to the merchant from a cost-saving standpoint as well as not needing to "void an auth" in order to free up the cardholders spendability.
The idea behind CVVs is that merchants are disallowed from storing them so they are far less likely to be included in stolen credit card databases. Thus, requiring them significantly decreases fraud risk. And, yes, many gateways/processors charge more for missing or incorrect CVVs.
It's harder to "steal" a chip card since the information is not sitting on an easy-to-read mag-stripe. It's not clear that chip cards would have avoided the Target thing since the fraudsters infiltrated the terminal software. I'm guessing more current terminals/software is simply harder to compromise. "Chip & pin", as is widely used in places such as Canada and Europe, might help a bit since you would need the PIN to shop off-line. But it would have minimal effect for online shopping since PIN is typically not requested.
The reason we still sign receipts and yes, you still see a carbon copy here and there, is mainly because it protects the merchant if the cardholder does a "chargeback". Merchants typically store the receipts and only turn them over if a chargeback is received. Showing the signed receipt to your processor will usually absolve you from any loss.
I think the above is accurate or close to.
Re: Why do credit card forms ask for Visa, Mastercard, etc.?
#8I'd like to see an A/B test between the 2 options. It sounds plausible that a less-sophisticated buyer might see the Visa logo light up after they've typed the first digit of their card and get confused ("WHAT WITCHCRAFT IS THIS").
Re: Why do credit card forms ask for Visa, Mastercard, etc.?
#9I think it was just a convention and made people feel better about having entered the form correctly. It makes sense to tell a merchant what type of card you are using even though someone "in the know" might know that it can be sussed from the digits. Most payment gateways still require it even though it's probably superfluous. I've also wondered why forms ask for name on card even though I'm pretty sure it's not che…
The name on the billing address is handy if you need to contact the person making the purchase.
Re: Why do credit card forms ask for Visa, Mastercard, etc.?
#10Why do credit card forms ask you to enter the credit card number without spaces between the clusters of digits, when it's simple for the machine to parse with or without them?
This came up in a training course along with why do some sites prevent characters like * / ( & from passwords. The reason is the same:
Poor Input Validation
Basically whoever was behind making the site couldn't be bothered dealing with those cases and just made them illegal options. Makes you wonder what other corners were cut.