Forum Moderators: buckworks
Thanks
Tom
I've been using this for years and have never ever asked myself this question. I'd rather say if you don't ask them to input those numbers, you are running a very high risk for nothing.
I'd rather ask myself if Verified By Visa hurts sales, with all the MPI, PopUp, Inline Frame and whatever problems :/
I used to ask for CVV during checkout, but stopped doing it for several reasons:
* It's not required by my payment gateway.
* It doesn't lower my discount rate on transactions, so there's no monetary incentive to use it.
* The incidence of fraud in my little business niche is zero. Zilch. Nada. So I don't need CVV to protect me from fraud.
* If you're not using a third-party payment handler (i.e., if you're storing credit card information on your own web site and communicating directly with the credit card gateway), there are significant liability issues to keeping the CVV around. Credit card companies are adamant that the CVV *not* be stored anywhere and not be printed anywhere so as to keep it out of the hands of hackers. If you don't do real-time authorization (maybe shipping charges have to be calculated manually before you know the total), you have to keep the CVV number around until you *can* do the auth, and that's a significant security exposure.
* Customers screw up the entry all the time, resulting in declines on CC authorization and requiring manual intervention to process the order.
If the address/zip matches the cardholder, and they are not ordering 100 of the same thing with overnight delivery to Nigeria... we generally go ahead and ship it. ;)
Steve
CVV is great because now we have a clear yes or no answer when we come to process orders. It saves us time by easily catching fraud that previously our checks would have flagged up (which took time), and it also highlights customer data entry errors.
Never looked back since we started to use it.
The downsides are that almost no Canadian or international cards support real-time CVV checking, some customers get confused so you will see multiple authorization attempts before they get it right (which costs you money on the gateway side,) and you will occasionally lose a sale due to frustration.