Credit card validation

[Gros]

Hi all. I'm working with a payment module that takes card details and authorizes payments, but the code is tied up in EJBs and CORBA objects which I don't currently have access to, so can't see what's going on.

Do you know what part the address plays in validation? Does the billing address supplied have to match the card details? If the card details are all correct and the name matches, does the billing address passed matter?

Cheers.

[Moscow Mule]

Do you know what part the address plays in validation?
IIRC, you need to supply at least a correct postcode and house number. Without it, there's a set of rules about what is allowed to be charged.

Does the billing address supplied have to match the card details?
Yes.

If the card details are all correct and the name matches, does the billing address passed matter?
Yes.

[Ardesco]

It totally depends on the security settings you have. The minimum requirements are the house number and the numbers in your postcode. Maximum requirements can be the entire address, but nobody does this as generally speaking people will put the correct info in the wrong box and then bitch and moan.

Billing address generally speaking does matter, but some systems are configured to ignore it. The level of checking you perform will determine your liability if the credit card has been used fraudulently.

If you do basically no checking the bank will take the money back from your merchant account in the event of a dispute, if you do all the checking that you can the bank will cover the cost of any fraudulent transactions.

You may want to find out how much validation the business wants coded in to reduce their potential liabilities.

[Gros]

Thanks chaps, that's useful.