#sandy-card-updater

1 messages · Page 1 of 1 (latest)

lofty crowBOT
distant sable
#

hello

wary osprey
#

sorry totally missed your question after opening the thread

#

the update feature would only update the underlying card number and expiration date. The CVC is irrelevant in this flow

#

sandy-card-updater

distant sable
#

ok but how would the cvc be updated?

wary osprey
#

it wouldn't, the CVC doesn't matter at all at this point. It only matters when you collect card details the first time that's all

distant sable
#

well we collect card number, expiration date, and cvc at the time of payment which is saved

#

for next time payment

#

and we have a rule in place so that the cvc is required and needs to match in order for the transaction to go thru

#

so if the card changes/gets updated how is the cvc updated?

wary osprey
#

That's not really how it works though

#

The CVC is a really sensitive piece of information. It is never stored. You collect it and it's used for the first payment and then immediately discarded. That's a strict rule associated with PCI

#

no payment processor stores this information, and all future payments on a saved card are done without CVC (and always have)

#

so when a card is updated, the CVC doesn't matter and would never be shared or obtained

distant sable
#

but then how is our rule of blocking cvc mismatch not affected?

#

if future payments are done without cvc, how is the transaction not blocked if the rule (block of CVC mismatch) is in place?

wary osprey
#

because the rule is about the check failing. If there's no CVC, there's no check, so it's not failing.

#

that rule mostly applies to the first payment, the one with the CVC where the bank tells us if it's valid or not

distant sable
#

ic so that rule is only at first time entry and for all future payments theres no cvc attached when processing payments

wary osprey
#

yes

distant sable
#

ok thank you for the clarification

wary osprey
#

sure thing!

distant sable
wary osprey
#

it won't require the CVC either, it's a saved card, the fact that it's updated is irrelevant

distant sable
#

got it thanks again