CC shared secret

James Firth ukcrypto at chiark.greenend.org.uk
Wed, 6 Aug 2008 20:05:51 +0100


Roland Perry wrote:
> Or does CYOCTA contact each cardholder's bank in
> real time with a copy of the secret asking "does this match"? 

Yes. CYOCTA and Verified by Visa are only the conduits for merchants.  They
work out the issues using the first 4 digits from the card and proxy the
authentication.

https://partnernetwork.visa.com/vpn/global/category.do?userRegion=1&category
Id=85&documentId=117

James Firth