Card transactions by proxy
pwt at iosis.co.uk
Sun Apr 3 07:29:37 BST 2011
On 02/04/2011 20:58, Florian Weimer wrote:
> * Mark Cottle:
>> I've been asked for my thoughts on what seems to be a slightly odd
>> proposal for card transactions. I wonder if anyone here can put me
>> straight on the legal and technical positions.
> Is this about credit cards?
> It is my understanding that a very similar thing happens when you do
> some business transaction over the phone (like booking a hotel). The
> call center agent typically enters your credit card details into a web
> application on your behalf.
But surely that is a 'cardholder not present' transaction - and they
must not ask you for the 3 digit CVV number off the back of the card.
More information about the ukcrypto