Card transactions by proxy

[Peter Tomlinson]

On 04/04/2011 11:00, David Biggins wrote:
>> -----Original Message-----
>> From: ukcrypto-bounces at chiark.greenend.org.uk [mailto:ukcrypto-
>> bounces at chiark.greenend.org.uk] On Behalf Of Peter Tomlinson
>> Sent: 03 April 2011 7:30 AM
>> To: UK Cryptography Policy Discussion Group
>> Subject: Re: Card transactions by proxy
>>
>> On 02/04/2011 20:58, Florian Weimer wrote:
>>> It is my understanding that a very similar thing happens when you do
>>> some business transaction over the phone (like booking a hotel).
> The
>>> call center agent typically enters your credit card details into a
> web
>>> application on your behalf.
>> But surely that is a 'cardholder not present' transaction - and they
> must not
>> ask you for the 3 digit CVV number off the back of the card.
> Strange - almost every PNP transaction I've ever made has demanded the
> CVV.
>
> At the end of the day, the decision usually comes down to how badly you
> want the Pizza.
Maybe my memory is failing me, then - thinking about it (sic), its a 
long time since I did a CNP over the phone with a real person - last 
voice transaction was with a voice recognition system to pay a utility 
bill.

Peter