Release 12 – Credit Card Security Code

This requirement was a much required functionality for any transaction involving Credit Cards in earlier releases, such as 11i. Typically the fraud rates are higher in case of Web-Orders, Mail orders and telephone orders than face-to-face transactions. Credit card companies are now directing merchants to ask cardholders for the Credit Card Verification Value of their credit card when cardholders place orders.

The Credit Card Verification Value is a three or four digit security code that is most often printed on the back of credit cards. By asking the cardholder to provide the Credit Card Verification Value the merchant can validate that a genuine card is being used during the transaction. Merchants using Credit Card Verification Value can expect to reduce their chargebacks by as much as 26 percent. Visa calls the credit card verification value for CVV2, MasterCard/Eurocard calls it CVC2, Discover Card and American Express calls it CID.

Credit Card Security Code is supported through Order Import in addition to Order Management user interfaces and process order public API.The security code is however, not stored anywhere in the database, although the Credit Card numbers are stored in encrypted form.

Some points to be noted :

Copying of payment attributes from a source order to a destination order would be supported only when the security code is not
set as mandatory. If the security code was set as mandatory in Oracle Payments, when trying to copy an order to a new order, you would have to uncheck the Payments box in the header or line before copying. If you go ahead with the copy, an appropriate error message would be displayed, asking the user to use copy appropriately. The reason why this is happening is because the security code value is available only temporarily, that too only till the time authorization is done. Once authorization is done, the security code value gets nulled out and is not stored anywhere. Hence, when an order is copied, it will the Security Code is null and the copy is not successful.