Credit Card Validation

**MitchellO** · 08-11-2008, 05:37 PM

I ordered a new screen from the MP3Car store last night, and this morning I have an email asking me to send in a verification form for the credit card I used.

Last time I ordered stuff from MP3Car (about 8mths ago) I never got such an email. I don't see why it is necessary for me to send photocopies of my licence and credit card.

I'm using American Express, who have many checks and balances in place to prevent fraud, and I've never been required to submit private documents to an online store to have my payment processed.

Can someone please explain why I received this email?

Thank you for your first order. Per standard policy we ask that with your first international order you complete a credit card authorization form. Please fill out the form completely, found at http://www.mp3car.com/store/cc_auth.html and upload it to http://www.mp3car.com/sendfile.html.

Please make sure to complete the entire form, so that we can process your order right away!

Your credit card information will be safe and secure, viewed only by the Mp3Car staff. Your credit card information will be used solely for the purpose of verifying your credit card information and order request.

Thank you in advance for you assistance. We look forward to meeting your car computing needs!

Heather
Mp3Car Manager

It's not my first order from you guys anyway, it's my second.

**ODYSSEY** · 08-11-2008, 08:03 PM

I think their form is in violation of Visa/Mastercard agreements.
I am not sure about Amex. But for Visa/Mastercard you can not require a form of ID as a requirement for accepting a card.

I am guessing they are trying to cut down on fraud/chargebacks, mainly international.

I would just send the form, but without a copy of the ID or card. But I question how secure their file send page is. They should also remove the instructions telling customers to EMAIL a scanned copy, as that is VERY insecure.

They should be using AVS and VCodes.

**MitchellO** · 08-11-2008, 08:07 PM

Exactly my point, the credit card companies are supposed to provide the protection, not some scanned form that has to be sent through an unknown channel. This is the security info for that page:

I still want to purchase my screen from MP3Car, but I won't be sending an insecure form with my personal information on it.

**MitchellO** · 08-12-2008, 08:01 AM

Still heard nothing.

**MitchellO** · 08-12-2008, 09:59 PM

Come on guys, what going on?

**NiSlo** · 08-12-2008, 10:57 PM

Interesting. I've bought stuff from the store before and it was never a problem. It' obviously a new thing.

I'd suggest replying to Heathers email directlty

**MitchellO** · 08-12-2008, 11:37 PM

I did, no response there yet

**Heather** · 08-13-2008, 11:08 AM

MitchellO - i have not seen an email from you at store@mp3car.com, otherwise I would have responded sooner.

Mp3Car has requested credit card authorizations from customers for years in order to decrease the number of fraudulent order we receive. Please understand tha we receive fraudulent orders daily.

Without getting into the details of how we process credit cards, it is at times necessary for us to have the documentation we requested from you. I am the only one that sees this documentation and you upload it to a secure location.

If you had placed another order, I either missed this information, or you used a new account, in which case I was unaware that you had ordered from us before.

This is a really important thing for us to do, in order to protect our customers as well as ourselves. If we do not do this, we risk loosing thousands each month to fraud.

Heather

**Heather** · 08-13-2008, 11:16 AM

Originally Posted by ODYSSEY

I think their form is in violation of Visa/Mastercard agreements.
I am not sure about Amex. But for Visa/Mastercard you can not require a form of ID as a requirement for accepting a card.

I am guessing they are trying to cut down on fraud/chargebacks, mainly international.

I would just send the form, but without a copy of the ID or card. But I question how secure their file send page is. They should also remove the instructions telling customers to EMAIL a scanned copy, as that is VERY insecure.

They should be using AVS and VCodes.

Hmm, okay I will look into this. We were advised to do this, and no credit card company has complained when we submit this information, in fact they have not taken an authorization without both a picture id and a credit card.

**DarquePervert** · 08-13-2008, 12:46 PM

Having dealt with retail software & credit card processing, it sounds to me like the mp3car.com store is woefully behind the times in that area.

Honestly, I'd hate to see your per-transaction fees. I'm willing to bet they're comparatively through the roof.