|
||
16th September 2014
Release confirmation:
Following previous notifications regarding upcoming enhancements to our security systems we confirm that the CCV details will be removed from our database and will no longer be stored in the Credit Card Vault.
After extensive consultation with our lawyers and PCC Accreditation specialists a solution that will minimise the impact of our change was agreed on.
The new solution is currently being put in place which results in a slight delay to the initial release time:
Estimated Release time: Tuesday, September 16th, 2:00 PM (AEST)
This is an important update so please read on carefully.
Important update on CCV delivery:
From today, Tuesday 16th September, we will no longer store the CCV details in the Credit Card Vault.
However, to ensure that the complete payment details are provided, the CCV number will now be sent via email and will be included in a password protected PDF attachment.
The password is your ResOnline Channel Manager ID (it can be found in the Online Distribution section - Property Details - above your property name field).
The email containing the CCV number will be sent as a separate communication apart from the regular email confirmation for your booking.
This email will be generated for all ‘Your Website’ and OTA bookings where the Guests’ Credit Card was supplied and will contain limited information about the booking and a short explanation on how to access the pdf file.
According to PCI Data Security Standards, under no circumstances is Room Manager and Resonline allowed to store the CCV, therefore:
•we will only be able to send the CCV to you once
•once sent, the email and any trace of it will be deleted from our system and we will not be able to resend it
•the email containing the CCV attachment will be sent to the email address placed in Online Distribution - Property Details page - ‘Reservations’ filed - please ensure this field is up to date
•the email will be sent from the dmemailservice@resonline.com email address - please make sure that this email is recognised by your email provider to avoid having it identified as spam
•the Subject for the CCV attachment email will be similar to…
CCV details for [distribution channel name] booking reference : [booking id]
•once you process an authorisation or collect the first payment using these CCV details, you must delete this email from your records. The same regulations forbidding Room Manager and Resonline to store CCV also applies to all merchants.
If you have any questions, please don’t hesitate to contact our friendly support team by emailing support@roommanager.com.au
4th September 2014
No CCV supplied from 15th September 2014
As part of the ongoing commitment to improve the Security of Credit Card handling Room Manager and Resonline (Online Distribution) is introducing the following changes:
From Monday, 15th September, 2014 Room Manager and Resonline will no longer provide the CCV with the the Guests’ credit card details.
What is CCV?
CCV (Card Code Verification, also called CVN or CVV) is an authentication scheme established by credit card companies to increase security measures for internet transactions.
Why do we stop providing CCV?
According to the PCI Security Standards Resonline is not allowed to store or facilitate the CCV for the credit card details provided by your guests. This item in the PCI Data Security Standards is not negotiable.
As of the 15th September:
•for all existing bookings - the CCV will be removed from the credit card vault (in both systems - Room Manager and Resonline - Online Distribution),
•for all bookings made after 15th Sept - the CCV will not be stored.
•if you collect deposits, the CCV will still be collected, and used to collect payment, but the CCV will not be stored in the credit card vault.
Rest assured that the credit card information provided by your Guest will still be available in the credit card vault (both on your Booking Reservation screen and in the Online Distribution - Reports), however, the CCV will not be supplied.
This will affect all bookings:
•Online bookings: where a Guest’s credit card or a Virtual credit card is provided with the booking (i.ex: for booking made on Your website, Booking.com, Wotif etc).
•Internal bookings: the credit card vault field will not allow you to store the CCV. The number will be removed from the vault after you save changes (or process Gateway payment)
How will it affect the payment collection process?
Most banks in Australia do not require the CCV to process the payment via their merchant facilities. We strongly recommend that you contact your Bank's Merchant Services Team immediately to find out what are the available options to handle your payments without the CCV. We have been informed by the Big 4 Banks that this is a simple adjustment for them to make for your merchant account.
As an alternative to the bank merchant facilities, Room Manager integrates with Electronic Gateways (i.ex.: Secure Pay) ensuring the payment for Your Website bookings is collected at the time of booking.
You can also process a manual payment using electronic payment gateway (no CCV is required).
For more information on the Online Gateway Payment click here.
Deposits and outstanding payments
If you collect the deposit at the time of booking and you require to take an additional payment here is how you can do it:
•with SecurePay - (Electronic Gateway) collect additional amount using original cc stored on Secure Pay. Click here to see how it works
•Collect the CCV from the Guest over the phone or in person when they check in or out
Credit card security is very important to us and the current changes are made in order to improve the security of your Guests Personal Details.
We understand that this change may not be convenient for your current processing, but we are also confident that you also treat Credit Card security as a high priority and will accept that this is a necessary change with your Guests interests at heart.
Should you have any questions about this change, please contact our Support Team at the following email address, support@roommanager.com.au