When taking donations or ticket orders on the phone or via snail mail...does your organization require a CVC code from the customer?
I know many organizations use them for online orders/donations but what about on mail-in forms or for phone calls?
Just want to know how these are being utilized by other similar arts organizations. If you have any reasons as to why your organization does it the way they do that'd be great info too.
Thank you!
CVV codes are intended to affirm that the card is present, and thus when they are communicated over the web or on the phone, they are not to be stored in any way after the transaction has been authorized.
I can't find anything definitive about mail order forms, but if you did collect this information on a mail form, it would need to be destroyed entirely after authorizing. My interpretation is that since there is significant lag time between when the card data is recorded on the order form by the customer and when it is submitted by the merchant for authorization, it is not appropriate to ask for a CVV/CVC.
Ultimately, you should be able to ask your merchant bank for their input on this question.