Our ticket office is currently closed to the public, but still working to provide customer service to those impacted by event cancellations. We are not accepting new credit card information, but issuing refunds with on account and the refund prior payments tool. We are exploring how we may establish some controls in case we have to go fully remote, and accept credit card payments from home.
Has anyone developed a reporting mechanism or auditing system that can be used to verify that a user isn't refunding to a different credit card than the one that was used to purchase? Basically we have been asked by our auditors to come up with a way to prove that staff are not refunding credit card payments to their own personal credit cards. I looked through all of the financial canned reports, and I cannot find anything that will give someone the ability to see if the payment method used to purchase matches the refunded payment method. (Without exposing credit card information, of course). Has anyone figured out an auditing method, or know of a report that I may have missed? Thanks!