A simple way to prevent credit card fraud?

Re:A simple way to prevent credit card fraud? by CoachRufus87 on Saturday May 07, 2011 @08:25PM (#2524944)

is it a PCI violation to store the expiration month/year of a customers CC (for the purpose of knowing when a CC expires and reminding the card holder to update their info)

[ Parent | on HN ]

Re:A simple way to prevent credit card fraud? by Ixiaus on Sunday May 08, 2011 @12:43AM (#2525272)

I believe it is a violation to store the expiration date without encrypting it. I could be wrong, here is a link to PCI DSS standards documents.

[ Parent | on HN ]

Re:A simple way to prevent credit card fraud? by CoachRufus87 on Monday May 09, 2011 @03:35PM (#2529905)

hey could you send me that link again?

Edit: I looked up the document, TL;DR - you don't need to encrypt the cardholder name, service code, or expiration date unless you are also storing an associated primary account number.

[ Parent | on HN ]