News for hackers. Stuff that matters.
Re:Why are payment forms so complicated? by readme on Thursday March 07, 2013 @05:23PM (#5340760)
Um, the billing address you enter is often used to compare against the billing address on file with the CC company for security purposes. So you need the billing address, too. The security code wouldn't hurt, either.
Re:Why are payment forms so complicated? by pfredrich on Thursday March 07, 2013 @05:37PM (#5340841)
You don't need it. AVS checks numerical part only anyhow. Billing ZIP is more than enough.
Re:Why are payment forms so complicated? by robryan on Thursday March 07, 2013 @05:47PM (#5340893)
Don't think that is true. Our gateway will report zip match or full address match.
Re:Why are payment forms so complicated? by pfredrich on Thursday March 07, 2013 @06:37PM (#5341140)
http://en.wikipedia.org/wiki/Address_Verification_System

"AVS verifies the numeric portions of a cardholder's billing address. For example, if the address is 101 Main Street, Highland, CA 92346, in the United States, AVS will check 101 and 92346. Sometimes AVS checks additional digits such as an apartment number, other times it does not..."

They might call it 'full address', still it's just the numeric part.

Re:Why are payment forms so complicated? by robryan on Thursday March 07, 2013 @10:48PM (#5341985)
Ah thanks. Thought it was doing more but for most cases that would be enough. Most fraud isn't very sophisticated so just the number and zip would be enough.
Re:Why are payment forms so complicated? by PeterisP on Thursday March 07, 2013 @07:04PM (#5341274)
[edited] Apparently it does check only the numbers.
Re:Why are payment forms so complicated? by pfredrich on Thursday March 07, 2013 @07:11PM (#5341304)
Re:Why are payment forms so complicated? by PeterisP on Thursday March 07, 2013 @07:31PM (#5341386)
I had remembered from an earlier implementation that it would check everything and that we could approve transactions where numerics match but text part isn't the same; but possibly it was simply choosing what to do if street address was ok (for the number) but the postal code was wrong/missing, as here most people don't care about their postal code and may enter it wrongly.