Do businesses save their customers' credit card information until the payment is finalized?Can I negotiate to have a credit card interest fee waived?Is there a rule that a merchant must identify themself when making a chargeWhat are “PIN-less” transactions, when are they possible, and how do I make sure my transaction is PIN-less?Why don't banks allow more control over credit/debit card charges?Why would a restaurant offer a very large cash discount?How do service providers and payment processors process payment reversals?Proper response to restaurants taking extra tip?Reversing the credit card model to make it secureIs there such a thing as a credit card with no (currency exchange) fees?Credit Card Transaction not appearing
"Are you happy?" as a greeting
How do I find files with no group permissions?
Dynamics m, r, s, and z. What do they mean?
Paper status "Accept with Shepherd". What does it really mean?
What is the fastest algorithm for finding the natural logarithm of a big number?
Exists infinitely many as a numerical-quantifier
MSSNG VWLS CNNCT WLL
How to say dandruff in Esperanto?
Is the Thief Rogue's Thief's Reflexes feature optional?
Is there a push, in the United States, to use gender-neutral language and gender pronouns (when they are given)?
Is Time Machine also backing up my Windows data from Bootcamp?
Do you say "good game" after a game in which your opponent played poorly?
How is Smough's name pronounced?
How can a company compel a W2 employee to sign a non-compete agreement?
How to duplicate in 2 x A5 a text written in A4 format on several page?
What is the design rationale for having armor and magic penetration mechanics?
Displaying characteristics of the Hero in a console game
How can a "proper" function have a vertical slope?
SSD or HDD for server
"Distance" vs "a distance"
Open Loop gain of an Op-Amp
Is it plausible that an interrupted Windows update can cause the motherboard to fail?
Is there a historical explanation as to why the USA people are so litigious compared to France?
How many integers are there that are not divisible by any prime larger than 20 and not divisible by the square of any prime?
Do businesses save their customers' credit card information until the payment is finalized?
Can I negotiate to have a credit card interest fee waived?Is there a rule that a merchant must identify themself when making a chargeWhat are “PIN-less” transactions, when are they possible, and how do I make sure my transaction is PIN-less?Why don't banks allow more control over credit/debit card charges?Why would a restaurant offer a very large cash discount?How do service providers and payment processors process payment reversals?Proper response to restaurants taking extra tip?Reversing the credit card model to make it secureIs there such a thing as a credit card with no (currency exchange) fees?Credit Card Transaction not appearing
.everyoneloves__top-leaderboard:empty,.everyoneloves__mid-leaderboard:empty,.everyoneloves__bot-mid-leaderboard:empty
margin-bottom:0;
Paying by credit card is a multi-step process where only the initial authorization is made at the point of sale, with the finalized transactions usually entered as a batch at the end of each business day. In the United States, for service (as opposed to goods) transactions, the finalized charge is often different from the initial authorization amount, as it includes any tip that the customer may have left.
Does the restaurant's credit card system typically store the customer's credit card information after the initial authorization until the charge is finalized? If so, for how long is it typically stored? If not, how is the business able to change the amount charged to the card?
credit-card identity-theft transaction
add a comment
|
Paying by credit card is a multi-step process where only the initial authorization is made at the point of sale, with the finalized transactions usually entered as a batch at the end of each business day. In the United States, for service (as opposed to goods) transactions, the finalized charge is often different from the initial authorization amount, as it includes any tip that the customer may have left.
Does the restaurant's credit card system typically store the customer's credit card information after the initial authorization until the charge is finalized? If so, for how long is it typically stored? If not, how is the business able to change the amount charged to the card?
credit-card identity-theft transaction
You first sentence is totally wrong, and only applies in some cases.
– Fattie
5 hours ago
add a comment
|
Paying by credit card is a multi-step process where only the initial authorization is made at the point of sale, with the finalized transactions usually entered as a batch at the end of each business day. In the United States, for service (as opposed to goods) transactions, the finalized charge is often different from the initial authorization amount, as it includes any tip that the customer may have left.
Does the restaurant's credit card system typically store the customer's credit card information after the initial authorization until the charge is finalized? If so, for how long is it typically stored? If not, how is the business able to change the amount charged to the card?
credit-card identity-theft transaction
Paying by credit card is a multi-step process where only the initial authorization is made at the point of sale, with the finalized transactions usually entered as a batch at the end of each business day. In the United States, for service (as opposed to goods) transactions, the finalized charge is often different from the initial authorization amount, as it includes any tip that the customer may have left.
Does the restaurant's credit card system typically store the customer's credit card information after the initial authorization until the charge is finalized? If so, for how long is it typically stored? If not, how is the business able to change the amount charged to the card?
credit-card identity-theft transaction
credit-card identity-theft transaction
asked 11 hours ago
tparkertparker
2201 silver badge9 bronze badges
2201 silver badge9 bronze badges
You first sentence is totally wrong, and only applies in some cases.
– Fattie
5 hours ago
add a comment
|
You first sentence is totally wrong, and only applies in some cases.
– Fattie
5 hours ago
You first sentence is totally wrong, and only applies in some cases.
– Fattie
5 hours ago
You first sentence is totally wrong, and only applies in some cases.
– Fattie
5 hours ago
add a comment
|
2 Answers
2
active
oldest
votes
I wouldn't regard that article as knowledgeable about credit card processing systems, however:
Does the restaurant's credit card system typically store the
customer's credit card information after the initial authorization
until the charge is finalized? If so, for how long is it typically
stored?
They shouldn't do, unless their business is fully PCI-DSS security compliant.
If not, how is the business able to change the amount charged to the
card?
When the restaurant processes the card for the initial hold, they will get an identity/authorisation code back for that particular transaction. They can then submit an additional/amended transaction using that identity/authorisation code, which their card services provider can use to refer back to the initial transaction and re-use the card details as originally processed.
add a comment
|
Merchants should ideally not be in possession of customer credit card data. Where merchants have payment terminals provided by a credit card processor (those machines you tap with your card or slide in to read the chip), the merchant doesn't even see the credit card number. Since the merchant receives a transaction identifier, they have the means to amend a transaction without having access to the CC number.
The following may now be obsolete, but one CC system I worked on allowed a mobile (no radio) POS terminal to accept credit cards for purchases. The transactions were batched up on the device until it could be docked and the data uploaded to the credit card processor (perhaps at the end of a day). PCI compliance required the transactions to be encrypted in a fairly specific manner to ensure that the stored data could only be decrypted by the processor. Given the advances in wireless communication since then, I would expect that there is no longer a need to store transactions on the device, and that they are uploaded immediately.
add a comment
|
Your Answer
StackExchange.ready(function()
var channelOptions =
tags: "".split(" "),
id: "93"
;
initTagRenderer("".split(" "), "".split(" "), channelOptions);
StackExchange.using("externalEditor", function()
// Have to fire editor after snippets, if snippets enabled
if (StackExchange.settings.snippets.snippetsEnabled)
StackExchange.using("snippets", function()
createEditor();
);
else
createEditor();
);
function createEditor()
StackExchange.prepareEditor(
heartbeatType: 'answer',
autoActivateHeartbeat: false,
convertImagesToLinks: true,
noModals: true,
showLowRepImageUploadWarning: true,
reputationToPostImages: 10,
bindNavPrevention: true,
postfix: "",
imageUploader:
brandingHtml: "Powered by u003ca class="icon-imgur-white" href="https://imgur.com/"u003eu003c/au003e",
contentPolicyHtml: "User contributions licensed under u003ca href="https://creativecommons.org/licenses/by-sa/4.0/"u003ecc by-sa 4.0 with attribution requiredu003c/au003e u003ca href="https://stackoverflow.com/legal/content-policy"u003e(content policy)u003c/au003e",
allowUrls: true
,
noCode: true, onDemand: true,
discardSelector: ".discard-answer"
,immediatelyShowMarkdownHelp:true
);
);
Sign up or log in
StackExchange.ready(function ()
StackExchange.helpers.onClickDraftSave('#login-link');
);
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
Required, but never shown
StackExchange.ready(
function ()
StackExchange.openid.initPostLogin('.new-post-login', 'https%3a%2f%2fmoney.stackexchange.com%2fquestions%2f115494%2fdo-businesses-save-their-customers-credit-card-information-until-the-payment-is%23new-answer', 'question_page');
);
Post as a guest
Required, but never shown
2 Answers
2
active
oldest
votes
2 Answers
2
active
oldest
votes
active
oldest
votes
active
oldest
votes
I wouldn't regard that article as knowledgeable about credit card processing systems, however:
Does the restaurant's credit card system typically store the
customer's credit card information after the initial authorization
until the charge is finalized? If so, for how long is it typically
stored?
They shouldn't do, unless their business is fully PCI-DSS security compliant.
If not, how is the business able to change the amount charged to the
card?
When the restaurant processes the card for the initial hold, they will get an identity/authorisation code back for that particular transaction. They can then submit an additional/amended transaction using that identity/authorisation code, which their card services provider can use to refer back to the initial transaction and re-use the card details as originally processed.
add a comment
|
I wouldn't regard that article as knowledgeable about credit card processing systems, however:
Does the restaurant's credit card system typically store the
customer's credit card information after the initial authorization
until the charge is finalized? If so, for how long is it typically
stored?
They shouldn't do, unless their business is fully PCI-DSS security compliant.
If not, how is the business able to change the amount charged to the
card?
When the restaurant processes the card for the initial hold, they will get an identity/authorisation code back for that particular transaction. They can then submit an additional/amended transaction using that identity/authorisation code, which their card services provider can use to refer back to the initial transaction and re-use the card details as originally processed.
add a comment
|
I wouldn't regard that article as knowledgeable about credit card processing systems, however:
Does the restaurant's credit card system typically store the
customer's credit card information after the initial authorization
until the charge is finalized? If so, for how long is it typically
stored?
They shouldn't do, unless their business is fully PCI-DSS security compliant.
If not, how is the business able to change the amount charged to the
card?
When the restaurant processes the card for the initial hold, they will get an identity/authorisation code back for that particular transaction. They can then submit an additional/amended transaction using that identity/authorisation code, which their card services provider can use to refer back to the initial transaction and re-use the card details as originally processed.
I wouldn't regard that article as knowledgeable about credit card processing systems, however:
Does the restaurant's credit card system typically store the
customer's credit card information after the initial authorization
until the charge is finalized? If so, for how long is it typically
stored?
They shouldn't do, unless their business is fully PCI-DSS security compliant.
If not, how is the business able to change the amount charged to the
card?
When the restaurant processes the card for the initial hold, they will get an identity/authorisation code back for that particular transaction. They can then submit an additional/amended transaction using that identity/authorisation code, which their card services provider can use to refer back to the initial transaction and re-use the card details as originally processed.
answered 10 hours ago
OwainOwain
3743 bronze badges
3743 bronze badges
add a comment
|
add a comment
|
Merchants should ideally not be in possession of customer credit card data. Where merchants have payment terminals provided by a credit card processor (those machines you tap with your card or slide in to read the chip), the merchant doesn't even see the credit card number. Since the merchant receives a transaction identifier, they have the means to amend a transaction without having access to the CC number.
The following may now be obsolete, but one CC system I worked on allowed a mobile (no radio) POS terminal to accept credit cards for purchases. The transactions were batched up on the device until it could be docked and the data uploaded to the credit card processor (perhaps at the end of a day). PCI compliance required the transactions to be encrypted in a fairly specific manner to ensure that the stored data could only be decrypted by the processor. Given the advances in wireless communication since then, I would expect that there is no longer a need to store transactions on the device, and that they are uploaded immediately.
add a comment
|
Merchants should ideally not be in possession of customer credit card data. Where merchants have payment terminals provided by a credit card processor (those machines you tap with your card or slide in to read the chip), the merchant doesn't even see the credit card number. Since the merchant receives a transaction identifier, they have the means to amend a transaction without having access to the CC number.
The following may now be obsolete, but one CC system I worked on allowed a mobile (no radio) POS terminal to accept credit cards for purchases. The transactions were batched up on the device until it could be docked and the data uploaded to the credit card processor (perhaps at the end of a day). PCI compliance required the transactions to be encrypted in a fairly specific manner to ensure that the stored data could only be decrypted by the processor. Given the advances in wireless communication since then, I would expect that there is no longer a need to store transactions on the device, and that they are uploaded immediately.
add a comment
|
Merchants should ideally not be in possession of customer credit card data. Where merchants have payment terminals provided by a credit card processor (those machines you tap with your card or slide in to read the chip), the merchant doesn't even see the credit card number. Since the merchant receives a transaction identifier, they have the means to amend a transaction without having access to the CC number.
The following may now be obsolete, but one CC system I worked on allowed a mobile (no radio) POS terminal to accept credit cards for purchases. The transactions were batched up on the device until it could be docked and the data uploaded to the credit card processor (perhaps at the end of a day). PCI compliance required the transactions to be encrypted in a fairly specific manner to ensure that the stored data could only be decrypted by the processor. Given the advances in wireless communication since then, I would expect that there is no longer a need to store transactions on the device, and that they are uploaded immediately.
Merchants should ideally not be in possession of customer credit card data. Where merchants have payment terminals provided by a credit card processor (those machines you tap with your card or slide in to read the chip), the merchant doesn't even see the credit card number. Since the merchant receives a transaction identifier, they have the means to amend a transaction without having access to the CC number.
The following may now be obsolete, but one CC system I worked on allowed a mobile (no radio) POS terminal to accept credit cards for purchases. The transactions were batched up on the device until it could be docked and the data uploaded to the credit card processor (perhaps at the end of a day). PCI compliance required the transactions to be encrypted in a fairly specific manner to ensure that the stored data could only be decrypted by the processor. Given the advances in wireless communication since then, I would expect that there is no longer a need to store transactions on the device, and that they are uploaded immediately.
answered 2 hours ago
Anthony XAnthony X
8765 silver badges9 bronze badges
8765 silver badges9 bronze badges
add a comment
|
add a comment
|
Thanks for contributing an answer to Personal Finance & Money Stack Exchange!
- Please be sure to answer the question. Provide details and share your research!
But avoid …
- Asking for help, clarification, or responding to other answers.
- Making statements based on opinion; back them up with references or personal experience.
To learn more, see our tips on writing great answers.
Sign up or log in
StackExchange.ready(function ()
StackExchange.helpers.onClickDraftSave('#login-link');
);
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
Required, but never shown
StackExchange.ready(
function ()
StackExchange.openid.initPostLogin('.new-post-login', 'https%3a%2f%2fmoney.stackexchange.com%2fquestions%2f115494%2fdo-businesses-save-their-customers-credit-card-information-until-the-payment-is%23new-answer', 'question_page');
);
Post as a guest
Required, but never shown
Sign up or log in
StackExchange.ready(function ()
StackExchange.helpers.onClickDraftSave('#login-link');
);
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
Required, but never shown
Sign up or log in
StackExchange.ready(function ()
StackExchange.helpers.onClickDraftSave('#login-link');
);
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
Required, but never shown
Sign up or log in
StackExchange.ready(function ()
StackExchange.helpers.onClickDraftSave('#login-link');
);
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
You first sentence is totally wrong, and only applies in some cases.
– Fattie
5 hours ago