Society of Payment Security Professionals Forum  

Go Back   Society of Payment Security Professionals Forum > Discussion Groups > PA-DSS (PABP)

Reply
 
Thread Tools Display Modes
  #1  
Old 07-29-2009, 06:20 AM
rx.jeff rx.jeff is offline
Senior Member
 
Join Date: Feb 2008
Posts: 125
Default is zip code encoded in track1 or track2?

i just had an interesting question from a client who wanted to charge their customers more if out of town patrons used credit cards for payment. one line of thought was that as soon as the machine reads the credit card and (assuming that the zip code is encoded), it would charge $x more if out of predefined "local" zip code.

i didn't think it was encoded and thought i would confirm it with you guys. i've taken a look at the track1 and track2 of my own real cc and couldn't see it. what say you?
Reply With Quote
  #2  
Old 07-29-2009, 10:41 AM
stewart05 stewart05 is offline
Member
 
Join Date: Sep 2007
Posts: 64
Default

I don't belive it is on any track data.

On a side note, I belive that what your cutomer wants to do is against their merchant agreement, so you might want to advise them against it.
Reply With Quote
  #3  
Old 07-30-2009, 07:32 AM
ADail ADail is offline
Senior Member
 
Join Date: Mar 2009
Location: Tulsa, OK
Posts: 196
Default

Google is almost as cool as duct tape & WD-40.

http://www.tech-faq.com/mag-stripe-cards.shtml
Reply With Quote
  #4  
Old 08-01-2009, 10:07 AM
jbhall56's Avatar
jbhall56 jbhall56 is offline
Senior Member
 
Join Date: Feb 2007
Location: Minneapolis, MN
Posts: 1,277
Default

Quote:
Originally Posted by rx.jeff View Post
i just had an interesting question from a client who wanted to charge their customers more if out of town patrons used credit cards for payment. one line of thought was that as soon as the machine reads the credit card and (assuming that the zip code is encoded), it would charge $x more if out of predefined "local" zip code.

i didn't think it was encoded and thought i would confirm it with you guys. i've taken a look at the track1 and track2 of my own real cc and couldn't see it. what say you?
You've got to love it. Ranks up there with the urban myth that hotel guests' personal information is encoded on hotel key cards. Both are a big load of BS.

No where on any credit card is the cardholder's zip code encoded. What they are likely referring to is some merchants at unattended POS are asking for the cardholder's zip code instead of CVV/CVC/CID because zip code is easier for the customer to remember. They use the zip code when they authenticate the card with their processor.
__________________
Jeff Hall, Director, Risk Advisory Services
RSM McGladrey Inc
801 Nicollet Mall, 11th Floor, West Tower
Minneapolis, MN 55402-2526
612 376 9280 - office
612 395 7280 - facsimile
www.mcgladrey.com

The views presented are those of the writer and are not necessarily those of RSM McGladrey Inc
Reply With Quote
  #5  
Old 08-01-2009, 03:40 PM
ADail ADail is offline
Senior Member
 
Join Date: Mar 2009
Location: Tulsa, OK
Posts: 196
Default

It could also be something like when automated fuel dispensers ask for Zip code as part of address verification. Typically the function is turned on in high-fraud areas. You'll often also encounter velocity settings of 1,2, or 3, which is the number of times a card can be used outside during a 24 hour period.
Reply With Quote
Reply

Thread Tools
Display Modes

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is On
HTML code is Off
Forum Jump


All times are GMT -8. The time now is 05:53 AM.


Copyright (c) The Aegenis Group, Inc.