Major flaw in SCCP with Authorize.net

User 596588 Photo


Registered User
42 posts

I just lost my merchant account due to some idiot trying to buy large amounts on my site. The card(s) they used may or may not have been valid, but since SCCP did not stop the same person from trying over and over, I am considered a security risk, and I lose my account.

Apparently Paypal and Google Wallet can filter out this kind of activity, Authorize.net and the account processor behind them (in this case ipayment) expect you and I to do the filtering.

I would REALLY like to see a payment processing option where the entire order is encrypted and emailed to ME, and I can see whether I want to accept it or not, I run it through a virtual terminal. Think that might ever happen?
User 103173 Photo


VP of Software Development
0 posts

That really stinks. I am amazed they would take such drastic actions over one person attempting to make those transactions.

We do have plans to offer offline transactions. We are just not 100% sure how we are going to implement that. To process the transaction, the data needs to be stored securely for manual processing. That is what we have to figure out how to do and keep the software easy to use.
Learn the essentials with these quick tips for Responsive Site Designer, Responsive Email Designer, Foundation Framer, and the new Bootstrap Builder. You'll be making awesome, code-free responsive websites and newsletters like a boss.
User 596588 Photo


Registered User
42 posts

Scott,
Long ago I used a cart package that operates similar to SCCP in that it used an offline program to generate the site and upload it all at once. It was from a company called Zilron, which may or may not be still around. Thier transaction went like this: After checkout, the whole transaction was encrypted and sent to thier secure server appilcation. That app relayed it to me using an email address I registered with them. The email address could not be changed without paying a $20.00 fee. I then used a simple decryption app to get the info out of the file, and paste it wherever I needed to. If I didn't trust the source I had the option to refuse the order without anything hitting thier credit card.

It worked well at the time, I don't know if the enviroment today makes that harder to do or not.
User 539803 Photo


Registered User
2,156 posts

Yankee, in google checkout you have the option to manually accept or cancel transactions before the payment is accepted.

Scott, the ability to just have the details sent to me from the site, with the client being able to pay by direct bank transfer would be a huge leap forward

A button next to google wallet and Paypoo button that was worded ALTERNATIVE PAYMENT OPTIONS, which when clicked sends me the details and opens a pop up window where my bank details swift code and IBAM number are displayed would be adequate for my needs.
Started using CC VSD in January 2009, I don't do HTML code, Sales from CC site exceeding expectations taken me out of semi-retirement
Hosted FREE on CC S DRIVE www.chauffeurdrivenluxurycars.co.uk
My new VSD & SCCP site Oct 2011 www.deloreanjewellery.co.uk
My friendly window cleaner www.mwcwindowcleaner.co.uk

User 38401 Photo


Senior Advisor
10,951 posts

I don't know how it is in the UK, but I can definitely say here in the US I want nothing that is going to display my bank details to be popping up in the program to anyone other than myself. I am paranoid enough as it is with the hackers that get access that you "don't" give access to, let along outright giving it to them on a silver platter.
User 539803 Photo


Registered User
2,156 posts

Viv ...VSD & SCCP user wrote:
Yankee, in google checkout you have the option to manually accept or cancel transactions before the payment is accepted.

Scott, the ability to just have the details sent to me from the site, with the client being able to pay by direct bank transfer would be a huge leap forward

A button next to google wallet and Paypoo button that was worded ALTERNATIVE PAYMENT OPTIONS, which when clicked sends me the details and opens a pop up window where my bank details swift code and IBAM number are displayed would be adequate for my needs.

JoAnn continuing this here : http://www.coffeecup.com/forums/shoppin … -transfer/
Started using CC VSD in January 2009, I don't do HTML code, Sales from CC site exceeding expectations taken me out of semi-retirement
Hosted FREE on CC S DRIVE www.chauffeurdrivenluxurycars.co.uk
My new VSD & SCCP site Oct 2011 www.deloreanjewellery.co.uk
My friendly window cleaner www.mwcwindowcleaner.co.uk


Have something to add? We’d love to hear it!
You must have an account to participate. Please Sign In Here, then join the conversation.