If you process a partial shipment on a Sales order that was pre-authorized once you post the end of the day, the backorder sales order no longer has any of the original CC authorization information in it so when you process the shipment for the balance of the order MAS90 tries to run the credit card again. Since we have CVV2 set as a required field in our system, it always brings up a message "Missing CVV2" since the CVV2 is deleted once the card is authorized when the original sales order is entered. According to Sage, Sage Payment solutions is deleting the authorization information from the sales order once the first invoice is process against the order, not sure how or why. According to VISA/MC/AMEX rules, you are not allowed to charge a credit card more then 24 hours prior to the order shipping. If the original order is only going to partially ship, shouldn't the authorization information remain on the back ordered sales order until the order is complete? Since you aren't allowed to store the CVV2 codes by PCI rules, we now have to contact every customer to get their CVV2 codes again, in order to process the remainder of their order. It would be really nice is the authorization information would remain on the Sales Order until the order is complete shipped.
by: Kevin T. | over a year ago | Financial Management
Comments
Unfortunately after numerous calls between Sage and Sage Payment Solutions, we have determined that what happens is actually the proper functionality of the software. Unfortunately you can have only one sale transaction posted against a pre-authoriziation, rule of credit card processing. That is why the original authorization information is gone when you go to ship the back order. This issue really now boils down to the lack of thinking by the PCI compliance organization when they said that the CVV2 codes couldn't be stored once the authorization was done. The only choice we have is to protest to VISA/MC/AMEX and PCI in regards to this issue. I really have no idea how online companies do this. All I know is you pay a higher rate on credit cards if you don't present the CVV2 code. So until something is done, we will have to contact our customers to get their code again, or save the code in the comment line for orders we know are back orders so we can enter it again when back order is shipped and then delete the code from the comments line.