Currently credit card number lengths are validated at entry, in either Maintain Customers or at the time of entering a payment. However, the validation is apparently not there during the processing. A client had imported credit card numbers that didn't match the masking, thus bypassing the validation at entry, yet the system allowed those charges to go through.

Comments