MembersHelpJoinRecent discussionsPress CoverageAdvertising

Interact Inn Home


    Recent Discussions   


International Credit Card in India

12th July 1999      jayesh @bom3.vsnl.net.in

respected list members

can any one here tell me how do i get an international credit card
verification facility on an indian website? ie is there any 

company in india providing such a facility?. is it allowed firstly under
indian rules and laws . if so can someone please guide me or 

post a url or a link one can follow . 

thank you for your time .

jayesh 


12th July 1999      sameer @hotmail.com

does any indian ecommerce site do online credit-card transaction 
processing
if yes, then how is it done.
if no, then what are the alternative solutions to this
and when shall indian sites be able to support online credit-card 
transactions


12th July 1999      Niel Hirjee @cal.indiax.com

Yo Jayesh,

> can any one here tell me how do i get an international credit card
>  verification facility on an indian website? ie is there any 

Getting *international* credit card verification on a web site is easy -
there ar a lot of companies out there who would do it for you for a
charge. But first you need to plan on how you will transact. Do you have a
Merchant Account?

> company in india providing such a facility?. is it allowed firstly under
>  indian rules and laws . if so can someone please guide me or 

My company runs an internet based online shopping arcade in Calcutta and
we do accept international credit cards. Visit calArcade at
http://www.indiax.com/cal/arcade

As far as I am aware, this is perfectly legal - after all we are earning
hard currency for India, which is good for the balance of payment
situation.

Thank you!

Regards,
Niel Hirjee

--
Calport Technologies               Phone: +91 33 475-5884
3 Dover Road,                      Fax:   +91 33 476-3021
Calcutta 700 019                   Email: [email protected]
India                              http://www.indiax.com/cal


13th July 1999      equips @iname.com

Dear Niel,

One of the concern that people have while accepting International
credit cards in India is the misuse of the same.

It is thoretically possible that someone charges $1000 worth
of goods, which you charge on his card and ship. In case of the
dispute at a later point of time, the Indian laws will work against
you if you don't have a written authorization from the card holder.

How are you taking care of this?

regards,

Manish

-----
Sent using MailStart.com ( http://MailStart.Com/welcome.html )
The FREE way to access your mailbox via any web browser, anywhere!


13th July 1999      Niel Hirjee @cal.indiax.com

Hi Manish,

> One of the concern that people have while accepting International
> credit cards in India is the misuse of the same.

You are right - this is an issue which affects credit card transactions in
India and abroad as well.

> It is thoretically possible that someone charges $1000 worth
> of goods, which you charge on his card and ship. In case of the
> dispute at a later point of time, the Indian laws will work against you
> if you don't have a written authorization from the card holder.

Right again, so what we do is have a threshold limit (currently set us
US$200 or equivalent) and all transactions under this value are processed
normally and shipped at our own limited risk. For transactions over this
amount, we request a signed 'one time authorization' for CC use, which is
faxed to us, in addition to the form based internet authorization of our
SSL server.

I have spent a fair amount of time understanding the cc fraud issue and it
is empirically evident that most fraudulent transactions involve large
billing values. Our threshold should (hopefully) help us avoid this
problem to a large extent.

Interestingly, just this morning we received an order of Rs. 25,000 aprox.
for hardware / software and other stuff from someone claiming to be
'Ravindra Agarwalla' . The threshold trigger alerted us and the address
and phone number were found to be fictitious. This just goes to underscore
what I was saying about most frauds attempting a single high billing value
hit.

In summary, being able to accept credit cards over the net is an extremely
exiting way of doing business, but it has its risks too.

Thank you!

Regards,
Niel Hirjee

--
Calport Technologies               Phone: +91 33 475-5884
3 Dover Road,                      Fax:   +91 33 476-3021
Calcutta 700 019                   Email: [email protected]
India                              http://www.indiax.com/cal


13th July 1999      Kumar Nair @giascl01.vsnl.net.in

Manish,

You are absolutely right on this count. I would love to use my credit card
to shop , sitting in front of my computer. I have purchased (using my
international credit card ), software. However in India the fear that
somebody will misuse the facility is always foremost in mind.

Kumar Nair


14th July 1999      Niel Hirjee @cal.indiax.com

Samir,

> does any indian ecommerce site do online credit-card transaction 
> processing

Credit card payments make at http://www.indiax.com/cal/arcade, a calcutta
based shopping site, are processed online.

> if yes, then how is it done.

The bare bones system works as follows:-
1) Software running on a local computer retrieves the cc info from the web
server 2) Same software prints order on local printer and also exports to
.DAt or DBF file in preset format 3) Software then gets online and
verifies the credit card number, name and address - in many cases the
address does not match, which is ok, since people register their cards at
one address and want stuff delivered to another. 4) The verification
report is also printed.

Thank you!

Regards,
Niel Hirjee

--
Calport Technologies               Phone: +91 33 475-5884
3 Dover Road,                      Fax:   +91 33 476-3021
Calcutta 700 019                   Email: [email protected]


15th July 1999      Muthu Vairavan @hotmail.com

What about security?
Thanks
Muthu


15th July 1999      Chandramohan,AMB Chennai @msdc.hcltech.com

Hi,

 Thanks for posting the info. My doubt is when u say 
 "Software then gets online and verifies the credit card number, name and
address - in many cases the address does not match, which is ok, since
people register their cards at one address and want stuff delivered to
another"
  - how do you do that?. 
 1. Do you have access to the credit cards database to check the
validity?
 2. Have u entered into a contract with some bank who does that?

 I would be tahnkful to you if you can send me the answers.

 thanks once again
 Chandramohan


17th July 1999      Sharath Jeppu @crosswinds.net

I followed this response with a little interest and was wondering if I
should intervene or not. But this mail did it and I thought that I must put
in correction course before more people get misled.

First of all, there is no single e-commerce site in India which offers
online payment processing. Here I will define online payment processing as a
system where the buyer is informed online if his transaction has been
sucessfully processed, and the authorized amount blocked on his card
spending limit , all in the same browser session.

Let me elaborate on this. Once the credit card details are filled in on
online form and the submit button is pressed, the following happens in an
online scanario. Depending on the brand of the card, the relevant gateway is
activated.(For e.g., gateway-1 for Master/Visa and gateway-2 for Ammex, and
so on)
The relevant information to obtain a card authorization are culled out of
the order form. This includes only the following.
Card No.
Card expiry date
Merchant terminal ID
Amount
(From here I will explain with relevance to a Master or VISA card)
The Gateway connects to the merchant's host. The gateway also formats the
message in the format acceptable to the merchant
bank switch or host. For example, most banks in India adhere to the ISO 8583
messaging standard. Once the gateway logs in to the switch or merchant host,
the message is tranmitted. This is called as an authorization request. The
merchant host determines if the the card is its own or some other banks. If
the card belongs to a different bank (for example, the merchnat bank could
be Citibank whereas the card may have been issued by Hongkong bank).
The auth request is then routed to the relevant bank via the Master/VISA
network. The issuing host will process the auth request, check for validity
of the card (hotlist, pickup, etc), the expiry date and the avaiability of
the credit limit. If the auth request meets all the criteria, an auth
approval happens. This will be routed back to the gateway via the merchant
host which in turn will trigger a message to the online buyer that his card
transaction has been approved.

What I wish to emphasize here contradicting the impression given so far is
that, the process does not perform an address verification at all !! This
information is absolutely false. All address verifications are all done
offline and have to be initiated by the merchant if at all this facility is
avaiable in India!!

I welcome debate.

For more details on online CC processing, check this site out
 http://www.virtualschool.edu/mon/ElectronicProperty/klamond/credit_card.htm

Sharath Jeppu
PS : I did check out your site Neil. May I comment that the site did not
even do a basic credit card modulus check before accepting a card no. Then
how can you call it online?


17th July 1999      Niel Hirjee @cal.indiax.com

Hi!

Sharath wrote:

> First of all, there is no single e-commerce site in India which offers
> online payment processing. Here I will define online payment processing
> as a system where the buyer is informed online if his transaction has
> been sucessfully processed, and the authorized amount blocked on his
> card spending limit , all in the same browser session.

Much of what you wrote is correct and very informative - except that there
is some confusion about the meaning of 'online' and 'real-time'.

When I claimed to process credit cards online, I meant that computers and
software are used to facilitate the entire credit card transaction
process; it is not done manually using pen and paper etc. In this context,
a lot of sites in India do 'online' credit card payment processing.

However, I would have agreed with you if you had said above that 'there is
no single e-commerce site in India which offers *real-time* payment
processing.'. Realtime payment processing will not be possible till the
Indian government works out its cyber-laws and offers this facility
through the banks operating in India.

I should also mention that it is easily possible for me to implement
*realtime* processing at my site, but if I do that I will be forced to
reject most Indian credit cards, since my authorization system will reject
these, at this point.

> What I wish to emphasize here contradicting the impression given so far
> is that, the process does not perform an address verification at all !!
> This information is absolutely false. All address verifications are all
> done offline and have to be initiated by the merchant if at all this
> facility is avaiable in India!!

I agree with the above - the process you describe does not include address
verification. However, the service I go through offers this facility, so I
get the address information as well.

> PS : I did check out your site Neil. May I comment that the site did not
> even do a basic credit card modulus check before accepting a card no.
> Then how can you call it online?

I define 'online' as something which is done on a computer over an
internet connection. I do process cc's online, but I do not process them
in real-time (which is the moment the cc info is entered by the visitor).

Sharath, you seem to know quite a bit about this, so could you clarify if
I am wrong is using the word 'online' in the context I do or are you
confusing the terms 'online' and real-time'?

Thank you!

Regards,
Niel Hirjee

--
Calport Technologies               Phone: +91 33 475-5884
3 Dover Road,                      Fax:   +91 33 476-3021
Calcutta 700 019                   Email: [email protected]
India                              http://www.indiax.com/cal


18th July 1999      Arup Bhanja @cal.vsnl.net.in

A few other points are important. What about the certification (CA) ?
Verisign, Thawte, etc. do certification of CC merchants. Also, what about
fraud database -- cards reported stolen, lost, etc. that should be
blacklisted while reeceiving payment applications.

Comments welcome.

Arup Bhanja,
Calcutta,INDIA.

Get your FREE Website Report. Send an email to [email protected] with
"The Website Report-IINN" in subject and your URL in body.


18th July 1999      Sharath Jeppu @crosswinds.net

Yes Neil,

From the perspective of an online "credit card user"there is absolutely no
difference between describing the credit authorizing process as "online"
or "real-time". If makes no difference to him so why confuse him on the
subtle difference you have pointed out. Don't you agree?

Incidentally, the cyber laws do not come into play in todays scenario for
real time processing. RBI will not come into picture if there a defined
way of settling disputes if any arises off a transaction. It is entirely
between the bank, the merchant and the technology service provider.

Normally a "Mail Order Telephone Order" or what is popularly called as a
MOTO Merchant status is used for conducting Card payment based business
off the net. (This is the ID used by hotels to take reservations over the
telephone and magazine and business houses like the 'TSN' to sell their
products). This kind of merchant status commands a higer bank discount
rate (5%) compared to the regular merchant status (2.25% - 2.5%). The MOTO
merchant status does not require the card holder or the card to be present
for authorizing the transaction.

Secure Electonic Transaction can happen only with digital certificates
issued by the card issung bank to the customers and Merchant acquiring
bank to the merchants. But this will require a trusted CA to manage the
technology of issuing, maintaining managing and revoking certificates.
This will take quite some time to be implemented primarily because the
government will have to be involved at some stage.

Sharath


20th July 1999      Niel Hirjee @cal.indiax.com

Hi

> From the perspective of an online "credit card user"there is absolutely
> no difference between describing the credit authorizing process as
> "online" or "real-time". If makes no difference to him so why confuse
> him on the subtle difference you have pointed out. Don't you agree?

Agreed! I do not want to make any claims about my site which are
disputable ar have the potential of being misunderstood. I will scan my
site for any references for 'online credit card processing' and make
appropriate modifications.

Thank you!

Regards,
Niel Hirjee

--
Calport Technologies               Phone: +91 33 475-5884
3 Dover Road,                      Fax:   +91 33 476-3021
Calcutta 700 019                   Email: [email protected]
India                              http://www.indiax.com/cal

Top