International Credit Card in India
12th July 1999 jayesh @bom3.vsnl.net.in
respected list members can any one here tell me how do i get an international credit card verification facility on an indian website? ie is there any company in india providing such a facility?. is it allowed firstly under indian rules and laws . if so can someone please guide me or post a url or a link one can follow . thank you for your time . jayesh
12th July 1999
sameer @hotmail.com
does any indian ecommerce site do online credit-card transaction processing if yes, then how is it done. if no, then what are the alternative solutions to this and when shall indian sites be able to support online credit-card transactions
12th July 1999
Niel Hirjee @cal.indiax.com
Yo Jayesh, > can any one here tell me how do i get an international credit card > verification facility on an indian website? ie is there any Getting *international* credit card verification on a web site is easy - there ar a lot of companies out there who would do it for you for a charge. But first you need to plan on how you will transact. Do you have a Merchant Account? > company in india providing such a facility?. is it allowed firstly under > indian rules and laws . if so can someone please guide me or My company runs an internet based online shopping arcade in Calcutta and we do accept international credit cards. Visit calArcade at http://www.indiax.com/cal/arcade As far as I am aware, this is perfectly legal - after all we are earning hard currency for India, which is good for the balance of payment situation. Thank you! Regards, Niel Hirjee -- Calport Technologies Phone: +91 33 475-5884 3 Dover Road, Fax: +91 33 476-3021 Calcutta 700 019 Email: [email protected] India http://www.indiax.com/cal
13th July 1999
equips @iname.com
Dear Niel, One of the concern that people have while accepting International credit cards in India is the misuse of the same. It is thoretically possible that someone charges $1000 worth of goods, which you charge on his card and ship. In case of the dispute at a later point of time, the Indian laws will work against you if you don't have a written authorization from the card holder. How are you taking care of this? regards, Manish ----- Sent using MailStart.com ( http://MailStart.Com/welcome.html ) The FREE way to access your mailbox via any web browser, anywhere!
13th July 1999
Niel Hirjee @cal.indiax.com
Hi Manish, > One of the concern that people have while accepting International > credit cards in India is the misuse of the same. You are right - this is an issue which affects credit card transactions in India and abroad as well. > It is thoretically possible that someone charges $1000 worth > of goods, which you charge on his card and ship. In case of the > dispute at a later point of time, the Indian laws will work against you > if you don't have a written authorization from the card holder. Right again, so what we do is have a threshold limit (currently set us US$200 or equivalent) and all transactions under this value are processed normally and shipped at our own limited risk. For transactions over this amount, we request a signed 'one time authorization' for CC use, which is faxed to us, in addition to the form based internet authorization of our SSL server. I have spent a fair amount of time understanding the cc fraud issue and it is empirically evident that most fraudulent transactions involve large billing values. Our threshold should (hopefully) help us avoid this problem to a large extent. Interestingly, just this morning we received an order of Rs. 25,000 aprox. for hardware / software and other stuff from someone claiming to be 'Ravindra Agarwalla' . The threshold trigger alerted us and the address and phone number were found to be fictitious. This just goes to underscore what I was saying about most frauds attempting a single high billing value hit. In summary, being able to accept credit cards over the net is an extremely exiting way of doing business, but it has its risks too. Thank you! Regards, Niel Hirjee -- Calport Technologies Phone: +91 33 475-5884 3 Dover Road, Fax: +91 33 476-3021 Calcutta 700 019 Email: [email protected] India http://www.indiax.com/cal
13th July 1999
Kumar Nair @giascl01.vsnl.net.in
Manish, You are absolutely right on this count. I would love to use my credit card to shop , sitting in front of my computer. I have purchased (using my international credit card ), software. However in India the fear that somebody will misuse the facility is always foremost in mind. Kumar Nair
14th July 1999
Niel Hirjee @cal.indiax.com
Samir, > does any indian ecommerce site do online credit-card transaction > processing Credit card payments make at http://www.indiax.com/cal/arcade, a calcutta based shopping site, are processed online. > if yes, then how is it done. The bare bones system works as follows:- 1) Software running on a local computer retrieves the cc info from the web server 2) Same software prints order on local printer and also exports to .DAt or DBF file in preset format 3) Software then gets online and verifies the credit card number, name and address - in many cases the address does not match, which is ok, since people register their cards at one address and want stuff delivered to another. 4) The verification report is also printed. Thank you! Regards, Niel Hirjee -- Calport Technologies Phone: +91 33 475-5884 3 Dover Road, Fax: +91 33 476-3021 Calcutta 700 019 Email: [email protected]
15th July 1999
Muthu Vairavan @hotmail.com
What about security? Thanks Muthu
15th July 1999
Chandramohan,AMB Chennai @msdc.hcltech.com
Hi, Thanks for posting the info. My doubt is when u say "Software then gets online and verifies the credit card number, name and address - in many cases the address does not match, which is ok, since people register their cards at one address and want stuff delivered to another" - how do you do that?. 1. Do you have access to the credit cards database to check the validity? 2. Have u entered into a contract with some bank who does that? I would be tahnkful to you if you can send me the answers. thanks once again Chandramohan
17th July 1999
Sharath Jeppu @crosswinds.net
I followed this response with a little interest and was wondering if I should intervene or not. But this mail did it and I thought that I must put in correction course before more people get misled. First of all, there is no single e-commerce site in India which offers online payment processing. Here I will define online payment processing as a system where the buyer is informed online if his transaction has been sucessfully processed, and the authorized amount blocked on his card spending limit , all in the same browser session. Let me elaborate on this. Once the credit card details are filled in on online form and the submit button is pressed, the following happens in an online scanario. Depending on the brand of the card, the relevant gateway is activated.(For e.g., gateway-1 for Master/Visa and gateway-2 for Ammex, and so on) The relevant information to obtain a card authorization are culled out of the order form. This includes only the following. Card No. Card expiry date Merchant terminal ID Amount (From here I will explain with relevance to a Master or VISA card) The Gateway connects to the merchant's host. The gateway also formats the message in the format acceptable to the merchant bank switch or host. For example, most banks in India adhere to the ISO 8583 messaging standard. Once the gateway logs in to the switch or merchant host, the message is tranmitted. This is called as an authorization request. The merchant host determines if the the card is its own or some other banks. If the card belongs to a different bank (for example, the merchnat bank could be Citibank whereas the card may have been issued by Hongkong bank). The auth request is then routed to the relevant bank via the Master/VISA network. The issuing host will process the auth request, check for validity of the card (hotlist, pickup, etc), the expiry date and the avaiability of the credit limit. If the auth request meets all the criteria, an auth approval happens. This will be routed back to the gateway via the merchant host which in turn will trigger a message to the online buyer that his card transaction has been approved. What I wish to emphasize here contradicting the impression given so far is that, the process does not perform an address verification at all !! This information is absolutely false. All address verifications are all done offline and have to be initiated by the merchant if at all this facility is avaiable in India!! I welcome debate. For more details on online CC processing, check this site out http://www.virtualschool.edu/mon/ElectronicProperty/klamond/credit_card.htm Sharath Jeppu PS : I did check out your site Neil. May I comment that the site did not even do a basic credit card modulus check before accepting a card no. Then how can you call it online?
17th July 1999
Niel Hirjee @cal.indiax.com
Hi! Sharath wrote: > First of all, there is no single e-commerce site in India which offers > online payment processing. Here I will define online payment processing > as a system where the buyer is informed online if his transaction has > been sucessfully processed, and the authorized amount blocked on his > card spending limit , all in the same browser session. Much of what you wrote is correct and very informative - except that there is some confusion about the meaning of 'online' and 'real-time'. When I claimed to process credit cards online, I meant that computers and software are used to facilitate the entire credit card transaction process; it is not done manually using pen and paper etc. In this context, a lot of sites in India do 'online' credit card payment processing. However, I would have agreed with you if you had said above that 'there is no single e-commerce site in India which offers *real-time* payment processing.'. Realtime payment processing will not be possible till the Indian government works out its cyber-laws and offers this facility through the banks operating in India. I should also mention that it is easily possible for me to implement *realtime* processing at my site, but if I do that I will be forced to reject most Indian credit cards, since my authorization system will reject these, at this point. > What I wish to emphasize here contradicting the impression given so far > is that, the process does not perform an address verification at all !! > This information is absolutely false. All address verifications are all > done offline and have to be initiated by the merchant if at all this > facility is avaiable in India!! I agree with the above - the process you describe does not include address verification. However, the service I go through offers this facility, so I get the address information as well. > PS : I did check out your site Neil. May I comment that the site did not > even do a basic credit card modulus check before accepting a card no. > Then how can you call it online? I define 'online' as something which is done on a computer over an internet connection. I do process cc's online, but I do not process them in real-time (which is the moment the cc info is entered by the visitor). Sharath, you seem to know quite a bit about this, so could you clarify if I am wrong is using the word 'online' in the context I do or are you confusing the terms 'online' and real-time'? Thank you! Regards, Niel Hirjee -- Calport Technologies Phone: +91 33 475-5884 3 Dover Road, Fax: +91 33 476-3021 Calcutta 700 019 Email: [email protected] India http://www.indiax.com/cal
18th July 1999
Arup Bhanja @cal.vsnl.net.in
A few other points are important. What about the certification (CA) ? Verisign, Thawte, etc. do certification of CC merchants. Also, what about fraud database -- cards reported stolen, lost, etc. that should be blacklisted while reeceiving payment applications. Comments welcome. Arup Bhanja, Calcutta,INDIA. Get your FREE Website Report. Send an email to [email protected] with "The Website Report-IINN" in subject and your URL in body.
18th July 1999
Sharath Jeppu @crosswinds.net
Yes Neil, From the perspective of an online "credit card user"there is absolutely no difference between describing the credit authorizing process as "online" or "real-time". If makes no difference to him so why confuse him on the subtle difference you have pointed out. Don't you agree? Incidentally, the cyber laws do not come into play in todays scenario for real time processing. RBI will not come into picture if there a defined way of settling disputes if any arises off a transaction. It is entirely between the bank, the merchant and the technology service provider. Normally a "Mail Order Telephone Order" or what is popularly called as a MOTO Merchant status is used for conducting Card payment based business off the net. (This is the ID used by hotels to take reservations over the telephone and magazine and business houses like the 'TSN' to sell their products). This kind of merchant status commands a higer bank discount rate (5%) compared to the regular merchant status (2.25% - 2.5%). The MOTO merchant status does not require the card holder or the card to be present for authorizing the transaction. Secure Electonic Transaction can happen only with digital certificates issued by the card issung bank to the customers and Merchant acquiring bank to the merchants. But this will require a trusted CA to manage the technology of issuing, maintaining managing and revoking certificates. This will take quite some time to be implemented primarily because the government will have to be involved at some stage. Sharath
20th July 1999
Niel Hirjee @cal.indiax.com
Hi > From the perspective of an online "credit card user"there is absolutely > no difference between describing the credit authorizing process as > "online" or "real-time". If makes no difference to him so why confuse > him on the subtle difference you have pointed out. Don't you agree? Agreed! I do not want to make any claims about my site which are disputable ar have the potential of being misunderstood. I will scan my site for any references for 'online credit card processing' and make appropriate modifications. Thank you! Regards, Niel Hirjee -- Calport Technologies Phone: +91 33 475-5884 3 Dover Road, Fax: +91 33 476-3021 Calcutta 700 019 Email: [email protected] India http://www.indiax.com/cal