25 Aug
2003
25 Aug
'03
4:28 p.m.
And thusly Fred N. van Kempen spake:
On Mon, 25 Aug 2003, Jason McBrien wrote:
*BUT* IPSWITCH should have made the address field mandatory and not let
you preceed until it was filled in. They should have also had a little
"info" button beside this field to let you know why they need this
information.
I think it's very bad to not require something in one place and then
accuse you of fraud when it isn't there.
Their QA person needs to be reamed with a rusty iron poker.
Cheers,
Bryan
Sorry, that sucks.. Some companies require
address information for online
purchases to reduce fraud. They check the billing address against the
address on the credit card. That's what I've heard, at least.
Correct,
this is (or, rather, has become) a valid reason to request
that information, and they CAN (and, usually, WILL) match it against
the billing-address info from the ccard service using a PRE_AUTHORIZE
transaction; if it matches, it will go ahead with the auth, if not, it
will abort and BOO at you. Meanwhile, it will also have triggered an
internal fraud system.
So, at least in that sense, IPSWITCH was "right".