PaisaPay Get your act together. Shocking Mediocrity

[spedfast]

Hi,
Would just like to share an incident between a seller and myself. The seller from USA rightfully purchased an item wirth Rs.16300 and promptly paid through his credit card.
However for some reason he was asked to fax/mail a copy of his credit card to the paisapay team in India?
Can you beleive it, asking someone to send a copy of his credit card? And we thouhg ebay was a flagbearer for security???
So anyways, I am just posting the email in full, of what my seller had to sat abt this, and his overall experience. And I have to say, I do agree with him. Here it goes.
And oh, sorry for the multiplicity of this thread on 2 boards. But I do require a rather urgent response from ebay on this. Heres the mail :


Karan



I filled out Paisapays on line form through “Pay Now” which included all my credit card info. That brought up a screen that told me to copy or scan my credit card and fax or email the image of the card to them. I was more than a little skeptical about doing that. I would never send any credit card info over the internet through an un-encoded email. I did try faxing a copy, since a fax cannot be intercepted, but the call would not go through.



The next day I was notified by my credit card company that a suspicious $294 charge had been made against my card, a charge I never made or authorized.



PayPal never asked me to send images of my card, and my credit card company is emphatic that no legitimate company would ask for that and to do so is completely unsafe and unsecured.



I have used this card for Ebay purchases for years without a problem. Unless Paisapay can work with that prior background, and the info I have already sent them (and should not have) this isn’t going to work. I have emailed them repeatedly and they have not replied. I have also contacted Ebay, and they say they don’t have any affiliation with Paisapay and will not guarantee the security of any transaction through them.



If you can reach anyone one at Paisapay and get them to accept the info they already have to complete this sale, please let me know. I don’t see them ever succeeding as a business, however, if they expect their customers to send this kind of info without the kind of security guarantees that PayPal provides.


Regards

[spedfast]

ANd just to make matters clear on chargeback.
Yes indeed chargeback protection is a fantastic feature of ebay and contrary to what posting.id.in may think, I respect it very much.
Rather that suggestng such ridicluous ideas such as getting paisapay to design a system to accept zero verification for me, it would be good if posting.id.in retorted to some constructive opinion and not just throw in an impractical point just for the sake of making one.

Coming back to chargeback, perhaps the main reason why ebay is in a position to offer chargeback protecion IS becuase it verifies every high value payment.
PayPal never bothers to call up its users to verify payment, so in that sense paispay is more secure. And thats probably why paypa doesnt offer chargeback protection.

Now to keep offering this secure level of protection, paisapay needs to maintain a vigilant verification process. RIght? And I am sure they employ all secure means to keep vital credit info entered by a buyer that way.
If this is so, then how can they expect a CC holder to scan his card and mail it to him? Is the most secure form of transmitting information and carrying out verification?

If paisapay is offering chargeback protection, then it cannot expect buyers to give an arm and a leg in return. And trust you me, in terms of online security, sending out a copy of your credit through email is very much doing than. Period.

[posting.id.in]

spedfast,

PaisaPay has the same exact verification for Indian Buyers as well.

For every transaction above a certain limit (I believe it is 7000 or 8000) Buyers have to mail or fax their credit card copy as well a manual authorisation.

It seems that due to your very limited high value transactions on eBay you are unaware of all the rules.

I can understand the frustration at loosing an high value order due to PaisaPay rules, but belive me I and every high value seller on eBay.in has gone through it multiple times.

As for sending your cc details over fax or mail, I do not why this should be such a huge issue. Your cc details are with every offlien merchant with whom you have ever transacted.

Remember signing a physical charge slip? It contains all the data, the card no., the expirty date, etc.

A huge no. of ppl have access to any users cc details.

Again if you want to pay the eBay and PaisaPay game, you have to play it by their rules.

As I earlier said if there are a huge no. of sellers who are ready to forego chargeback protection, PaisaPay can definately design a product to suit your needs where no verification of buyers would be done.

And shouting at other community members who are trying to help you understand the system better is not going to help any.
__________

[spedfast]

posting.id.in

First to put the facts straight. No merchant that I have ever traded with has ever given me a slip which has my CC no, exp date, name or any such a detail.
A charge slip only has a transaction number (which can me mistaken for a CC no) and of course the billed amount.
So I would really advise you in my capacity to immedieately get in touch with the merchant who gave you such a slip.
It does appear to me that my limited experience in high value paisapay transactions is only matched with yours when it comes to phsyically paying a merchant through a credit card.

Just to make it absolutely clear, no merchant ever has any of your card details as long as he is not jotting down yuor card details on a peice of paper or swiping your card on a machine other than than the one used for generating the slip.

As far as designing a new system for buyers like me is concerned, it would much better if ebay spent its time making the existing one more secure.
Chargeback is a fantastic feature of paisapay. And ebay should do everything in its right do make sure that the infirmation it is processing is genuine. Given. That is the only reason why I am still harping upon this issue of scanning a card and mailing it.
This, believe you me is a massive sized hole in ebay security. The email with the scanned card copy attached, when youi send it to ebay. Just imagine how easy it is to forward something like that. Intentionally or intentionally. Paisapay folks, dont get me wrong, not for one monent do I doubt your integrity. But it is next to impossible for someone to expect 100% security with a system like this!
Chargeback has to be in place. And the system has to be made extremely secure. No two ways on that. That is why this email system has to be scrapped. Because this is the weak link! I am only calling on to remove this system because I have no doubt in my mind that it will make the system more secure. Just think of it this way, which way would you feel more comfortable after you just made a high value transaction? To have your credit card with you in your pocket or to have a copy of it in an inbox belonging to someone you no virtually nothing abt?

I do agree posting.id.in If I have to use paisapay, the I gotta live by its rules. That what we are doing right now? aint we?
But then that doesnt mean that sumbit to those rules and polcies which atleast in my come from the stone age of online marketing!

[posting.id.in]

Dear Friend,

I have a charge slip in my purse which has been swiped at an IBP Pump on a CitiBank EDC Machine which clearly has my credit card no. printed on it.

I am a offline merchant also and have 4 cc accepting machines, 1 from ICICI Bank, 1 from UTI Bank, 1 from Citibank and 1 from American Express Bank.

Unfortunately my experience is far most vast that you will ever imagine.

Your customer always has the option to fax the credit cards copies, email is not compulsory. Phone rates to India are as cheap as 10 cents a minutes so a fax would not be so costly or time consuming.

For all you know, only authorised PaisaPay personnel would have access to the emails received and an email program can be designed in such a way that you cannot forwarded intentionally or otherwise. You can have a ready only email program, which is called secure mail.

_____________

_________________

[krazy-deals-4-u]

just to set things straight..

1. HDFC swipe machines give the entire card number when a HDFC card is swiped..and the charge slip shows this..

2.other swipe machines - citi, ICICI, Canara Bank, SBI - show a part of the card Number - 1234 XXXX XXXX 1234 which cant be used for any damn thing

3. thridly without the CVV a card cannot be used for online purchases, on most of the e-com sites (except PORN sites)

4. before entering card number / CVV see whether the site address starts with HTTPS:// and if its either certified by verisign or some other security company to be secure

5. in the olden days when the manual swipe machines were used.. the cards numbers used to get imprinted on the charge slip. however at that time there was no e-commerce and hence even though card frauds were there, not many actually materialised

6. in case a fax of the card is asked, you can always xerox the card and then black out one or two numbers as well as the CVV. all that matters is that your name and the expiry date of the card tallies with the details entered by you

7. paisa pay and paypal are both good..in their own ways...to make international purchases we have to use paypal and for indian purchases use paisapay. you cant pay on ebay.sg using paisapay

8. try educating the US buyer that this is only a security feature of ebay.in to protect him and thathe should only fax the front of the card!