Credit Card information in an event through NetCommunity

Diane Long

We use NetCommunity as our platform for our event registrations. In testing one of our most recent events before going live, we just found out that there is nothing that requires any kind of match on the billing information. In other words, John Doe can put in a valid credit card number, expiration date and security number with a false address and zip, the card does not belong to him, yet the card will still process. This is a HUGE security issue. Is there something in the event set-up that we are not doing correctly that would keep this from happening???

Beatrice Johnson

Hi Diane,


If you have Blackbaud Merchant Services as the payment portal for Net Community you can update the following areas to help prevent fraudulent attempts:

*AVS (Address Verification Service) settings – These settings check the billing address being entered at the time of payment with a specific credit card. The lower you have AVS, the more lenient that check is. The higher AVS is, the more strict the address check. In these types of circumstances, it’s usually bogus address data that’s being entered with the submissions. It would be best to have your AVS settings set to at least at ‘Medium’ or even pushing it up to the ‘High’ setting if necessary.


*Increase your Fraud Management Settings in BBMS – These settings monitor your online gift activity for potential fraud/suspicious transaction(s) based upon these four factors:


Anonymous Proxies

Bank Identification Number (BIN)/Issuer Identification Number (IIN) Country Match

High-Risk Countries

Account Velocity


It is recommended to increase your threshold number to 100 to provide a bit more security to help deter fraudulent approvals.


I hope this helps.


Beatrice

Diane Long

We currently use IATS as was recommended by
Blackbaud when we switched from BBMS. If using something other than
BBMS, is than any kind of security options?

 

Thank you,

 

Diane Long

Accounting Specialist Finance Department

Aglow International

P.O. Box 1749  ~ 123 – 2nd Ave. S., Suite 100 Edmonds, WA    98020     USA Voice 425.775.7282   x208 ?    FAX 425.778.9615 DianeLong@aglow.org ?    www.aglow.org Every nation touched, every heart changed.

 

Beatrice Johnson

Diane,


Unfortunately, I don't know the answer to that question as I use BBMS. I would suggest contacting the support team for IATS:

How to contact IATS support

Search Knowledgebase

IATS is a third party Merchant Account provider, providing the ability to process credit card and direct debit processing from some Blackbaud applications. Clients may need to know how to contact IATS to obtain support for their services.


Some examples of when IATS needs to be contacted directly include: 

• setting up IATS account credentials (agent codes, passwords, etc.)
• logging into the IATS merchant account website (to view account details, see if a card or direct debit has been charged, etc.)
• obtaining information regarding service and transaction fees
• answering questions about an IATS account
• disbursement questions (receiving funds from IATS to your bank account)

Article Number: 38078

Products:

• Blackbaud NetCommunity BBNC
• Blackbaud eTapestry
• Raiser's Edge RE

To contact IATS Support:

• Email: iatscs@iatspayments.com
• Toll Free Phone Number: 1-888-955-5455, Option 1 (Monday to Friday from 7:30 A.M. to 5:00 P.M. PST)
• Fax Number: 1-817-317-7425
• Website: www.iatspayments.com

Diane Long

Thank you Beatrice.

 

Diane Long

Accounting Specialist Finance Department

Aglow International

P.O. Box 1749  ~ 123 – 2nd Ave. S., Suite 100 Edmonds, WA    98020     USA Voice 425.775.7282   x208 ?    FAX 425.778.9615 DianeLong@aglow.org ?    www.aglow.org Every nation touched, every heart changed.

 

Beatrice Johnson

You're welcome Diane.

Beatrice Johnson, bCRE
Sr. Consultant, Database 
OhioHealth Foundation, 3^rd Floor
 
OhioHealth David P. Blom Administrative Campus
3430 OhioHealth Parkway
Columbus, OH 43202
O: (614) 544-4527
E:  Beatrice.Johnson@ohiohealth.com