24 replies [Last post]
jasonabc's picture
Offline
Uber Donor
Joined: 05/05/2008
Juice: 573
Was this information Helpful?

Hi - I received the following email from Authorize.net today about upcoming rule changes to credit card processing. This looks like some changes will be needed to the core Authorize.net module so just wanted to post here to flag it up.

cheers

Jason

New MasterCard and Discover Processing Requirements

Dear Authorize.Net Merchant:
MasterCard and Discover are modifying their rules concerning the processing of debit, prepaid and gift cards. This e-mail includes important information about the new requirements and the timelines regarding Authorize.Net's support of the requirements, so please read it thoroughly.

MasterCard's rule changes go into effect May 1, 2010, and Discover's rule changes go into effect April 16, 2010. However, Authorize.Net, MasterCard and Discover have worked together to extend these dates for all merchants using Authorize.Net solutions. Our merchants will now have until June 30, 2011, to implement support for the requirements within their systems.

What are the requirements?
MasterCard and Discover are requiring that all merchants support the following:
+ Balance response transactions — For prepaid and gift cards, once the card has been used, the remaining account balance will be transmitted along with the authorization response. The remaining balance must be printed on the customer receipt, displayed on the Web page or point-of-sale terminal, or both.
+ Partial authorization transactions — When a customer's transaction amount exceeds the balance available on their debit, prepaid or gift card, instead of declining the transaction, a partial authorization for the amount available to the customer will be returned. This will allow the customer to pay for the remaining amount with another form of payment. This is called a split-tender transaction.
+ Authorization reversals — An authorization reversal is a real-time transaction initiated when the customer decides that they do not want to proceed with the transaction, or if the merchant cannot complete the transaction for any reason. Authorization reversals free up the customer's available balance on their debit, prepaid or gift card.

What steps is Authorize.Net taking to support these requirements?
Authorize.Net will be updating our systems over the coming months to support the requirements, but will be dependent on each processor's readiness. For a table of when we anticipate we will support the requirements with each processor, please visit http://www.authorize.net/support/pafaqs/#when.

What do I need to do to support the requirements?
The steps that you will need to take to support the requirements depend on how you connect to the payment gateway. For example, if you connect using a shopping cart, point-of-sale device, or other solution, you will need to contact your solution provider to confirm that they will be supporting the requirements. If you connect using a direct integration, you should contact your Web developer for assistance. Please direct your Web developer to http://www.authorize.net/support/pafaqs/#do for information on the changes they will need to make.

Do I have to support the requirements?
MasterCard and Discover are requiring all merchants to support the requirements with the exception of merchants that exclusively process transactions via batch uploads, mail order/telephone order (MOTO), or recurring payment transactions. Your Merchant Service Provider (MSP) is ultimately responsible for determining if the requirements apply to your business, so please contact them for assistance in determining if your company is exempt.
Once again, these requirements will not be enforced for Authorize.Net merchants until June 30, 2011. However, we wanted to bring them to your attention now so that you have plenty of time to plan for their implementation.
For more information on the requirements, including how they affect our value-adding services, please visit our FAQ page at http://www.authorize.net/support/pafaqs/.

Thank you for your attention to these important changes and for being an Authorize.Net merchant.

Sincerely,

Authorize.Net

janicenyland's picture
Offline
Joined: 06/11/2008
Juice: 48
Re: MasterCard & Discover - new rules and regs

Yikes!

jasonabc's picture
Offline
Uber Donor
Joined: 05/05/2008
Juice: 573
Re: Re: MasterCard & Discover - new rules and regs

yikes indeed. Here's the Authorize.net AIM API Update doc detailing the changes needed. Any Uber dudes care to chime in on this one?

http://www.authorize.net/support/AIM_apiupdates.pdf

ldweeks's picture
Offline
Joined: 01/14/2009
Juice: 30
Re: Re: Re: MasterCard & Discover - new rules and regs

We'll be watching this one closely also...

McAden's picture
Offline
Joined: 04/20/2010
Juice: 34
Re: MasterCard & Discover - new rules and regs

I have a client who has received this also.

Any updates on this?

kussmaul's picture
Offline
Joined: 12/29/2008
Juice: 12
I too will follow this. There

I too will follow this.
There didn't seem to be much detail on the Authorize.net site when I looked.
Clif

seanh's picture
Offline
Joined: 10/26/2009
Juice: 9
Re: MasterCard & Discover - new rules and regs

The gift card balance thing seems like it could be the most annoying part of this.

intrepid-network's picture
Offline
Joined: 03/18/2010
Juice: 6
Re: Re: MasterCard & Discover - new rules and regs

subscribe

MikeM's picture
Offline
Joined: 03/23/2009
Juice: 13
Agreed

I'm surprised this thread hasn't grown any legs yet. How has Ubercart reacted to changes from big boys like Authorize.net in the past?

-Michael

Missy's picture
Offline
Joined: 03/21/2009
Juice: 10
Re: MasterCard & Discover - new rules and regs

Subscribe

ron_s's picture
Offline
Joined: 09/11/2008
Juice: 173
Re: MasterCard & Discover - new rules and regs

Subscribe

chadhester's picture
Offline
Joined: 05/12/2009
Juice: 51
Template changes?

Should I assume that this will require a change in the Ubercart templates for the email receipts or invoices? I'm guessing that reporting the remaining balance of a pre-paid/gift card would warrant the addition of a variable for this...

Also, shouldn't this impact ANY merchant service gateway that processes MasterCard and Discover... not just Authorize.net?

Regards,
Chad Hester

spatical's picture
Offline
Joined: 03/23/2010
Juice: 15
It should be required on all merchant service gateways

According to this article, even Paypal is working on a way to implement these new changes. The new requirements are being rolled out to specific industries and are not specific to just authorize.net.

ascii122's picture
Offline
Joined: 04/20/2010
Juice: 22
Re: Template changes?

From reading the PDF from Authorize.net (http://www.authorize.net/support/AIM_apiupdates.pdf) it looks like we'll have to add an additional check out step for those using debit/gift cards beyond just showing the available balance on a receipt or a payment confirmation page.

This partial payment business could be a pain. In cases where authorize.net returns a response code that indicates a partial payment (295) you then need to show the amount and offer another method of payment to finish the balance and/or allow them to cancel the transaction (which requires sending another message back to authorize.net with the cancel order).

So some additional steps will be required during checkout for those kinds of cards looks like

-z

Dave Keays's picture
Offline
Joined: 06/30/2008
Juice: 37
Re: MasterCard & Discover - new rules and regs

Does this affect uc's "preferred" status?

Should I use something other than authorize.net?

Could we get someone from UC to chime in so I can tell my client something?

Does UC need beta testers? I'm installing a new store and we aren't reliant on cc payments yet.

ascii122's picture
Offline
Joined: 04/20/2010
Juice: 22
Keep in mind: "Our merchants

Keep in mind:

"Our merchants will now have until June 30, 2011, to implement support for the requirements within their systems. "

So we've got plenty of time to figure it out Dave. Just kind of feeling out the changes at this point. This is no reason not to use authorize.net

Dave Keays's picture
Offline
Joined: 06/30/2008
Juice: 37
Re: Keep in mind: "Our merchants

I guess I don't consider 2 months to be "plenty of time" and only a potential roadblock.

chadhester's picture
Offline
Joined: 05/12/2009
Juice: 51
2011, not 2010

Check the year again Dave... this deadline is 14 months away, not 2.

Regards,
Chad Hester

Dave Keays's picture
Offline
Joined: 06/30/2008
Juice: 37
Re: 2011, not 2010

Thanks. You got me on that one. I feel more relieved to go ahead and install authorize.net for now.

ascii122's picture
Offline
Joined: 04/20/2010
Juice: 22
Dave Keays wrote: Thanks. You
Dave Keays wrote:

Thanks. You got me on that one. I feel more relieved to go ahead and install authorize.net for now.

Hah .. i did the same dang thing. A customer of mine emailed me in a panic about the changes (she uses another cart, not ubercart) and I didn't notice the 2011 date so I was scrambling thinking I had to fix her cart and my uber cart guys too all in a few weeks

yeah 14 months.. whew!

-zachary

chadhester's picture
Offline
Joined: 05/12/2009
Juice: 51
It's also not 2009...

Yea, I certainly understand. It takes great effort not to write the previous year when dating things for the first three months into a new year (i.e. 2009)...

I think that while this seems like enough time (14 months), a ton of work still needs to be done. Then there's planning, development, and several testing phases... some institutions are slow to adopt anything new.

This should be a good thread to keep an eye on. If I pick up on my e-commerce programming I'll try to lend a hand with a few things as a course of action unfolds for these policy changes.

Regards,
Chad Hester

Andy's picture
Offline
Administrator
Joined: 08/07/2007
Juice: 1076
Re: Re: MasterCard & Discover - new rules and regs

It looks like we will have 14 months to make this change. Most of the core team is in the middle of porting / working on Ubercart 3.0 for Drupal 7 right now. One of our next steps is to fix some poor theme support in email templates (which will get back ported to Ubercart 2.x). When we get to that step, we'll make the changes necessary for this at the same time. I'm guessing withing 3 weeks we'll dig into it. I've talked to our rep. at Authorize.net, and this will not affect Ubercart's preferred status. Of course, if anyone wants to start working on this issue now, you can always create an issue and submit a patch Smiling
Cheers,
Andy

digitalfrontiersmedia's picture
Offline
Getting busy with the Ubercode.
Joined: 11/08/2008
Juice: 282
Re: Re: Re: MasterCard & Discover - new rules and regs

Interesting news. I'll definitely be following this thread.

rich.yumul's picture
Offline
Getting busy with the Ubercode.
Joined: 05/22/2009
Juice: 38
Re: MasterCard & Discover - new rules and regs

Subscribe

ascii122's picture
Offline
Joined: 04/20/2010
Juice: 22
Got this update

MasterCard and Discover Mandates Update
Earlier in the year, MasterCard and Discover modified their rules
concerning the processing of debit, prepaid and gift cards. The
rules require that certain merchants provide support for partial
approvals, authorization reversals and balance responses.
However, they have since relaxed these requirements for e-
commerce merchants who are now only required to provide
support for authorization reversals.

The good news is that this change requires no work on your end.
Once Authorize.Net and your processor support the requirement,
you will too. You can review the table of expected processor
support in our Partial Authorization FAQs at
http://www.authorize.net/support/pafaqs/#when

which says among other things:

Do I have to support the requirements?
UPDATE: E-commerce merchants are now only required to provide support for authorization reversals. Though no longer required, partial authorizations and balance responses are considered best practices, and Authorize.Net still highly recommends that e-commerce merchants provide support for all three requirements. Retail and mobile merchants must still support all three requirements.

MasterCard and Discover are requiring all merchants to support the requirements with the exception of merchants that exclusively process transactions via batch uploads, mail order/telephone order (MOTO), or recurring payment transactions. Your Merchant Service Provider (MSP) is ultimately responsible for determining if the requirements apply to your business, so please contact them for assistance in determining if your company is exempt.

So although it may be good to do partial payments we might be able to slide for a while on the new requirements. I'll have to read through this some more .. we'll see I guess

-zachary