If you are running a membership site with recurring billing, according to PROTX, soon you might NOT be able to take payment.
It is illegal to hold a CVV2 number. Can/will Infusionsoft hold them for us? I know of a company (I'll find out the name) who holds Amazon's, iTunes, etc's for them, so that in these company's instances the issuing banks pass the recurring transactions without concern.
At the moment it is not so important as some issuing banks will accept a recurring transaction without the CVV2 number however I have been told that the card issuing banks are in the process of tightening up on this, so without the CVV2 number you will not be able to accept recurring transactions. I believe this is worldwide and not being limited to the UK.
Our setup: I am new to Infusionsoft however we have been with PROTX for a few years. I use LloydsTSB Cardnet. PROTX's solution to this problem is their Continuous Authorisation service however it only lets you take payments from people with Visa Credit Cards or MasterCard credit cards, which when we implemented it, at least 50% of our membership site's potential customers were wiped out.
When I was in the process of subscribing to Infusionsoft I raised this concern and was told that Infusionsoft are PCi compliant, however with further digging I feel this is a totally different issue to making sure, as a company, you have 3 servers with a database on each, a firewall, etc.
Does anyone know more about the future of recurring billing than I do, is what I've been told wrong, do we have nothing to worry about? If this is a known issue already do you know what Infusionsoft are doing about it? Or do you have a solution you don't mind sharing with me please because I am concerned about this affecting our future income potential?
