Instant Payment Verification¶
Before contacting the Payment Gateway with the instant payment request, Evergiving performs several validations on the form when the card information is input:
- Card Expiry Check: Ensures the card is not expired by validating the input date.
- Card Expiry Window: Confirms the card expires within X months from today (where X is configurable, default is 1 month).
- CVV Length Validation: Checks that the CVV length is correct (3 digits for most cards, 4 digits for Amex).
- Card Number Length Validation: Ensures the card number length is within bounds (usually 15 digits for American Express and Diners, 16 digits for MasterCard/Visa/others).
- Luhn Algorithm Validation: Validates the card number check digit using the Luhn algorithm to prevent mistyped cards.
- BIN Lookup: Displays information on the screen such as card brand, level, and issuing bank.
- Prepaid Card Check: By default, blocks prepaid cards based on BIN lookup (this can be enabled per campaign/agency if needed).
After the card passes these pre-checks, the 1st payment request is sent to the payment gateway. The gateway will then forward the transaction to the card issuer for approval. The card issuer will perform the following standard authorization checks (this list is not exhaustive but covers common checks):
- Ensures the card is not restricted (lost/stolen/etc).
- Verifies the transaction does not appear fraudulent.
- Confirms the CVV matches.
- Checks that the address matches using the Address Verification Service (AVS).
- Ensures the account has sufficient funds for the transaction.
Address Verification and Liability¶
Usually, a card issuer will not decline a transaction if the address does not match. However, they will indicate in their response that the address doesn't match. This shifts liability to the merchant/NPO, meaning if the transaction is fraudulent, you would be responsible for reimbursing the funds and possibly paying a penalty.
Note
The risk of fraud is very low in a face-to-face (F2F) situation. Fraudsters typically try their cards on less secure websites or at physical stores where they are harder to trace, such as gas stations and convenience stores.
To reduce your exposure to fraud, most payment gateways offer an option to cancel transactions when the issuer indicates that the address does not match. This feature helps protect you from potential fraud and liability.