Recently Visa Canada issued a mandate requiring the capture of CVV2 data for all new eCommerce and telephone transactions. In this same mandate, they prohibited the collection of this data via mail correspondence. This mandate effective date is 13 October 2018.
Organizations utilizing Blackbaud Merchant Services as a payment service provider are not impacted by this mandate, and can continue processing as normal.
If your organization is using a 3rd party processor we recommend you contact them to confirm your transaction processing methods comply with the new mandated requirement. The issuing bank will determine whether they approve or decline any transaction that does not meet the above requirements based on the agreement with your processor.
All clients processing eCommerce transactions utilizing Blackbaud Payment Service are compliant with the new mandate when including CVV2/ CSC as a part of the transaction information for a newly tokenized credit card. All existing stored credit cards for recurring gifts will not require the CVV2 be sent for validation.