I have a client who has, in the past, used the Saved CC payment method on their store (despite attempts to persuade otherwise) for the single purpose of having convenient access to their CC data in the case that they suspect an order may be fraudulent.
They would check each order manually, and for orders from international customers (or other apparent red-flags) they would submit an additional transaction on their CC for a small arbitrary amount ($0.50 - $2.00, say).
For very obvious reasons, this is not a recommended solution to handle these suspected fraudulent transactions.
The best I can see how this should work would end up being quite expensive for the client (for a seemingly boring "feature").
- Have client sign up with Authorize.net CIM
- Install Authorize.net CIM payment gateway module in Magento
- Develop a custom module to allow the client to submit these fraud detecting transactions for a small amount.
- Assume that the customer will opt to have their CC info saved during checkout so that CIM is available for subsequent transactions with additional communication with the client.
This seems like a fairly tall order. As it stands, I can only assume that the client will opt to continue using the Saved CC payment method since it meets his needs (though obviously introduces other security issues).
Can anyone suggest an alternative way to handle transactions such as this while at the same time minimizing the need for additional communication with the store's customer? To me, this sounds like a big can of worms.