I need to accept pre-orders on my Magento site however the orders will remain on hold for longer than 30 days which means that I cannot pre-authorize the credit cards because the pre-authorization would expire.

I understand that I can save credit cards on my Magento site which will allow us to bill the credit card when we need to.

The problem is that when I do save credit cards, I'm not sure how to bill the credit cards (using PayPal) without going order by order and manually copy/pasting the thousands of credit card numbers one-by-one into PayPal Manager. Does anyone have any ideas how I can accomplish what I need to?

PS: After the pre-orders are done, I would plan to change the encryption key so that the data becomes unreadable.

1 Answer 1


You should never save credit card numbers or any other sensitive data in Magento or on your server (read about PCI DSS). There are payment gateways that allows tokenization of cards that will save the credit cards on their servers securely and give you a "token" which you can use to access the card. You can charge the card at any time you want, as they will be "saved" in Magento. They're usually called "CIM". Authorize.net, Cybersource, etc. have it.

  • Heh, the 5344 compromised site panic where people were asking how to empty the saved cards out of their tables... After the fact. You don't want to be in that position. Commented Jul 28, 2015 at 16:08
  • I would completely agree with you and would prefer to not save credit cards. Maybe I jumped to my own conclusion on how to solve the problem a little too fast. Does tokenization allow you to bill the persons credit card at anytime (ie after 30 days) and does it allow you to bill for more than the person originally agreed to (of course we would notify the person before hand)?
    – Kaleb
    Commented Jul 29, 2015 at 0:28
  • 1
    You should be able to, but you should ask with the respective companies that provide the CIM solutions.
    – laketuna
    Commented Aug 3, 2015 at 16:26

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service and acknowledge you have read our privacy policy.

Not the answer you're looking for? Browse other questions tagged or ask your own question.