UnionPay Express Deposit Credit card information Ctrip is the international practice

In recent years, the frequent occurrence of credit card information leaks to make the network with convenient reputation to pay deep crisis, many consumers questioned Ctrip Travel Network (hereinafter referred to as "Ctrip") and other electronic business sites suspected of storing user credit card sensitive information for future use of card security buried hidden dangers.

Ctrip is accused of storing credit card sensitive information for risk of leakage

A few days ago, a number of consumers to the China Network Financial center, said that in Ctrip purchase products, only simple information to check to complete the transaction. Mr. Zhang said that the first time he held a credit card in Ctrip consumption, the need to provide credit card type, card number, validity period, CVV2 code (that is, credit card verification code), such as a series of complete information, and then submitted to pay. "However, when I use this credit card for the second time in Ctrip, just provide four digits and CVV2 code after the card number, Ctrip will complete the payment operation." If the original (Ctrip) did not store information in the system, how did it complete the payment? Mr. Zhang said so "convenient" operation so that he is worried about his credit card security, "As long as you know this credit card number and CVV2 code, you can use it to consume, do not need any dynamic or other forms of password, my capital security by WHO to protect it?" ”

Also, consumers say, Ctrip's artificial customer service will directly ask users for credit card validity, CVV2 code and other sensitive information. China Network Financial Center reporter to buy tickets by telephone, dialed the Ctrip customer service telephone, in the payment link, the reporter according to the voice request enters the credit card number, the customer service personnel oral questioning reporter this credit card validity period and CVV2 code, when the reporter puts forward the sensitive information inconvenient to disclose, the customer service personnel says "If does not provide, Can not complete the reservation "and stressed that Ctrip will not store credit card number information. In addition, the reporter in search of relevant information found that many consumers have experienced credit card theft of the event, the amount from 20,000 to 5 million yuan range.

UnionPay Express Deposit Credit card information Ctrip is the international practice

According to the industry, credit card information mainly includes card number, validity period, CVV2 code, which printed in the card signature area of the 3-bit CVV2 code is also known as the "second password", mastering the card's transaction authorization, that is, as long as the correct CVV2 code, you can complete the payment link. China Network Financial Center reporter in China UnionPay Risk Management committee issued in 2008, "UnionPay Card receipt Agency account information security management standards" see the following expression: Each receiving system can only store the most basic account information necessary for transaction clearing and error processing, and shall not store bank card track information, card verification code, Personal Identification Code (PIN) and card expiration date.

Ctrip North China Public relations in charge of the Chinese network of financial center reporters said that Ctrip use of credit card payment method in line with international practice, "in the years before we have MasterCard, Visa and other card organization certification, this shows that These international financial institutions have a recognised attitude to Ctrip's risk control capabilities and security secrecy, or they will not authorize us. ”

When the reporter asked Ctrip customer service personnel oral credit card validity, CVV2 code and other sensitive information, how to protect the internal staff do not leak, the official said the move is also the international common practice, "since the company used this way, certainly the risk of adequate control capacity." "And for reporters to" whether the Ctrip violates UnionPay regulations, in the background to save the user credit card-related information, the other party did not give a clear answer.

The official stressed that Ctrip never appeared in the case of credit card theft, "because we are the main push is the tourism products, the reservation needs to provide customers with identity card numbers and other personal information, so once the brush, can also quickly detect (suspect)." "But there is a consumer to the reporter, card thieves often in the internet forum to sell Low-cost tickets, using the information provided by the Buyer ID card to complete consumption," even if the police find the actual use of air tickets, people are cheated victims, how to investigate the responsibility? ”