Reply to thread

Message: <blockquote data-quote="HAneo" data-source="post: 27664279" data-attributes="member: 17432">Let me correct some point. when you connect to a Direct-Debit Payment Network you don't need an OTP CVV of customer every time. . All things happen under the hood. (When you pay using google Pay you just need a thumb print and you wont get any OTP) customer never ask for CVV or anything. they just need to given there thumb print and transaction done. So to handle this Marchant side must keep some track(AUTH Keys for DDP networks and Another data set.). basically customer gave mandate to handle transaction for them. good side this is very easy for customer. Now this system is hacked and that party got all the customer and secure data (we don't know the extend of the hack but we should think of the maximum for sake of the customers). now it's very easy to Commit a  Direct Debit - pulls  because  attacker already have customer data and all the Auth he needs. And yes this is not easy for a programmer but a professional can easily do this. that's why people hack these kind of systems.All i am saying is that  don't take any chance.</blockquote>

Top Bottom