Taking Payment through Prestashop

[dannylbrooke]

I have had numerous sales calls from customers wanting to buy stuff and saying can i pay over the phone when i reply no a few say oh i dont like putting my details online and thats the end of it (never to be seen again)

I read a post somewhere that you can take payment over phone using one of the payment modules but cant for the life of me find it again, also there is a module that allows you to log in as a customer, i have no idea why you would want to log in as a customer but if you could would you not be able to take there details over the phone and enter it for them or is this illegal.

I know there are ways of taking payment over the phone with one of them machine things lol but i am not in a position to pay £20 month etc for this xx

[JhnStcks]

You will need some kind of terminal, (handheld or virtual) to be able to take payments over the phone.  Cheapest option is probabaly paypals virtual terminal.

There are various modules available to be able to do this, but the biggest stumbling block is that you CANNOT currently enter orders from the backoffice area.  You would have to create the account for the customer, and enter the order manually in the frontend, and then select the appropriate payment method.

http://www.prestashop.com/forums/viewthread/14680/modules/pay_by_phone_module_v0_dot_9 is a paybyphone module.  With this module the customer (or you) enters the order normally, then phones you and completes the payment bit over the phone.

[scotserve]

Actually the biggest reason for not doing so is it is illegal and most definitely get you banned if you are caught
It is a clear breach of Visa/Mastercard rules unless you have either a terminal or virtual terminal and CNP ( Cardholder Not Present ) merchant account.

Also think of the fraud implications especially if you dont know the caller you would be complicit in the fraud if it was a stolen card.

[dannylbrooke]

I thought as much Bryon and dont want to do anything ILLEGAL, so is what john suggested a No No then?

[JhnStcks]

Aslong as you use some kind of terminal there wont be a problem

[Grifter]

I'm no expert but i give in at the moment with prestashop. There seems to be more to understand than the layman. As a layman it is a great bit of kit to get something up there but taking payment is another matter. I'm verified with google and paypal and was implementing virtual and pro etc but get a customer to go through that then no. Something on my site cocks it up and I haven't the knowledge to sort it so. I'm pulling it :(

[scotserve]

I thought as much Bryon and dont want to do anything ILLEGAL, so is what john suggested a No No then?

No that would be fine as long as you have a legit way of handling phone transactions - paypal pro costs you £20 a month plus transaction charges so why not look at sagepay which costs about the same but gives you a certain amount of transactions in the fee.

By the way i got nabbed by Google last month for putting a customers card through on my own machine even though he was in the office with me - got a bad boy warning and told if i done it again I was off their list, I dont have enought phone CC transaction to justify a terminal account.

[faze3]

Another thing you may wish to consider are the new PCIDSS (Payment Card Industry Data Security Standards) rules. We have just cancelled our telephone merchant account to save the paperwork involved (every year) to get yourself certified. Where do you keep the card numbers, who has access to them and so on. The self-certification is far easier if you use a payment gateway and only have an internet account.

Alan.

[scotserve]

Another thing you may wish to consider are the new PCIDSS (Payment Card Industry Data Security Standards) rules. We have just cancelled our telephone merchant account to save the paperwork involved (every year) to get yourself certified. Where do you keep the card numbers, who has access to them and so on. The self-certification is far easier if you use a payment gateway and only have an internet account.

Alan.

We have the same issue with servers PCI compliance for a very very small percentage of customers ( if any) that accept CC through their own systems rather than a gateway

[faze3]

I really didn't fancy taking card details through the site. If hackers can break into banking systems what hope is there for the small business? Anyway, I think the majority of customers are quite used to being transferred to a payment gateway these days. Best with payment processing to leave it to the professionals.

Alan.