Credit Card Processing - Thieves inside rsp?

[jquijano]

Gentlemen, i been using rsp for a while, and i must say that i feel really happy about the rsp service, but, last night about midnight something strange happened, in the last 6 months i've been using my credit card only at atm or for rsp renewals, suddenly i got this message from my bank where basically confirmed that someone did buy something using my credit card on internet, the purchase was processed by echst . net, to be clear, my computer do not have a virus, the antivirus scans it everyday, i'm pretty sure nobody has cloned my card nor i do have children wich can use my card nor brothers, and, in my country the thieves will not buy silly things on internet...

now i remember that someday a friend of mine told me that after buying a hosting account trough my store (the one provided by rsp) he started to notice that his credit card billing statment had several purchases made on internet each one between 1 and 4 dolars, so for me is very clear that rsp has a security problem about credit card processing, someone there is buying souvenirs or mobilephone games... or who knows.. the math is very accurate... 1 to 4 dolars per 100 or 200 creditcards makes a good amount, sure that a lot of people pays these "little" amounts without even noticed it.

so i hope this message helps rsp to open the eyes and to find/kickout that bad element.

from now on i'm sure i will only use paypal as payment method rather than use my credit card directly. by the way, do not worry, my bank is gonna refund me the money and they will change my card.

did something like this happened to you? tell us!

[iPhone]

Wow that is quite shocking to hear..

Are you sure that you didn't use your card anywhere else?

[Chris.Newton]

Hello,

As this is quite a statement to make, we will need you to open a support ticket from your reseller account with us and provide ALL the information your bank has for you in the means of transaction information. Our order form is encrypted and what it does is to connect to the API of the chosen billing processor.

We will definitely be looking for your reply in a ticket.

Regards,
Chris

[jquijano]

Wow that is quite shocking to hear..

Are you sure that you didn't use your card anywhere else?

i'm very sure about it, as i said, in the last 6 months i only used it at atm machines and for rsp renewals, in fact i'm trying not to use it at all 'cause i want to give it back to the bank.

Hello,

As this is quite a statement to make, we will need you to open a support ticket from your reseller account with us and provide ALL the information your bank has for you in the means of transaction information. Our order form is encrypted and what it does is to connect to the API of the chosen billing processor.

We will definitely be looking for your reply in a ticket.

Regards,
Chris

Chris i would really appreciate it, i'm a tech guy, so i do understand what you mean in terms of security, but that only covers data transfer between browser/servers, if rsp keeps detailed records about transactions.. well... there could be the problem or maybe is not at rsp at all, maybe you merchant gateway is not as trusted as rsp thinks (i guess rsp uses one...)...

any way, my concern is more about my customers, is not very satisfactory to hear someone saying that after using a credit card at your web store someone keeps using the data he/her put there.

it will be a difficult task, as i said, someone used my credit card info, obviously not for buying from rsp, wich make it more difficult to trace but i will be glad to help.

[Chris.Newton]

Hello,

We use the same billing vendors all other companies on the Internet use - WorldPay and PayPal. Until someone verifies the payments you talk about are not vendor transaction fees for the transactions you make with your credit card, I am not able to give any further constructive suggestions. What I can be certain of, is that we have not had such complaints at all since our order form's release.

Regards,
Chris

[iPhone]

i'm very sure about it, as i said, in the last 6 months i only used it at atm machines and for rsp renewals, in fact i'm trying not to use it at all 'cause i want to give it back to the bank.

Well ATM machines can be hacked / spied on by others so this also needs to be taken into consideration.

[jquijano]

Well ATM machines can be hacked / spied on by others so this also needs to be taken into consideration.

sure, i'm aware of that, but, in my country, when someone copy all the data from your credit card, they just make big purchases at any big mall or they withdraw all the money on an atm, nothing else... i cannot imagine someone spying on you only to spent 2 or 3 dolars through internet, at least not in this country where a lot of people is starving.

[jquijano]

Hello,

We use the same billing vendors all other companies on the Internet use - WorldPay and PayPal. Until someone verifies the payments you talk about are not vendor transaction fees for the transactions you make with your credit card, I am not able to give any further constructive suggestions. What I can be certain of, is that we have not had such complaints at all since our order form's release.

Regards,
Chris

Chirs i know what you mean, but, sure a lot of people will not complaint about 1 or 3 dolars transaction, in fact, i bet you that they just do not even notice it, i swear you that i noticed it just 'cause my bank text me to my mobile every time some transaction is made with my card. i got the message at 1a.m. my time... otherwise i will not be writting this...

by other hand, i'm not saying that order forms are unsecure, but it could be that someone is sniffing inside database records, could be at rsp or at your merchant gateway... is the only thing that comes into my mind right now...

i hope rsp or someone could find anything related to this, i've being using rsp services since 1.5 years or more, i guess i've doing more than 6 transactions with my card per year at rsp, and this is the firs time since i have a card and since i'm being purchasing at rsp that something like this happens to me.
anyway i'm still happy with the service rsp provide me

[Chris.Newton]

Hello,

I can assure you that no one is sniffing in our database. Even if sniffers existed they would not get anything rather a bunch of sign up details. Our order form does not request credit card details anywhere in the process of signing up. You are advised to directly turn to your bank to track down the transactions. If you feel that the issue should be investigated you can also contact legal authorities and have your bank contact the vendor you are making purchases through.

Regards,
Chris

[Guest]

i didn't face that before but it could happened.

[robbie247]

Good on you, RSP

I have been with rsp for many years now, and i have never had any problems with any credit card used directly with rsp or on my website.
Be aware that the banks charge a currency conversion fee for transactions different from your home country, and it would be between 1-4 dollars depending on the value of the transaction.
I also think that its a very strong comment to suggest there is something untoward with the staff at rsp and really don't believe it at all.
The staff have always been very polite, courteous, and helpful, no matter what the topic and if rsp wasnt the best in this market, I would not market their products. Good on you rsp, you're doing a great job!!!

[vlasi47gr]

Also some banks charge international transaction charges. I switched banks for just that reason. Now another of my banks started doing the same thing. These are all related to charges with RSP. My current statement shows charges of 0.27, 2.40 and 1.38. RSP did not get any of this. This is just a way for the bank to make extra money for doing nothing. Needless to say, it is time to switch banks again. Or maybe I'll just use my PayPal card, they have never charged fees.

[Oliver]

Let me shed some light on this as this is a serious issue. I want to be very clear - RSP does NOT store any credit card details. We do NOT record the credit card number or the CVV at any step of the billing process.

Also, our company is PCI certified, which means that our network and our policies have been audited and are being audited regularly.

Once again - we do NOT record your credit card details at any time, so we do not have it, we do not store it and it is impossible for these details to be stolen through our system - not just because it is proven to be secured (as we are PCI-compliant and licensed) but also simply because we don't keep these details.

I hope this clears things up.

A couple of facts that I want to share with you:
- we have a very strict fraud-prevention policy, so it is extremely unlikely for anyone to be able to pay for a service provided by RSP with a stolen credit card. Each and every payment is checked by our automated system but also manually by the fraud-prevention specialists at our Billing Dept.;
- we do not accept payments over the phone, which would be the only way for anyone to provide us with his/her credit card details directly. All payments are processed online and none of your credit card details are stored or recorded in our system.

[The Loon]

Been here for a few years now and never had a problem.

Virus scanning will only catch the viruses that have been identified if there was a new credit card detail collecting virus that had not been identified a virus scanner can skip it leaving it on your computer until it is identified (1 day -2 weeks, who knows).

[redjen0703]

I've been with RSP for a couple of years and not had any problems. I do get very small charges levied on me by my bank for the international transactions, but I get those anytime I make an overseas purchase, so it's never a cause for alarm. If I want to avoid them, I pay by PayPal. Either way, I never feel like my financial data has been compromised in any of my numerous transactions with RP.

If anything, RP is one of the most cautious companies I've ever dealt with. They've called both me and a couple of my customers upon signup to verify identities before processing the payments made by credit card.