Credit Card Fraud.

[Bobby Sh]

While paying by credit card, the system is supposed to send MerchantID, TransactionIdentifier, CreditCardNumber and PurchaseAmount to transMaster.

How do you think, the system will validate the authenticity of a user.In the given requirement, the system is not validating the physical location. Generally, in E commerce site, at the time of payment, the user billing or shipping address is validated with the address of credit card.

With the scenario like, I am giving a credit card # of some one else, how do you think system will validate such fraud.

Any thoughts?

Bobby

[Cleuton Sampaio]

You are right, but you must follow Transmaster�s specifications. I also have noticed that there are no means to refund the client.

IMO, you should concentrate on the requirements and accept this lack of security. What you can do is to document this in your assumptions.

[Andy Malakov]

I would assume that payment request is just a simplified example.