Reply
Highlighted
Member
Posts: 3
Registered: ‎11-10-2010

CIM allows successful capture on expired cards?

We have noticed that expired cards stored in CIM still allow successful auth and capture. Is this expected behavior?

 

Thank you,

 

Jason

Highlighted
All Star
Posts: 699
Registered: ‎11-03-2016

Re: CIM allows successful capture on expired cards?

It can be. If you're just doing a one-off charge through our API, we would block expired cards from going through. However, with customer profiles, you can save the card while it's valid and then have it be expired later. Since the card's already saved, we won't necessarily block it, but you can't count on it working, either. Whether you get approval is up to the processing network and the cardholder's bank.

 

Good practice would be to maintain the profiles on your end to get updated dates when possible. If a customer is paying on your site and you're presenting payment profiles to them to choose, you should first check if any are expired and alert your customers to that fact. If you don't keep multiple payment methods on each profile, you can still do a check of the profile's details before you charge it to alert the customer if it's expired.

 

You can also proactively search for expired cards to alert customers that they need to update using our API:

http://developer.authorize.net/api/reference/#customer-profiles-get-customer-payment-profile-list

 

One of the easiest ways to manage this would be to use our upcoming Account Updater feature to have us automatically get updated expiration dates and even new card numbers from the card networks. Stay tuned for details.

Highlighted
All Star
Posts: 699
Registered: ‎11-03-2016

Re: CIM allows successful capture on expired cards?

Just an update: The Account Updater referred to in my last post is now live and available in the merchant interface.