I. INTRODUCTION

II. REQUIRED SET UP STEPS for NON EDC clients.

Contact Thermeon's Support Dept. to configure your system for Electronic Draft Capture. In addition, the following control files need to be configured.

A. Edit Miscellaneous Control Fields (shortcut: EDITMISC)

Page 3, Fields 21 and 35: these can be set up to work in conjunction with each other as follows:

• To load neither drivers license or credit card data, set Field 21 to N; leave Field 35 blank.
• To load both drivers license and credit card data, set Field 21 to Y; leave Field 35 blank.
• To load only drivers license data (and not credit card data) set Field 21 to Y; set Field 35 to "2".

WARNING: The preferred setting for Thermeon customers doing EDC through CARS+ is to configure your system so that credit card data is NOT automatically loaded. (Set Field 21 to N; leave Field 35 blank) If you configure it so that CARS+ loads the customer's default credit card into the Reservation or RA and the rental agent does not re-swipe the card, the transaction will be transmitted to the credit card processor as a card NOT PRESENT non-swiped transaction and, thus, may increase your credit card discount fees.

Page 7, Field 38 Default Settlement Batch Code

A settlement batch code is used to specify to the settlement program the destination of the batch. Currently it is used only by the Fiserv handler in North America to specify in: 'NOR' for North Platform or 'SUS' for South Platform. And in Canada 'SCA' for Canada.

B. Edit Main Control Record

Field 28: Auto Load FOP as Deposit

When this field is set to "A" , when an estimate is requested, the estimate total is loaded automatically as the Auth Amount on Field 8b in the Main Window of RA Open.

C. Edit CC Phone Numbers (shortcut EDMRPH)

Edit CC Phone Numbers is used to store the phone number to call when the credit card processor requires the user to call in to authorize the credit card. The phone number will be displayed in the message instructing the user to call for an authorization.

D. Edit Card Definitions (shortcut: EDITCC)

Field 19: Require Security ID

In order to qualify for the lowest possible commission fee, additional security data needs to be entered when a credit card is manually keyed into CARS+. To have the system prompt for the security code and zip/postal code when a credit card is manually keyed into a screen, a field must be set in the Card Definition record for each card that is to be prompted. Using the program Edit Card Definitions, set the value of Field 19 to "Y". Remember, there may be more than one record in this file for each FOP. The field must be set for all records where the user is to be prompted for security data.

Activating this feature changes the process at the counter. Please refer to Section IV below for the changes associated with this feature.

Field 37: Auth Expire Days

Some of the credit card companies limit the life-time of a pre-authorization to a certain number of days. Enter in this field the number of days a pre-authorization is valid.

When opening a RA, if the length of the rental exceeds this value, the card cannot be used to pre-auth the rental. It must be used as a deposit.

Refer to the chapter: Overview - Expiration of Credit Card Authorizations

E. FDC Class Conversion Records

For certain types of credit cards, it is necessary to convert the vehicle class codes used in CARS+ to a class code the credit card company has defined. This program is used to create class code conversion records.

F. Customer File for one-way rentals:

If your location does one-way rentals to foreign locations, the customer record for the foreign location must have an address including the city and state. Otherwise, the credit card transaction will be rejected in the Settlement Report.

G. Edit Locations

Page 2, Field 6: Settle Flag

This field should be to set to "Y". If settlement should be stopped, this field should be set to "N".

Page 6, Field 15: Zip/ Postal Code

The zip code or postal code of the location must be entered in this field.

H. Edit Cash Drawers

Page 2, Field 1: Terminal ID

Thermeon Customer Support will enter the correct Terminal ID in this field.

I. Edit Country Codes

Fields 13 - 15: ISO Codes

The proper ISO codes (2 character alpha, 3 character alpha, and numeric) must be entered in these fields for the pertinent countries.

III. COUNTER AGENT INSTRUCTIONS

A. OPENING A RENTAL AGREEMENT

Swiping the credit card

Begin the transaction with the cursor at the Main Window "OPTION:" Field. Press F2 and the prompt to swipe the credit card will display.

Upon swiping the card, an automatic search for the credit card number is performed. If found, the Customer record will display on the lower half of the screen. By selecting a line number from the display, the customer's data is loaded onto the RA Open screen.

If the credit card number is not found in the credit card search or you press (ESC) to abort that search, then an automatic search is made using the name from the credit card. Just as it does when the name is typed into Field 1, CARS+ will search for a reservation and/or customer based on the name entered.

Optional Features:

If the "birth date matching" feature turned on, (See Edit Misc Control Fields) a prompt will display to enter the customer's date of birth prior to the commencement of the search.

The field "Auto Load FOP as Deposit" in the Edit Main Control Record can be used to load swiped credit card information in the Deposit Sub-window as well as Data Group 7 in the Main Window.

If the system is configured to swipe or scan driver's license, pressing F2 from the main window "OPTION:" field is reserved for the drivers license. The credit card can be swiped by pressing F2 from Fields 7 or 8 in the Main window. (The drivers license can also be swiped or scanned by pressing the F2 key in Fields 1, 2, 3, or 6 of the Main window.) For more information, refer to the chapter Overview - Swipe/Scan Drivers License.

Manually entering the credit card

In some cases, the swipe reader will not be able to read a card if the magnetic strip has been damaged. For those cards, enter the customer's name and credit card number manually. This transaction will be treated as "Card Not Present"

The system can be configured to require security ID data when the credit card is manually entered. Please refer to Section IV of this chapter.

Requesting an authorization.

• Enter data on the RA Open screen in the normal manner.

• Request an Estimate using the "F8" key. The estimate total will be automatically entered in Field 8b as the amount to authorize on the credit card.

• With the cursor in the Main Window "OPTION" field, press "F11" to request an authorization. The message similar to the one below will appear at the bottom of the screen:

625.00 REQUEST MADE ON CARD MC PRESS RETURN

(The requested amount is always rounded up to the next even dollar for authorizations.)

User tip: In some cases the following message will display instead of the one above:

AUTH WILL EXPIRE PRIOR TO END OF RENTAL, DEPOSIT REQUIRED

Some of the credit card companies limit the life-time of a pre-authorization to a certain number of days which is entered in the Card Definitions record.

When opening a RA, if the length of the rental exceeds the number of days specified, the card cannot be used to pre-auth the rental. It must be used as a deposit.

Refer to the chapter Overview - Expiration of Credit Card Authorizations for more details.

• Press "F12" to check for the approval. One of the following messages will display:

Message	Description
REQUEST IN PROGRESS	The approval is still processing; press F12 to check again.
APPROVED: 870339	The request was approved; the auth number will display in the message.
DECLINED	The request was declined. Place the cursor in Field 7 and press F3 to erase the card number.
CALL FOR CREDIT CARD AUTH	The user must make a phone call for approval. This message should be followed by a second message providing the phone number and the Merchant ID number.
AUTO RENTAL DURATION EXCEEDS MAX LENGTH	The user must reduce the amount of the rentals days. Credit Card processors have a maximum rental days allowed. (Usually 99 days maximum allowed.) The rental can be converted to a Multi Month RA, or the rental will need to be divided into segments.

Manual authorizations

Manual entries are no longer allowed. If you got an authorization from an outside source, the charges must be made by that same outside source. A non credit card form or payment can be created for this type of entry. (See Thermeon Support for assistance if necessary)

Saving the RA

When F1 is pressed to save the RA, and a shortfall is not allowed, the total amount from various forms of credit (deposits, authorizations, vouchers) is less than the estimated total, the following message is displayed:

NOT ENOUGH SECURITY OBTAINED; GET ADDITIONAL CREDIT CARD AUTH?

Enter:

N = The saving process is canceled.

Y = An additional authorization will be requested for the amount of the shortfall.

If an additional auth is obtained in this manner (at the time of saving the RA) and a previous un-saved auth was also obtained, two records are created in the Deposit/Payment File -- one for each authorization. Although the second auth will have a different number, since it was obtained on the same card it is seen as an incremental auth.

Cancelling an authorization

The card authorized can be cleared from Field 7 of the main window. The various circumstances are:

Prior to requesting authorization: To clear the card out of the field, move the cursor to Field 7, and press F3 (Erase). The entire field will be cleared. Since no request was made for an authorization, there will be no record of the credit card number having been entered.

After requesting an authorization but before saving the RA: To clear the card out of the field, move the cursor to Field 7, and press F3 (Erase). The entire field will be cleared. There will be no record in the Dep/Pay file of the credit card number having been authorized. (Note to Thermeon Support: There will be a record in the CCATHR record which the end user does not access.)

After saving the RA: To cancel an authorization, recall the RA to the RA Open screen. Place the cursor in Field 7, and press F3 (Erase). The entire field will be cleared, and the following prompt will display:

CANCEL LATEST AUTH RECORD? (Y/N)

Enter:

Y = cancel the authorization; a negative authorization record will be created.

N = ignore the fact that F3 was pressed in Field 7

Extending RAs and obtaining additional authorization

To obtain an additional (incremental) authorization due to extending the RA or adding other charges, bring up the contract up on the RA Open screen. Make the necessary changes to the contract, and obtain a new Estimate with "F8". The estimate will enter the needed amount in Field 8b of the Main window, or you can enter an amount manually. With the cursor at the Main Window "OPTION:" field, press "F11" to request an authorization and "F12" to check it.

If the extension is within the initial authorization's valid life time, obtaining an incremental authorization is the only action needed.

If the extension will exceed the number of days for the authorization's valid life time, convert the authorization to a deposit and obtain a new authorization. (User tip: The authorization's life time is entered in the Edit Card Definitions record as mentioned earlier in this chapter.)
Use one of the following methods:

1. In RA Open when extending a RA beyond the current authorization's expire days, and a new estimate is obtained, the following message will display:

AUTH DUE TO EXPIRE, CONVERT TO DEPOSIT?

Entering "Y" will automatically call the program, Convert RA Auths to Deposits with the RA data already loaded on the screen. There is no need to unmask the credit card. Press F1 to convert the auth to a deposit.

Upon exiting this program, you will be returned to the RA Open program where you can continue with any changes to the RA, obtain a new authorization for the additional days, and save it.

2. Select Convert RA Auths to Deposits from the Daily Procedures menu to convert the auth to a deposit.

NOTE: When getting incremental authorizations. This feature (Convert RA Auths To Deposits) takes the original authorization and converts all incremental authorizations, and charges the total using the first, initial, original authorization number. THE INCREMENTAL AUTHS CANNOT STAND ON ITS OWN, BECAUSE IT IS BASED UPON THE INITIAL AUTHORIZATION.

Example: The first initial authorization taken at RAOPEN is considered THE original authorization, and any other incremental authorizations are only considered extensions or in addition to that authorization.

• First initial, original authorization taken at time of rental: $200.00, Auth# 12345 - Taken on January 1.
• Customer extends the rental and the user get an incremental auth for $100.00, Auth # 1345 - on January 3.
• Customer extends again or doesn't return, user gets an additional incremental auth for $200.00 Auth# 6456 - on January 15.

Prior to this original authorization expiring, you will need to use this feature to convert these authorizations to deposits before you should get a new authorization.

Cars+ will take all authorizations and amounts and convert them to deposits by using the first initial, original auth# 12345. And make one single charge for $500.00. (The total of the original authorization and all incremental authorizations)

ALSO note that all incremental authorizations do NOT extend the life of this original authorization. In the above example all incremental authorizations will expire using the same original January 1 authorization. (see more information about incremental authorizations below)

3. Manually enter the deposit in RA Open:

Bring up the RA
Unmask the credit card using Shift/F4
In the Deposit Subwindow, enter the amount that was pre-authorized, the credit card data, and the auth number.
The following message will display:

YOU ARE USING THE PRE-AUTHORIZATION ON THIS DEPOSIT.

Back in the Main window, obtain an Estimate and new pre-auth for the balance due on the estimated charges.

Incremental Authorizations

An incremental authorization is an additional auth added to an original authorization. For example: if at open you pre-authorize the renter's credit card for $200.00 but at close the total charge comes to $250.00, you will need an additional authorization, in this case an incremental authorization for an additional $50.00. CARS+ will automatically seek incremental authorizations on pre-authorized cards. The following major credit cards DO NOT support incremental authorizations:

• American Express
• Discover
• All cards that are processed by Discover in your area such as Diners, JCB and UnionPay (ask your acquirer which cards for your location are processed by Discover Card).

Seeking an incremental auth on any of these cards will immediately result in a rejection.

So what do you do?

1. If you are opening an RA and you have not yet saved the rental agreement when you discover that you need more authorization,"F3" to erase the current authorization (which will immediately void the original auth) and seek a new authorization for the new amount.
2. If you are closing an RA and you need an additional auth, use the original authorization as is for one payment and enter a second payment, using the same card or another form of payment, for the shortage seeking a separate authorization for that payment.
3. If you get a preauthorization on a Discover or American Express Card at RA Open for $250.00. Then at RA Close the charges are $300.00, you cannot get an incremental authorization for the additional $50.00 like you can with Visa and MasterCard. You must take a second payment for the $50.00 difference and authorize that separately. (It can be the same credit card.)

RAs with Deposits - the Deposit subwindow

Upon entering the Deposit Subwindow, the cursor will be at the subwindow "OPTION:" field.

If the "auto-load deposit" feature is turned on, the credit card information will be automatically loaded in the Deposit Subwindow from the initial swipe of the card when beginning the RA. If that feature is not turned on, Press F2 to swipe the card. Or enter the credit card data manually.

The subwindow will look similar to this:

OPTION: __________ DEPOSITS Cur/Req Amt */* Amount/FOP/#/Exp/Settled Auth#/Amt/PmtDate/Time/Drw Curr Code/Frgn Amt 1 500.00/VISA/4005555000111/0225/* 2 */*/*/*/* 3 */* 4 */*/*/*/* 5 */*/*/*/* 6 */* 7 */*/*/*/* 8 */*/*/*/* 9 */*

Press (ESC) to exit the subwindow. It is the act of "Escaping" from the subwindow that causes the system to request an authorization on the credit card. A prompt will appear at the bottom of the screen asking if an auth should be made on the deposit:

AMT EXCEEDS AUTH ON FOP VISA - MAKE REQUEST?

User tip: At the top left of the subwindow, notice the "Cur/Req Amt" field. The "Curr" (current) field displays the total of all deposits received including those taken on the reservation.

RAs with Multiple Deposits while opening the RA

If more charges are added after the initial deposit amount is processed and before saving the RA, an additional deposit can be requested by going back to the Deposit subwindow and entering the new amount in data field 4. An example of entering $120 is shown below. (This does not necessarily need to use the same credit card.)

OPTION: __________ DEPOSITS Cur/Req Amt */* Amount/FOP/#/Exp/Settled Auth#/Amt Curr Code/Frgn Amt/Exch rate/DCC? PmtDate/Time/Drw 1 500.00/VISA/4005555000111/0219/N 2 1234/500 3 */* 4 120.00/VISA/4005555000111/0219/N 5 */*/*/*/* 6 */* 7 */*/*/*/* 8 */*/*/*/* 9 */* F2=SWIPE F11=REQ AUTH

Enter the amount and the credit card data (or swipe the card). Again, the act of escaping from the subwindow will automatically call F11 to obtain an authorization.

Upon saving the RA, both deposits will be processed and saved in the Deposit/Payment file on the RA.

RAs with Multiple Deposits - RV Operations

The deposit subwindow has a slightly different format for RV operations. Note that the additional amount needed is displayed in a "Balance" field on the upper right side of the window. And the "Cur/Req Amt" field shows the deposit amount already authorized and the total amount required.

OPTION: __________ DEPOSITS Cur/Req Amt 500.00/620 Balance 120.00 Amount/FOP/#/Exp/Settled Auth#/Amt PmtDate/Time/Drw 1 500.00/VISA/4005555000111/0219/N 2 1234/500 3 */* 4 */*/*/*/* 5 */*/*/*/* 6 */* 7 */*/*/*/* 8 */*/*/*/* 9 */* F2=SWIPE F11=REQ AUTH

In data field 4, enter the amount and the credit card data (or swipe the card). Again, the act of escaping from the subwindow will automatically call F11 to obtain an authorization.

B. CLOSING A RENTAL AGREEMENT

Proceed with closing the contract in the normal manner by entering the ending odometer reading and fuel level. If an authorization was taken on the Open screen and it covers all charges, simply press "F1" to close the RA. (This is also true if there was an initial authorization and an incremental authorization - neither of which were converted to deposits. The payment will use the initial authorization code; the auth code on incremental authorization is not used.)

If the final charges exceed the amount that was authorized, a prompt to make a request on the credit card for the balance due on the contract will appear at the bottom of the screen:

AMT EXCEEDS AUTH ON FOP MC - MAKE REQUEST?

If a one-way rental, opening location and drawer number is automatically assigned to the payment.

Processing a payment at Close on a new credit card

If a new credit card is to be used at Close, a prompt for swiping the new card can be called by pressing F2 from any of the following places:

• The cursor at the Main Window "OPTION:" field.
• The cursor at the Payments Subwindow "OPTION" field.
• The cursor in Field 1 of the Payments Subwindow.

In all cases, Press F2. The prompt to swipe the card will appear at the bottom of the display.

After swiping the card or manually entering the card data, enter the amount to be charged to the card in the corresponding field in the D subwindow. Press (RET). The following message will display:

AMT EXCEEDS AUTH ON FOP VI - MAKE REQUEST?_

With the cursor at the "OPTION:" field of the Main window, Press F1 to save the RA. The system will automatically check for the approval and display it.

• >Indent List

However, if you want to check to see if the authorization request was approved prior to pressing F1, you can press F12 (Check Authorization) at the Main window "OPTION:".

Issuing a credit

To issue a credit, enter the amount of the credit, preceding it with a minus sign. Any user may process credits.

A credit does not need an authorization. So once it is entered in the Payments subwindow, press (ESC) to exit the subwindow and continue closing the contract.

Note: The system does a logic check to be sure that the credit card being used for the credit was a card actually used on the contract. If you try to process a credit on a card NOT used on the contract, the following message will display and the credit will not be accepted:

CREDIT CAN ONLY BE GIVEN TO A CREDIT CARD THAT IS PRESENT ON THE RA

C. TAKING A DEPOSIT ON A RESERVATION

Upon entering the Deposit Subwindow, the cursor will be at the subwindow "OPTION:" field.

In Field 1, enter the deposit amount to charge to the credit card.

It is unlikely you will be able to swipe a credit card when making a reservation. Instead of swiping, manually enter the credit card number and expiration date in Fields 2b and 2c.

In Field 4b enter the amount to obtain for authorization. (This is normally the same amount entered in Field 2.)

Escaping from the Deposit subwindow should trigger the request for the authorization.

D. EDITING POSTED RAs

Edits to posted RAs are reported and posted on the Accounting DBR. Once posted, these transactions will settle with the other transactions of the day.

E. PETTY CASH TRANSACTIONS

The Petty Cash Entry programs can be used to record a charge or credit to a customer's credit card for some reason other than the RA. Transactions are stored in the Deposit/Payment file and reported on the Drawer Balance Report and the DBR reports. They are also settled with other credit card transactions via Electronic Draft Capture.

Authorizations can be obtained on the Petty Cash screen by pressing F4. Use F8 to check the authorization request.

The transaction will settle after having been posted via the Accounting DBR.

F. DAY END PROCEDURES

The Drawer Balance Report is used to balance cash, check, and credit card receipts on a daily basis. Prior to being on CARS+ electronic draft capture (EDC), the credit cards shown on the report should have been audited against the credit cards settled on the separate point of sale machine prior to posting the contracts on the Accounting DBR. With CARS+ EDC, the audit is performed after posting the Accounting DBR.

It is the act of posting the contracts that makes the credit card transactions eligible for settlement. Each night the following processes are run:

• A program examines all credit card transactions that are queued up for settlement. If the total of all authorizations on a single card exceeds the amount to be settled (the card was over-authorized), the program will automatically do a "negative authorization for the difference" so that the two amounts match.
• The settlement program then runs next and settles all transactions are are queued for settlement.
• It then logs those transactions that are settled and they can be printed out via Settlement Report (on the Electronic Draft Capture Menu.) The Settlement Report should be audited against the Accounting DBR.

Note: For Hertz locations on Electronic DRB, daily procedures should follow this order:

Transmit EDRB to Hertz.
Post transmitted contracts via Accounting DBR.
Run the Settlement Report the following morning to verify settled credit card transactions.

The Auth Expiration Report - The life span of an authorization is defined in days in the Edit Card Definitions file. Once this period of time has been expended, the unused authorization expires and can NOT be used when the rental returns. Therefore, tracking the "life" of pre-authorizations is critical. This report lists all open RAs whose authorizations are DUE to expire within the next few days. (User can enter the number of days.)

G. INDICATING CREDIT CARD CHARGES HAVE BEEN MANUALLY SETTLED

Occasionally a credit card transaction may be settled manually. When that happens, it must be indicated on the unposted transaction. Failure to do this will cause EDC to also settle the transaction, thus the card holder will be charged twice for the same transaction.

When a credit card payment on a closed RA has been manually settled, enter the letter "Y" in the EDC Field (Field 1e shown in the example below) to indicate that it has been manually settled. By entering the "Y", the transaction will NOT be queued up for settlement after it has posted.

OPTION: __ PAYMENTS Page 1 Amount/FOP/#/Exp/Settled Auth#/Amt/PmtDate/Time/Drw Curr Code/Frgn Amt 1 592.34/MC/5419843331777778/0403/Y 2 123/600/*/*/* 3 */* 4 */*/*/*/* 5 */*/*/*/* 6 */* 7 */*/*/*/* 8 */*/*/*/* 9 */* 10 */*/*/*/* 11 */*/*/*/* 12 */* F2 NEXT 4 F4 PREV 4

User tip: Some users may be blocked from accessing the "Settled" field. The field "Block EDC Flag Edit" in Edit Misc. Control Fields turns off access to this field for everyone - except for those who have access allowed via the field "Override EDC Block" in their record in Edit User Access File.

Additional notes on the settlement flag:

The settlement flag can be set to either:

• N = the record has not been processed yet by the EDC logic.
• Y = the record was manually settled outside the EDC logic (such as with a ZON device).

If any character other than a Y or N is entered, it is not allowed and the following message will display:

N=Not Settled, Y=Settled

And the field is reset to "N".

Note: The following codes are generated by various processes within CARS+. They cannot be manually entered.

• 2 = the record has been queued up for settlement by EDC via the posting program. This value does NOT change once the record is settled. To know if a queued up transaction did in fact settle, run the Settlement Report.
• 3 = the record was settled by the SiTef Brazilian banking system and therefore will NOT be settled by EDC.
• 4 = the record will be settled by Hertz Oklahoma City once the RA has been sent there by the Hertz GAR feed and therefore will NOT be settled by EDC.

User tip: It is necessary to turn on the "Settle Flag" feature in Edit Locations on page 2 in order for the DEPPAY records that are not manually flagged as settled to be written to the settle queue.

H. DEPOSIT/PAYMENT FILE SEARCH

When using EDC, the Deposit/Payment search provides details on whether or not transactions were swiped or manually entered.

1. An asterisk ( * ) immediately preceding the credit card number indicates that the credit card was read by a swipe reader.

2. An asterisk immediately after the time indicates that the credit card transaction was cancelled.

3. A caret ( ^ ) between the the authorization number and amount indicates that the auth was manually entered rather than obtained through EDC.

User tip: Because of PCI restrictions, the complete credit card number IS NOT stored anywhere in CARS+. After entry and saving, it is encrypted and stored in a separate encryption server. The only thing that is stored in CARS+ is the first four characters of the card, an asterisk "*" followed by the last four characters. The Deposit/Payment (Dep/Pay) file search when searching by credit card number will accept a full credit card number. But then the number is internally reformatted to the “First 4*Last 4” format and and that is what is used to read the Dep/Pay file for a match. For example, MasterCard # 5121123456781234 will be converted to 5121*1234 and a match will be sought. But 5121*1234 can match card 5121123456781234, but it will also match 51219999999991234 or 5121888888881234. In fact, one hundred million cards can have the same first and last four characters. Therefore, this type of search is NOT guaranteed to give the correct match on the first attempt. You must unmask the found card to determine if a match has been found.

WARNING: Since a Cars+ search for this is the "First 4*Last 4" format, this is not a guaranteed match and the user should unmask the credit card searched to determine if the credit card is a match.

IV. ACTIVATING THE OPTIONAL "REQUIRE SECURITY ID" FEATURE

INTRODUCTION

Data security in credit card processing has become a very hot topic. Fraudulent credit card transactions cost businesses billions of dollars every year. Because of this, the credit card companies have increased their requirements on merchants. And to enforce these requirements, they have added penalty processing fees to transactions that do not meet the highest standards.

• The most secure credit card transaction is one where the credit card was physically present at the time of the transaction and it was read by a swipe or chip reading device, NOT manually keyed into CARS+. When that is done, hidden data that is loaded into the card is read and used by CARS+ when seeking a credit card authorization. Credit card transactions entered this way receive the best (lowest) processing rate.
• Credit card numbers that are manually keyed into CARS+ are considered less secure. But if they are entered along with the printed card security code and the zip code for the card's billing address, although less secure than swiped cards, they allow the card processors to do a level of security checking when an authorization is requested. Transactions like these are not penalized to the extent as the least secure mentioned next.
• The least secure transactions are credit cards that are manually entered and no additional security data is provided. Transactions of this sort may be accepted by the credit card companies, but they are subject to the credit card company's highest processing rate.

SET-UP

In order to have the system prompt for the security code and zip code when a credit card is manually keyed into a screen, a field must be set in the Card definition record for each card that is to be prompted. Using the program Edit Card Definitions, set the value of Field 19 to "Y". Remember, there may be more than one record in this file for each FOP. The field must be set for all records where the user is to be prompted for security data.

OPTION: ___ EDIT CARD DEFINITIONS 12345678901234567890 1 Card# high 2 Card# low 3 Mask 35 Payback 4 Description 36 Chg fee on debit 5 Fop name 21 Batch with others (Y/N) 6 Handler program 22 Card Type 7 Check digit? 23 Curr Code 8 Floor limit 24 Issuing Country 9 CC Proc. Flag (1 = Auth only 2 = Auth/Settle) 10 Reversal Code 25 Do DCC 11 Increment code 26 S Sub window 12 Tolerance % 27 Charge Fee Code 13 Rental Fields on Auth 28 Placeholder? N 14 Rental Fields on Capture 29 Underauth: New auth? N 15 Extra Output Fields 30 Can Cancel Sale? N 16 Allowable Pct 31 Can Preauth Sale? N 17 Block on RA Open 32 Reauth Required? N 18 CDPID Number 33 Settle Immediately 19 Require Security ID(Y/N) Y 34 Numeric code 20 Clearing House 1SAVE 2NEXT 3ERASE 4DELETE 5BACKUP 6 7HELP 8

AT THE COUNTER

When credit card security data is turned on and a credit card is manually entered (not swiped), the following Security Data pop-up window automatically appears so that security data can be entered. Security data is NOT required on cards that are swiped into CARS+, so this pop-up will not appear for swiped cards.

Enter Card Verification Code * A = Code is not legible B = Code is missing Enter Billing Zip Code

Enter data as follows:

ENTER CARD VERIFICATION CODE

Enter one of the following: 1. The card verification code. For Mastercard, Visa, JCB, and Discover: this is a 3 digit code which is printed on back of card near the signature box For American Express: this is a 4 digit code printed on front of card above and to the right of the embossed account number 2. The capital letter "A" if the verification code is not legible. 3. The capital letter "B" if there is no verification code on the card. EXAMPLE: Type 123 (RET) WARNING: Do NOT lie to the system. Do not say that the card does not have a CVV code if it really does or if you do not know if it does. The issuing bank knows if the card has a CVV code or not. Saying it does not (value "B") when it really does, will cause the bank to reject the transaction. Banks have also been known to reject a transaction if you say that the code is not legible (individual banks make up their own verification rules). If your business involves manually entering credit cards and you cannot always enter a CVV (card not present transactions), it is best to turn the card verification logic off. Yes, you will probably pay a slightly higher processing fee on non-swiped transactions, but they will not be rejected. "But I used to be able to enter a "B" with no problem, what has changed"? The banks have changed. They are seeking to reduce fraud and have tightened their validation logic.

ENTER BILLING ZIP CODE

In the next field, enter the card holder's billing zip or postal code. Note, this may not be the same zip code as the one in the renter's address on the main window. This must be the zip or postal code where this credit card's invoices are sent. EXAMPLE: Type 92780 (RET) After pressing return on the zip code field, the program exits the pop-up.

NOTE: Manually entered credit cards may be accepted without the verification code and zip code. However, corporate credit cards may require the verification code. Transactions without the verification code may be subject to a higher processing fee. When the verification code and Zip Code are entered and accepted, the transaction will be subject to a lower fee.

If the authorization request fails, the pop-up window is presented again showing the data that was entered. If the verification code and/or or Zip Code/Postal Code were entered incorrectly, re-enter the data and request the auth again. The pop-up will continue to come up until the data entered is correct or the bad card is removed from the transaction.


SPEAKING THEIR LINGO

When speaking to your bank or credit card processor, it is good to be able to speak in their terms. The following are the official terms for the security data discussed above:

AVS = Address Verification using the billing zip code
CVV/CVV2/CVC2/CID = The 3 or 4 character security code printed on the card