Storing Debit Card Information for Online Use

Question

If I need to store Debit Card information, what fields will have to be stored?

For example, with Credit Cards the fields are

• Card Number
• Expiration month/year
• Cardholder's Name
• Zip (sometimes)
• CCV (sometimes)

What about for Debit Cards? Do I need to store a PIN?

Answer 1

PIN-based debit cards are a non-factor for online purchasing. Why? Because they require accepting a PIN number *through an encrypted PIN pad (or other encrypted device). You cannot do that with only purchasing, only with face-to-face purchasing.

And, with face-to-face purchases you cannot store PIN numbers.

Answer 2

If you are storing CCV, then you are BIG TIME in violation of PCI-DSS. Never store the CVV, your client will be fined for doing so.