Collecting Credit Card info through manual payments

[HC3]

Good Afternoon,

I am building a website for a wholesaling company. They already have a website set up, but they are not actually doing transactions in the e-commerce store. They use authorize.net as a payment gateway and have customers choose to pay with the cc info they already have on file, or they somehow do a refund to capture the new cc info if they don't have it on file. Then they manually give this info to their payment processor. They do this so they can charge TBD shipping, since they have their own warehouse and shipping operation set up. I told them that this is very time consuming and wanted them to transfer over to one system, but they are scared to work with just one merchant (they are set in stone on this) and they want to keep the TBD shipping.

So, I was wondering if there is any way to keep this system intact with manual payments?

Would they be able to collect cc info through a manual payment setup and keep their traditional system? I saw that you can capture payment manually during the auth. period, but would this show all the cc info, so they could then manually enter it into their payment processor?

If this isn't possible, could they connect authorize.net to shopify to collect the cc info, but not actually charge the order through authorize.net, since that’s not their merchant? They just use authorize.net as a secure gateway like they are doing now. If they use authorize.net in this capacity, would they get charged the 3rd party processing fees, since they are technically not processing through them?

IF that's possible, could they have two payment options? The proposed authorize.net one, and a manual payment option that allows them to agree to use their existing cc info that they have on file?

They send out invoices and all other order details with their accounting software, so they only need the Shopify website to showcase their products and to place orders, not actually make transactions.

I am aware this is a very confusing situation and I tried to convince them to upgrade to one system, but they have their flow going and want to move slowly, a new website is a big step for them already. My goal to get them on Shopify to help them grow their online presence, hoping that once they are comfortable with it they will upgrade to one payment system like Shopify offers.

So, one more time: they want to be able to securely collect cc info in order to manually enter it into their payment processor outside of Shopify without getting 3rd party processing fees. They are currently using cc info for existing accounts, which is securely held in their accounting software and are somehow doing a refund to capture cc info for new customers or new cc info.

If I could get some help on this ASAP, that'd be great. I appreciate it.

[encajaclub]

Hi there! I have a similar issue! 
Would love to hear from a Shopify Expert or Shopify staff.

[Cigarstogo]

Same here we have a system outside of Shopify to process credit card payments. How can we capture CC details with the manual payment method.

[Quintyn454]

We would like to find out if this is possible too!!!!

[JPMParts]

Based on my research prior to launching our Shopify store, it is NOT possible to save credit card information through manual orders. Only the customer is allowed to store their payment information when you use Shopify payments only. In order to maintain PCI compliance, Shopify does not allow merchants to store customer credit card information to process manual orders.

[kjproweb]

The answer is, no. You cannot capture a buyer's credit card information using a [manual checkout] option for several reasons;

1. To do so would violate Shopify's Terms of Use policy; see paragraphs 11, 12 and 16 https://www.shopify.com/legal/terms-payments-us) 
2. Capturing card payment data using a manual checkout option is non-compliant with Payment Card Industry (PCI) security standards.

By the way, I'm a coder/developer by profession. I write API code for payment gateways, banks and merchant services providers for a living.  I'm also a Shopify approved partners.

HERE'S A FEW COMPLIANT SOLUTIONS

1. Depending on the number of products sold through the online store you may want to consider deactivating Shopify's payment capture page altogether. Then, simply add a custom payment capture form to each individual product page. To do this you can visit the App Store and take a look at form builder apps. Choose one that best fits your needs and add it to your store. Using this method gives you the ability to capture buyer credit card information in a manner that's PCI compliant and does NOT violate Shopify policy. 
2. Use an "alternative payment processor" instead of Shopify Payments. I know of three excellent payment processors that are friendly towards products and services considered high-risk. Plus, they integrate with Authorize.net, Pinwheel Payment Gateway and platforms. They charge $0.00 to get your account set up and the pricing is excellent. 

If you would like the contact details on the three payment processors whom I know can help you OR if you'd like more details on how to integrate a custom payment capture form into your website...send me a private email. I don't want to come across as selling anything. I'm simply providing a solution to your need and pointing you in the right direction.

Kevin James

KJ ProWeb | Ecommerce Expert & Shopify approved Partner

[sjseadogs]

Hello, what is your email? I would like to get some more details on how to integrate a custom payment capture form

[kjproweb]

HC3,

I carefully read your email and understand what your client would like to achieve. I will answer each question and explain the process.

Question: Would they be able to collect cc info through a manual payment setup and keep their traditional system?

Answer: Yes. It's possible to capture credit and debit card payment information manually during checkout. When a customer submits an order, their shipping details, contact information and sensitive credit card information is NOT transmitted in any email correspondence.

Furthermore, that credit card data is not exposed the unauthorized third parties. [It's stored safely and securely inside of the merchant's Shopify account portal and hidden inside of customized payment capture form software application.]

There are some excellent Shopify approved "form builders" in the App store.

Choose a form that allows you the freedom to create any type of form of you want. Over the last 4 to 5 years I've used several Custom Form Builders that do an outstanding job of keeping sensitive data away from unauthorized persons while also ensuring PCI compliance. 

END RESULT

1. A party payment gateway becomes unnecessary. It's an expense your customer will no longer need. You customer can get rid of Authorize.net and use a Virtual Terminal provided by their credit card processor.
2. Using this method gives your client the freedom to choose the fastest and most affordable shipping method.
3. Your customer no longer incurs a *double-dip expense*.  Anytime a payment gateway is used (regardless what's being sold) -- transaction fees must be paid to both Authorize.net (the payment gateway) and the payment processor has their own set of fees and costs.
4. Perhaps the most important benefit of all is -- the website owner truly owns and controls their client data. If Shopify were to delete your client's website OR if they choose to migrate to different platform in the future, you client can migrate their customer data to any platform of choice. 

Feel free to give me a call or send me a direct email. I will gladly share several demo websites so you can see this process in action. It's safe, PCI compliant and you (the web developer) can set it for a your client in a single day or two.

All the best,

Kevin James

KJ Proweb

Shopify Partner & eCommerce Expert

[KlaE]

Hey man. Will they accept Kratom online?

[kjproweb]

Hi KlaE,

The answer is yes. If you are located in the USA and shipping product into states where kratom is legal, there are 3 merchant services providers that will offer you with credit card processing. No problem.

Before you apply for credit card processing, be sure that your website is fully compliant with state and federal law. Also, familiarize yourself with Shopify Policy as it pertains to selling federally regulated products. -- Shopify reserves the right to terminate service to online sellers who fail to comply with their policies. 

https://help.shopify.com/en/manual/markets/markets-pro/prohibited-items

Quick Website Compliance Guidelines

• Configure your checkout page and shopping cart to block the purchase of kratom to states where the product is banned. 
• Kratom Ban (2024: Alabama, Arkansas, Indiana, Rhode Island, Vermont, and Wisconsin
• Age restriction (Use an Age Gate Verification App) : Arizona, Georgia, Illinois, Minnesota, Nevada, Oklahoma, Texas, and Utah ban sales to persons under 18 years of age. Colorado, Florida, Louisiana, Oregon, South Dakota, Tennessee, Virginia, and West Virginia ban sales to persons under 21.
• Directions for safe use (must be published on the product label): Texas, Nevada, Georgia, and Oklahoma require that kratom
  products include labels with directions for safe or suggested use. Texas also requires a recommended serving size.
  • Warnings: Utah and Virginia require that labels bear a warning that the product may be harmful; has not been evaluated by the FDA; and is not intended to diagnose, treat, cure, or prevent any disease. West Virginia requires the commissioner of agriculture to develop
  labeling standards, which must include warnings to keep the product out of reach of children and to consult a physician before use if pregnant or taking medication.
• Manufacturer or distributor information: Colorado (effective July 1, 2024), Georgia, and Oklahoma require that labels state the identity and address of the product’s manufacturer or distributor.
• Alkaloid content: Arizona, Georgia, Oklahoma, and Utah require that labels state the amount of mitragynine and 7- hydroxymitragynine in the product.

Good luck and all the best,

Kevin James

[MedMan]

How can I contact you regarding setting up my website to capture CC information and run the customer order transaction on a virtual terminal? 

[kjproweb]

Hi MedMan,

Feel free to give me telephone at (818) 850-1034 or simply send me your email address.

• I will email you a functional demo store allowing you to see how it works and test drive the functionality.

Out of respect for other Shopify partners/web developers, we should communicate via email or telephone instead of publishing details in this forum. The entire Shopify communicate would have access to sensitive information.

Kevin James | Shopify approved partner

kevin@kjproweb.com