To not want to send card details by post

[notanothernamechange24]

Trying to organise a replacement passport for my pony. When contacting the organisation that provides them I discovered that the only method of payment they accept is by filling out their form which includes taking debit/credit card details.
AIBU to think this is a really risky thing to do? Or am I being silly? It includes all details including the 3 digit code from the back. I don’t want to send my card details this way but I do need the passport imminently as I need to move the pony.
I have tried to get in contact with them but so far no response.
This is definitely a legit organisation.

That does sound a bit risky but I don't have any knowledge of the horse passport world, is there some kind of specialist group you could ask on, someone might have found an alternative method with the provider

That sounds risky especially with them wanting the card code, but if it's how they do it what else can you do ? I mean they really need to update their system

just send without the 3 numbers on the back

can you not email the form to them?

Send it special delivery next day. The chances are it will arrive without issue but if it doesn’t you will know about it straight away and will be able to cancel your card.

Can you try filling in the application with the card no and no pin no and a cover letter to have them phone you when processing the payment?

That way you can at least know the pin is not held in some open filing cabinet in an empty office.

They are in breach of data protection rules as they need a bank account themselves to have a credit/debit payment processed so the asking for and collecting the card pin is excessive.

And I suspect that they would have problems with their bank/provider as the only way I can see that a card pin is needed by the seller interface is if someone is using a physical card machine( or interface version) and typing the details in by hand as if they are the customer.

If they are saying their UK (EU) bank were allowed to provide a pin imput service for the seller to use the banks would not be advertising not to tell your pin to anyone. That type of data processing creates a massive data breach risk so will be against the banks terms of service.

And you can usually change your pin by ordering a new card under the not stolen option so your old one works untill you use the new one.

Am I misunderstanding, where does it say she has to send the PIN, no one would do that.

Alo posters suggesting email and special delivery, surely the problem isn't how the information gets there it's that once it's gone you have no idea who will have access to it.

How does email or a signed for letter remove the risk?

That’s a ridiculously insecure way for a ‘legit’ company to operate. Is there really no way to provide the information by phone?
or (not ideal but better than all on one form) in more than one letter?

PP used PIN where I assumed she meant CVC.

Formally (search for PCI and DSS on Google) sellers are not meant to keep a record of the CVC, so ideally you'd give it over the phone, but the person taking the call may not be able to do the debit live there and then, so they might write it on a scrap of paper anyway.

Personally I wouldn't worry too much about this situation. It sounds like a small business that cares more about the stuff it delivers than having a fancy online presence. But I do wonder why they can't take a BACS transfer if they're in the UK, which would also save them card processing charges.

AIBU to think this is a really risky thing to do? Or am I being silly? It includes all details including the 3 digit code from the back. I don’t want to send my card details this way but I do need the passport imminently as I need to move the pony.

Oooo☺️☺️☺️

Thank you😀

....total brain melt in progress🤪🤣 i seen "code from the back" and read "pin number"

They can do a card holder process with the card number and card code.

@samarrange tbf to B1indEye my brain partly merged both the pin and code ☺️