Comment Comment by 16s They can't store the CVV2 either. Doing so, even encrypted, violates PCI-DSS. parent 16s 14 years ago