Mobile Industry Review - Latest Comments in Paying for parking with Verrus ain’t that easy

Re: Paying for parking with Verrus ain’t that easy

swing — Fri, 17 Oct 2008 04:27:25 -0000

Of course, if Verrus / First Capital Connect never store the CV2 (ie they delete the SMS once processed) then they might still be PCI compliant even though the user's details are still at risk by being stored by other parties along the transport path.

Reading back, it would appear the system in Lincoln allows you to change your credit card details by text; the thought of my credit card number being stored in text messages worries me slightly more!

Re: Paying for parking with Verrus ain’t that easy

smstextnews — Fri, 17 Oct 2008 04:22:10 -0000

Sure thing Ben -- let's have a chat!

Re: Paying for parking with Verrus ain’t that easy

Ben Whitaker — Thu, 16 Oct 2008 05:24:17 -0000

sending your credit card's Security Code (CV2) over SMS - I'm not sure that's such a good idea....

Gartner are on record saying SMS is not appropriate for financial transactions, and a system cannot be PCI DSS compliant (payment card industry data security standard) if the CV2 number is ever stored anywhere, and I'm sure that the SMS can be stored in any number of databases and server logs along the transport path?

Re: Paying for parking with Verrus ain’t that easy

Ben Whitaker — Thu, 16 Oct 2008 05:21:10 -0000

Hi Ewan,
we built an application to do exactly this straight from most common mobiles.

In trials 95% of users (just like you suggest in your post) preferred the mobile application to IVR systems, as they were able to do the whole sign-up off-line on their phone, checking what they were doing visually, then it did the whole sign-up, pay and park with a single encrypted SMS message (or a tiny bit of mobile data).

Screenshots on masabi.com, but we'd love to show you if you've got time to pop down to see us on the South Bank?

Re: Paying for parking with Verrus ain’t that easy

swing — Thu, 16 Oct 2008 05:11:53 -0000

Possibly some nice inconsistencies over the rail network then; First Capital Connect's parking ("This technology is powered by Verrus") states "Please note first time users must register by phone before they can use the pay by text service."

Once signed up, you send <LOCATION> <DURATION> and the 3 digit security number from your credit card to pay. No ability to change car details either.

Also, they charge 30p extra per transaction (despite increasing the parking charges when they originally bought in the service), and charge 10p per text for reminders, confirmation of parking, and receipts.

Re: Paying for parking with Verrus ain’t that easy

smstextnews — Wed, 15 Oct 2008 17:00:24 -0000

Gotcha

Re: Paying for parking with Verrus ain’t that easy

rjlawson — Wed, 15 Oct 2008 16:52:10 -0000

They send you text explaining the syntax ie: "Send LOCATION DURATION eg 7002 3. Add VRN to change car eg 7002 1 ABC123. To extend send DURATION only. Details at verrus.com". If you haven't already registered, I think you can do it via text - it certainly lets you change your card if it expires (or they decide to stop taking Amex, like they did earlier in the year).

Re: Paying for parking with Verrus ain’t that easy

smstextnews — Wed, 15 Oct 2008 16:21:21 -0000

What happens when you text 'help'? Does someone call?

Re: Paying for parking with Verrus ain’t that easy

rjlawson — Wed, 15 Oct 2008 14:45:53 -0000

I use this for parking in Lincoln, just text HELP to 07950 080201. No messing around with IVRs or paying 0870 numbers.