Hostel wants my Credit Card security code via email, is this legit?
Why would a hostel I book through HostelWorld want my credit card's security code (on the back)?
Are they going to use this to charge their own deposit and essentially mess around with bookings instead of letting HostelWorld manage it?
They say the reservation won't be saved unless you give this information, that's pretty poor for a hostel to use a website like HostelWorld and simply 'disrespect' any booking made via it.
You will need to send on our email the security code (CVV/CVC) of the card you used when booking in order to fully secure your booking, failure to do so may result in you losing your reservation.
Best Answer
Giving out your security code via a non secure connection is a very bad idea. By doing this you essentially turn your bank account into a self-service account.
Storing the CVV code in any form is against the PCI DSS Requirements (Payment Card Industry Data Security Standard), and by sending it via email it will be stored on someones computer which might not be secure, has a key logger installed, has some unpatched bugs in the OS exploited by malware or is shared between multiple people. If it's a hostel then quite often they have other backpackers handling the reception part time, who are up and away after a few weeks. How do you know they are not taking a copy of the card details with them?
The CVV is your proof that you are in possession of the card, because no online dealer is allowed to store the CVV in any form. That's why all online dealers who get this right will ask you for your CVV number when you do another transaction with them, even if you clicked "store my payment details" before.
Without the security code all leaked credit card number lists on the internet are useless, because every time you want to make an transaction you will be asked for the CVV (except for recurring payments).
TL;DR: find another hostel, otherwise you are just giving out full access to your bank account.
Pictures about "Hostel wants my Credit Card security code via email, is this legit?"
Is it safe to give credit card security code?
Should You Share Your Security Code? Keep your credit card security code under wraps unless you are sure a legitimate business needs it \u2013 and only if you initiate a transaction. Never reveal the code to anyone who calls or emails you out of the blue and requests the information.Is it safe to give card details over email?
The message and the encryption key stay encrypted until they reach the sender. This reduces the risk of being intercepted by hackers. If you have secured email, the risk associated with sending your credit card number is fairly low. Most people have a regular, unsecured email account.Is it safe to give credit card number and expiry date and CVV?
If a thief has your credit card number, expiration date and CVV number, that is all the information the thief needs to make an online purchase. While it is generally safe to give your CVV number to trusted merchants, it's not always necessary. If you're using a card in person, the CVV code typically isn't required.Is entering CVV safe?
So when shopping online, it is safe to input your CVV \u2014 but you should stick to well-known, reputable companies and websites.How to find Credit Card Security Code?
More answers regarding hostel wants my Credit Card security code via email, is this legit?
Answer 2
There is no legitimate reason why the hostel should ask this. What is going on here is that charging the credit card without CVC code will incur more costs for the hostel. These costs could be lower if the hostel has a good record. Presumably the hostel has yet to prove that the way they conduct their business is secure enough for the credit card company they deal with to lower the costs for card not present transactions without CVC code.
Sources: Stack Exchange - This article follows the attribution requirements of Stack Exchange and is licensed under CC BY-SA 3.0.
Images: Dom J, Mikhail Nilov, Mikhail Nilov, Mikhail Nilov