Good evening! We are current GiveCampus customers who are using their platform to host a student led dance marathon, where they are using personalized pages to do peer-to-peer fundraising.
We started getting really strange output files and so did a few tests, to discover it doesn't appear there is any validation happening between Stripe (the GC payment processor) and what the user is entering. So the student enters Aunt Sally as the "donor name" and that is being carried through on the payment form as the Card Name, and any zip code will work to process the gift.
Has anyone else has run into these issues? We have compliance concerns that because the name of the donor, the name on the card, and the basic zip code checks aren't happening, that we have issued tax receipts to people who are not the card holders/hard credit donor. My constituent team is catching the Aunt Sally ones (hopefully!) but we have found things like dog names and others random things being carried all the way through to processing, and it's very difficult to figure out after the fact who the actual donor is.
Thanks!
------------------------------
Aimee Fitzgerald
Assistant Vice President
Advancement Services
University of Louisville
aimee.fitzgerald@louisville.edu------------------------------