Hello all,

I'm the one in which Tbyte quoted to start the thread entitled, "NEW- What to do when SP responds to your chargeback!" .

I've received some Private Messages (PM's) from some of you asking for help. So, I have prepared an email that corresponds to my response to Stormpay's contestment of my first chargeback.

I urge all of you to get it as I think that you will find it very useful. It includes a pdf file that I sent to my Dispute Analyst regarding SP's past and recent history (all the bad things you've come to know about). This is not to malign stormpay (don't take that stance, truth speaks for itself), but their credibility is very relevant to your case. This will help to get your Dispute Analyst on your side.

If you want the email, just PM me and leave me your email address and I'll send it to you.

We all know there are Stormpay posers ("plants") on various forums, please do not share any of the dispute information that I share with you by posting it on an open forum, or by forwarding it to others via email. If anyone asks you for it just PM me (or have them PM me) and I'll send it directly to them. You don't want to jeopardize yours and everyone elses dispute by giving SP advance notice on what's coming their way.

Allen

I think you mean this

http://www.talkgold.com/forum/r87155-.html

Hi Helper1,

Do u think CISP complaince can be a weapon to fight Scumpay.


CISP, SDP, PCI Compliance required for every business…

CISP LockSDP /CISP / PCI is a standard that many businesses must adhere to to help protect consumer data. CISP (Cardholder Information Security Program) is a Visa security standard that is designed to help protect all levels of business from fraud and loss of data. MasterCard has a similar program called SDP (Site Data Protection). CISP / PCI is a standard that is designed to help secure and protect sensitive data specifically relating to the payment card industry. CISP compliance extends beyond online businesses and applies to Retail (brick-and-mortar), and Moto (keyed entry) businesses in addition to ecommerce. CISP compliance is outlined here rather than the SDP program because it is more restrictive and better organized.

PCI / CISP is designed to be implemented by any businesses that accepts of facilitates credit card transactions or the handling of sensitive credit card and user information. Businesses that do not store or handle credit card information, are not subject to CISP regulations.

Visa: Note that these Payment Card Industry (PCI) Data Security Requirements apply to all Members, merchants, and service providers that store, process or transmit card-holder data. Additionally, these security requirements apply to all “system components” which is defined as any network component, server, or application included in, or connected to, the card-holder data environment. Network components, include, but are not limited to, firewalls, switches, routers, wireless access points, network appliances, and other security appliances. Servers include, but are not limited to, web, database, authentication, DNS, mail, proxy, and NTP. Applications include all purchased and custom applications, including internal and external (web) applications.

PCI / CISP Basic Requirements:

1. Install and maintain a firewall configuration to protect data.
2. Do not use vendor-supplied defaults for system passwords and other security parameters.
3. Protect stored data.
4. Encrypt transmission of card-holder data and sensitive information across public networks.
5. Use and regularly update anti-virus software.
6. Develop and maintain secure systems and applications.
7. Restrict access to data by business need-to-know.
8. Assign a unique ID to each person with computer access.
9. Restrict physical access to card-holder data.
10. Track and monitor all access to network resources and card-holder data.
11. Regularly test security systems and processes.
12. Maintain a policy that addresses information security.

If you read the full CISP manual, you will find that each requirement is broken into several sub-requirements. CISP attempts to leave no stone unturned and no margin for error.

How To Implement PCI / CISP:
Most of the CISP requirements are simple common sense. CISP is heavily geared toward websites and other easily accessible systems where there is a huge potential for a loss of sensitive data. Many of the technical issues are very complex and the requirements are very strict. I have helped to secure several web servers for CISP compliance, and to say that the requirements are strict is a gross understatement. Not only are there basic firewall and network infrastructure requirements, but there are hundreds of update, software versions, and patch requirements that must be met for a web server to be CISP compliant. A single missing software version update, or patch, or a single compromised web port, will cause a server to fail CISP compliance.

To start on the road to compliance look at the Visa PCI / CISP Pdf linked at the bottom of this document. All of the requirements are listed to be CISP compliant. After you meet all of the requirements, you will need to get with a company that certifies businesses for CISP compliance. They will normally perform a series of checks on your server, and give you the results of their inspection. The checks that they perform are essentially an attack on your web server, and they will try to exploit any known vulnerability. They also check the software, and current versions of several applications on the server making sure they are all up to the current version. You can also start by doing a scan and fix whatever areas are not up to standard.

A Warning: Make sure your web host knows that you are going to be doing these tests, or they may mistake them for a true attack.

CISP non-compliance and loss of data penalties:
The fines for not complying with CISP are low, up until there is an actual loss of data. Visa and MasterCard can shut down or fine non-complying merchants, but due to the current lack of organization and the impossibility to monitor every business and organization, larger companies are the only ones who are currently monitored. It is the responsibility of a business to ensure that they take the steps to become CISP compliant. If a business is not CISP compliant and a loss of data occurs, there is a $500,000 fine from Visa alone for loosing data and an additional $100,000 fine just for not being CISP compliant. $600,000 for not-becoming CISP compliant and loosing data because of it, and this applies for any business that accepts credit or debit cards. A single credit card number that is lost and is traced back to a business is considered a loss of data.

Apart from the monetary penalties, it never looks good when a business looses data. News agencies jump on these stories, and instantly make a business look like a criminal organization. I’m sick of reading about them, and I’m sure you are as well, so protect your data.

From what I have heard VISA and Mastercard has already "sanctioned" Stormpay, which I'm told reduces SP's ability to defend the disputes.

"loss of data" is not the issue. And, with respect to monetary disputes that are being undertaken now, it's important that one does not throw anything and everything at your Dispute Analyst--a shotgun approach. Stick on the directly related "specifics" when communicating with your Dispute Analyst.

Always remember the basis for your dispute, and, at all times, keep that basis foremost in the mind of the Dispute Analyst. Don't get lost in the details. Here is the concise basis of your dispute (not necessarily in this order):

1) "Undeliverable Services": Failure to deliver service agreed upon.

Example: You "authorized": $1 to SP - SP to 3rd party (same $1) - 3rd party to SP (same $1) (It was at this point where SP interfered with the return of, and intercepted that same $1). -SP to you.

2) Money Transmitter License: Was conducting business in your state (country?) illegally, and in violation of their 2003 Cease & Desist Order.

3) "Unauthorized Use": Applicable Laws i.e. Regulation E: Interfered and intercepted your money.

4) Deceptive Practice: Stormpay & NetIBA (and, may be considered fraud).

For whatever reason you give to the Dispute Analyst, s/he has to in turn, match that reason up to a certain code. One of the four reasons given above should match one of her/his codes.

When or if your “Provisional Credit” is taken back, say to the Dispute Analyst, “Doesn’t any of your codes match any of the four basis for my dispute?

GREAT NEWS!!! THEN.....I'LL FIGHT TILL MY LAST BREATH!!

my email
mambra02@yahoo.com

Hello helper1,

I want that mail too. My friends here need your help!

I PM-ed you my email. Please let me know if it is sent well.

Thank you.

Hello Helper1

i would really appreciate a copy of your email to Stormpay.I do not have enough posts to PM you so if you could email it to me i would be grateful.

thanking you for your assistance
housewife
zhousewife@hotmail.com

pls email me as well...thank

simonseah@gmail.com

Sent it out.

Take care!

Pls send any useful info to me chinjoo@fastmail.fm. Thx!

I am preparing my case for 2nd chargeback!

How many posts do we need to be able to PM.
Helper1, I can't PM now.
So this is my email: tuan325@yahoo.com
Can I have those email that fight against SP.
Thanks!

Hi Helper
I am unable to PM or email you as not enough posts made but would be grateful of any further info in the fight against Stormpay
Thank you My email is dcartw9505@aol.com

Hey Helper, could you send me the info to:

mlb5000@psu.edu

Thanks,
Matt

Please send me the info too! Cant PM
avari_savannahs@alltel.net

Thank's a lot!!

Those files are great references!
My friends here will show them to their lawyers to make a suitable one with law here.
Thank's!!

So SP did contest afterall....Let me guess could be huge amount right?

still waiting on those documents helper....

mlb5000@psu.edu

Received the files from Helper1. I'm at work but will definitely review them when I get home. Thanks for the info. Let's put the last nail in the coffin for Stormpay.

Sent it out to you, Cloudy.

Take care!



Sent it out to you, Harry325.

Take care!



Sent it out to you, bjorn123.

Take care!



Sent it out to you, "Matt".

Take care!



Sent it out to you, Cat*tail.

Take care!

BTW, you all can remove your email addresses now.

Thanks Helper1!

Also, everyone go HERE: http://www.talkgold.com/forum/r79148-.html and call the number for your state to see if Stormpay is licensed to "do business" there. I just called the number for my state, Pennsylvania, and they aren't registered in this state. So I'm pretty sure that gives me a solid case.

Everyone post your state here and whether or not Stormpay is registered as a money transmitter in your state.


Matt

I've sent in my package to BOA CC for a $2,000 chargeback. I included all of my own saved Scampay files and incorporated all of Helper1's 5-rebuttal information. For my own case, Scampay took back a pending $3,800 withdrawal and I had the saved files for backup. I also made very clear that I had been a BOA customer for 11 years, with an outstanding credit history, and that if IN ANY EVENT I was liable for these charges that I would cancel all BOA accounts and do business elsewhere. I, too, requested a second chargeback and will go the distance here. F k Scampay. Fight these dirty b tards.

Yes I agree too. If CC dispute failed on 2nd attempt I'll not use CC for the rest of my life

Someone please help? My email is adeline1610@yahoo.com, supporting documents anyone?

Please send me a help document to fight SP too. I'm preparing all supporting documents for my dispute and don't want give SP chance to fight back. pleaaaseeee.....

my email is morikawa.yoko@gmail.com

I just sent you guyz Helper1's email. You can ask Helper1 directly.

Hi guys.

Please send the file here too?

SP has reclaimed almost $7,000.

If you need to see my work, here's a sample:

http://future4me.com/forum/viewtopic.php?p=1862#1862


i'm not a spy.

: )

bspen@ameritech.net

They for damn sure aren't licensed in TEXAS...and these cowboys down here don't play...just look at EMO...LMAO..

Anyone still need helper1's email?

i has read this pdf and didn't understand,
maybe my english is not very good

http://tlennonfor12dailypro.com/media/12da...MinuteOrder.pdf

did any one can tell what this pdf means

Helper1,

Please email me the information. I dont have enough post to use PM.
Really appreciate your help on this.



jza80nrx7@yahoo.com

Butch,

Sent it to your other email address, did you get the docs?



It reinstates your legal rights to proceed with ACH and/or Credit Card disputes.

(means, "chargeback okay"! )

Got it Helper.

Nice work.

: )

Helper1, thank you very much for the support docs!

Thanks Helper1 I got the documents, Question is since I only have 1 more til I have to send it
in should I really fax that many pages?

To Everyone who's gotten Helpers docs:
What have you done? (in reference to the question above)

Helper 1 - would you please email me anything that might help me on my second chargeback? I must submit by April 17th, and I want this one to stick! Sorry - I could not PM. Joined today to try to get additional help. thanks!

Hi Helper1

I have posted on another thread so as you can see this as I would like the pdf email also, to prepare my reply
please email to

hitnov9@googlemail.com

thanks in advance !

Hi Helper1,

Please send me a copy too..thanks a lot!

rhodeisland_tuna@yahoo.com

Pls sent to angel_zen@hotmail.com.
thks alot for your help

Please send the email to mikeba@infowest.com

Thanks for doing this helper1, it would have taken me hours (as I'm sure it took you hours) to compile this stuff. Glad I found this post first!

Please, anyone who has these helper1 documents send to me in a PM.




I haven't seen helper1 here over 24hrs. since I request.

Trying to save over 2K

Hi Helper1. Really appreciate if you can send me the documents to file my claims. Kindly send to tlcy@yahoo.com Thanks a million!!!

PM me I will send to you. You know I can't PM you

May be you can go here..... Helper1 always there..


http://talkgold.com/forum/showthread.php?t=87155&page=16

Thanks for the help and thanks to Bilboca for the PM

Please send me a document to: handi84@hotmail.com
I am trying to do 2nd chargeback for my $1500.....

Helper

Please send me the documents, my email address is tonyw888@gmail.com

Thanks,

TonyW

Helper, can you send the file to the following email?

dlvicens@gmail.com

Thanks.

David

Okay, I think I got everybody. I just sent the docs out to the following:

meallen2@xxxx
dlvicens@xxxx
tonyw888@xxxx
dmc99999@xxxx
hitnov9@xxxx
rhodeisland_tuna@xxxx
mikeba@xxxx
tlcy@xxxx

You guys can remove your email addresses now.

The following two people, check your email inbox, I just sent you an email message;

hkartadi and zen_ng

Student, I sent you the docs to your .safe-mail.net address, did you receive it?




Mersadise (and everyone else),

I know that most of the Dispute Analysts are used to having faxes sent to them--that's how they are accustomed to doing it. That's normally how merchants like Stormpay sends their stuff too.

But I'll tell 'ya, I emailed mine in. I just told my analyst that I had it all prepared in a pdf and MS Word document. She was happy to get it fast. It's so much easier to push a button compared to faxing 45+ documents.

So, just ask your Dispute Analyst. If s/he says that it must be faxed, well, you-gotta-do-what-you-gotta-do.

But, let me stress, it is highly important that they receive all the docs I sent you, for instance, the pdf, "Stormpay.com Credibility Issue". You may not understand the importance of everything as a whole, but just trust me--your Dispute Analyst needs to have all the docs.

Take Care!

Hello helper1 can send me the document? My email is

umengtan@yahoo.com .

Thanks.

On its way....

Take care.