[raymor]

This shouldn't affect rebills at all, nor cross sells which are done properly.
The cvv2 code cannot be used for rebills because it's not allowed to be
stored anywhere. Actually that's the whole point of the security code in
the first place - if you present that code with the transaction, that proves
that the card is there because unlike the card number, the cvv2 cannot
be stolen from any database. It can't be stolen because it can't be PUT
in you or your processor's database to begin with.

A merchant or processor may pay a little bit higher fee to Visa for rebills
for this reason. Whether or not you have the cvv2 is one consideration
for whether Visa charges the lower fee for "qualified" or the higher non-qualified
fee. Other factors include whether you have the billing address and if so
how much of it matches. For example some gas pumps ask for your zip code
when you pay by card.

With the new technology, the security code which be different each time, so
it would simply serve to enforce the existing rule against storing the cvv2 -
a stored one wouldn't be valid anyway. Rebills would just be processed the
same way the are supposed to be processed today - without the code.

Similarly with cross sells. If you could do the cross sell at the same time,
you could bundle them into one transaction. If not, you'd just process the
cross sell without the cvv2. We do both of these types of cross sells and
rebills with Strongbox, Throttlebox, and Clonebox. The Strongbox order
form let's you choose to add Throttlebox to your order at a discount,
or you can add it later, and Clonebox rebills like hosting does. If you
buy Strongbox and Throttlebox together we use your cvv2 for the combined
transaction. If you add Throttlebox later or get rebilled for Clonebox we
run it without the cvv2 and pay a higher fee.