Originally Posted by
LoneTree
Don't Visa/MC require explicit authorization from the terminal?
In theory, yes, but there is not any useful penalty for failure to comply, or so it seems. In any even there are a tiny number of protests so they could simply refund every protest and still make out extremely week on the deal.
In principle terminal certification and standards ought to protect consumers. In reality that does not always happen. The odd major international bank, a couple mentioned in this thread, do not maintain the regulatory/network releases up-to-date and often fail to provide for such issues as consumer notifications in language of card issue, which is not mandatory anyway. Thus one can have a notification in script that the consumer cannot recognise, for example, and still be technically in compliance. In DCC as in many other related topics YMMV.
It is too bad, isn't it, that nothing is really hard and fast in such issues?