Implementation of Credit Card transaction

[Vikas Kapoor]

I have completed a registration module in which at the end I ask for credit card information and I don't know how should I implement it We ask credit card information like,

- Credit Card Type (We want to offer Master Card, Visa, Paypal)
- Credit Card Number
- Expiration Date (Month and Year)
(We don't ask for 3 digit security code).

I want to do something like,

1) Validate the credit card
2) If it's valid, deduct the money

How can I implement this? or What is the standard way of implementation?
Are APIs for Java in market for this?
Is it against the law to store credit card information?

[Ulf Dittmer]

You will need to get a merchant account with a bank, and sign up with a payment processing company. Googling for that will find many vendors. Each has its own API that you'll need to use. Paypal has its own API; check with them for details.

It's not against the law to store CC information.

[Vikas Kapoor]

...and sign up with a payment processing company

Is it possible to eliminate this step? Can we communicate directly with credit card company itself?

[Rusty Shackleford]

If you are going to store credit card information you had better properly secure it and test and monitor it constantly. If that data get stolen...

You are much better off using a service that handles the CC processing or has a proven API. It is cheaper, easier, and generally more secure.

Don't roll your own.

[Vikas Kapoor]

Thanks Rusty and Ulf. Now my wheel has started rollling. I will surely come back with more questions.