If a customer chooses to save their credit card details when they book an order on the web store we cannot use that card to process new telephone orders unless the customer provides the CV2 code.

The way around this is to take an old order that has processed and copy that order and then modify the goods and quantities and it will go through.

Is this a security problem or is it allowed under the rules. We inadvertently duplicated a customer order (save as) and sent him the goods twice and charged his card twice. Now the customer wants to know how we have managed to charge his card twice since he only gave us the number on his card once and we did not make a note of his CV2.