Can you please explain the rules around pre-authorization and the storage of sensitive data (also refereed to as Track II, CVV2 etc)?
Card Schemes have never permitted the storage of sensitive data (track data and/or CVV2) post-authorization. In addition, since 2007, Visa has focused through communication and compliance activity, the removal of this data. Storage of this sensitive data can heavily increase the threat of Card Scheme imposed fines plus also the threat of serious fraud. If you have someone at WorldPay managing the updates on your progress to the Card Schemes, you must make them aware if you suspect that your systems are storing sensitive data immediately.