I'm sure. And it's paypal. No cards are on file. These are literally credit cards that are stored in file folders (quite an air gap, huh?) and they are typed in

I'm sure. And it's paypal. No cards are on file. These are literally credit cards that are stored in file folders (quite an air gap, huh?) and they are typed in MANUALLY in the paypal interface. Nothing is stored with the processor for repeat transactions. This has been going on since the mid 90's and while using other processors as well as even (in another business) at a credit card processing machine where the cards were keyed into that. CVV is not relevant either.