Visa has released changes to how CVV2 (the 3 or 4 digits security code at the back of a credit card) can be collected and processed, effective Oct 13th 2018.
The full mandate is located here: https://www.visa.ca/dam/VCOM/regional/na/canada/security/security-docume...

This mean for Virtual Terminal merchants:

Walk-in / phone orders: merchants need to request the CVV2 from the customer and enter in the payment screen, but merchants cannot write it down. This means payment will have to be processed at the time the customer is present or on the phone.

Mail or fax order: merchants are exempt from requesting the CVV2. Merchant orders forms must not request CVV2 information.

If you have any questions regarding these changes, please send us an email at sis.support@ubc.ca