Process a card-present refund under PCI controls

Reinforce the PCI DSS refund order from payments training. The original auth is located before any credit is issued, and PAN is never written down.

1. Authenticate the cardholder.
2. Match the original receipt.
3. Locate the original authorization in the terminal or POS.
4. Initiate a refund to the same tender.
5. Do not issue cash unless policy allows.
6. Keep the full PAN off paper, chat, and email.
7. Print or email only the masked receipt.
8. Have a second person review refunds over the store threshold.
9. Store the signed refund slip in the secure packet.