When ordering or paying online, beware card security

[shugie]

There are also issues relating to the secure storage of customer data, full credit card details on an email in someone's inbox is not going to meet those requirements.

Worldpay used to be an alternative to Paypal, and Sage users can avail themselves of the Sage payments service, although I'd be astounded if that was cheap enough for very few transactions.

If they can't do any better, ringing the customer back to take the card details over the phone would be better than email.

[safetyfirst]

Worldpay and sage pay still require a host merchant account which are hard to come by for RFD's.

Taking card payments online without PCIDSS compliant security in place can land you a hefty fine.

[TattooedGun]

Worldpay and sage pay still require a host merchant account which are hard to come by for RFD's.

Taking card payments online without PCIDSS compliant security in place can land you a hefty fine.

If an RFD has a PDQ, presumably they have a merchant account associated with it.

[daman]

If you have a friendly web monkey ask them to add Stripe as a payment mechanism - probably the simplest and quickest way.

Less than half a days work in many cases I've seen.

[safetyfirst]

Worldpay and sage pay still require a host merchant account which are hard to come by for RFD's.

Taking card payments online without PCIDSS compliant security in place can land you a hefty fine.

If an RFD has a PDQ, presumably they have a merchant account associated with it.

yes.

[bofor]

I am about to buy something from "Mossberg, in the USA" and they are not set up for UK individuals sales but promised to sell me an item if I send credit card details by email.
I have the full address as per their website and the international sales team contact.

In this instance would you do it ?

[TattooedGun]

I am about to buy something from "Mossberg, in the USA" and they are not set up for UK individuals sales but promised to sell me an item if I send credit card details by email.
I have the full address as per their website and the international sales team contact.

In this instance would you do it ?

It's not about whether or not you trust the intended recipeint, in this case the Mossberg retailer. Emails are inherently unsecure. Generally speaking, unless either someone is listening in to all of your or their communications, then the actual transfer of information should be secure, however if it's emaield it could then sit in their inbox indefinitely, and any subsequent breach in their email system could lead to someone unscrupulous getting your card details.

It's mostly uncommon, but it does happen on a massive scale.

You'd be better off sending your info in email and calling them or getting them to call you so they process it whilst you're on the phone, or write it down physically rather than enter it into their computer.

Statistically speaking, it's pretty unlikely anything would happen, but why risk it.

[Rab]

In this instance would you do it ?

I'd send them an email asking if it would be okay to complete the transaction over the phone that way the have your email address. Explain that you're not really happy about emailing your card details. I don't think I'd want to email card details but then that's just me.