Page 2 of 2
Re: When ordering or paying online, beware card security
Posted: Mon Jan 25, 2016 4:19 pm
by shugie
There are also issues relating to the secure storage of customer data, full credit card details on an email in someone's inbox is not going to meet those requirements.
Worldpay used to be an alternative to Paypal, and Sage users can avail themselves of the Sage payments service, although I'd be astounded if that was cheap enough for very few transactions.
If they can't do any better, ringing the customer back to take the card details over the phone would be better than email.
Re: When ordering or paying online, beware card security
Posted: Mon Jan 25, 2016 5:49 pm
by safetyfirst
Worldpay and sage pay still require a host merchant account which are hard to come by for RFD's.
Taking card payments online without PCIDSS compliant security in place can land you a hefty fine.
Re: When ordering or paying online, beware card security
Posted: Tue Jan 26, 2016 11:42 am
by TattooedGun
safetyfirst wrote:Worldpay and sage pay still require a host merchant account which are hard to come by for RFD's.
Taking card payments online without PCIDSS compliant security in place can land you a hefty fine.
If an RFD has a PDQ, presumably they have a merchant account associated with it.
Re: When ordering or paying online, beware card security
Posted: Tue Jan 26, 2016 11:48 am
by daman
If you have a friendly web monkey ask them to add Stripe as a payment mechanism - probably the simplest and quickest way.
Less than half a days work in many cases I've seen.
Re: When ordering or paying online, beware card security
Posted: Tue Jan 26, 2016 1:29 pm
by safetyfirst
TattooedGun wrote:safetyfirst wrote:Worldpay and sage pay still require a host merchant account which are hard to come by for RFD's.
Taking card payments online without PCIDSS compliant security in place can land you a hefty fine.
If an RFD has a PDQ, presumably they have a merchant account associated with it.
yes.
Re: When ordering or paying online, beware card security
Posted: Thu Jan 28, 2016 9:28 pm
by bofor
I am about to buy something from "Mossberg, in the USA" and they are not set up for UK individuals sales but promised to sell me an item if I send credit card details by email.
I have the full address as per their website and the international sales team contact.
In this instance would you do it ?
Re: When ordering or paying online, beware card security
Posted: Thu Jan 28, 2016 11:18 pm
by TattooedGun
bofor wrote:I am about to buy something from "Mossberg, in the USA" and they are not set up for UK individuals sales but promised to sell me an item if I send credit card details by email.
I have the full address as per their website and the international sales team contact.
In this instance would you do it ?
It's not about whether or not you trust the intended recipeint, in this case the Mossberg retailer. Emails are inherently unsecure. Generally speaking, unless either someone is listening in to all of your or their communications, then the actual transfer of information should be secure, however if it's emaield it could then sit in their inbox indefinitely, and any subsequent breach in their email system could lead to someone unscrupulous getting your card details.
It's mostly uncommon, but it does happen on a massive scale.
You'd be better off sending your info in email and calling them or getting them to call you so they process it whilst you're on the phone, or write it down physically rather than enter it into their computer.
Statistically speaking, it's pretty unlikely anything would happen, but why risk it.
Re: When ordering or paying online, beware card security
Posted: Thu Jan 28, 2016 11:52 pm
by Rab
In this instance would you do it ?
I'd send them an email asking if it would be okay to complete the transaction over the phone that way the have your email address. Explain that you're not really happy about emailing your card details. I don't think I'd want to email card details but then that's just me.