Saturday, May 2, 2009

Credit Card For Online Transaction, Is it Safe?

With tremendous popularity of the internet, more and more people now make their first online transaction. And when talking about online transaction, the most convenience tools for such transaction is credit card. Using credit card give both seller and buyer immediate settlement, the money is immediately changing hand, no need to wait clearing time, no need to wait until the next business day, etc. But how about the security of the credit card? Is it safe to make online transaction with credit card ?

A Bit of Guideline

Before we answer that question, let us explorer first the common practical security guideline for online transaction. To help you have more confidence about transacting online with credit card, here are some steps that you can consider:
If possible, only deal with the biggest name of online transaction merchant: Ebay, Amazon, PayPal, ClickBank, etc. Not that they cannot be broken, but if there is something wrong and you make a claim, at least they have more resources and tools to protect and find out what’s really happen.
Check the secure certificate. For every secure web page, there will be what so called “secure certificate” this is basically a independent third party confirmation that the website is really the one they claim they are. For example: if the logo say “Ebay”, but the secure certificate did not confirm that it is Ebay, then better stay away from it. The secure certificate is really strict. Some time your browser will complain that the secure certificate has a problem, then you need to check the content of the certificate. If it’s only a mismatch of sub-domain, for example www.shoponline.com and secure.shoponline.com, it’s not a big deal. But if the certificate mentioning different company name, you should seek explanation or just bugger off.
Transact only on secure web page. You need to make sure that on the page that you are going to enter your credit card detail you see “https and padlock” on your browser. “https” is “secure hyper text protocol”, this is the one which makes sure that the data transmission will be encrypted. the padlock is the visual confirmation that the connection is secured.

After the transaction, sometimes the shop offer to email the receipt to you. You need to make sure that the ceredit card detail will be obscured, if not, then don’t do this as you don’t know how they are going to email your receipt. What you don’t want is they will reveal the whole credit card detail on email (see scenario two above) It’s better just print it out or screen capture your monitor.

Surprisingly, It’s Up To You

Money for Online Transaction

Yes, the answer whether is it safe or not to transact online is: up to you. You are the one who make any online credit card transaction as safe as it can get or as risky as you make it. In other word, if you don’t what are you doing, you are the one jeopardize the security of your credit card. Want example ?

For example: let say you buy new digital camera online with online shop that you never deal with before. And you want to pay with credit card. The shop even provide you with secure webpage to do this transaction. So up to now, everything is okay. Now thinking twice, you’re wondering is it safe to do this transaction as you never deal with this shop:

  • Scenario one: You decide to call the phone, talk to real people and give the credit card over the phone
  • Scenario two: You decide to call the phone, talk to real people and give the credit card via email
  • Scenario three: You proceed with the web interface and conclude the transaction without talking to anybody
Which one of the three scenario is the safest and as secure as you can get ?

If you said scenario three is the safest, then you are correct. Let see why the other scenarios is a disaster to your credit card security:

  • When you talk to the a person, do you know where exactly she/he record your credit card detail. The chances are: on a piece of paper the closest that she/he can get. Why? The shop is ready for the online transaction (hence the secure interface), but not necessarily ready and have establish procedure to handle over the phone transaction. At least the one you talk to might not have been fully trained to handle phone data. So, if it’s on a piece of paper then you are exposing your credit card security.
  • Unless you use what so called “Secure email” using email to give your credit card transaction is a Big NO. That’s actually equal to go to in the middle of shopping mall and scream out your credit card number there. If any of the hacker or bad people just listening to the data transmission, they will easily capture your credit card detail. Also, while sitting on the Internet Service Provider, the admin who maintain the server can easily get a peek on the email content. Why? Because email is using plain text to communicate. Cannot be more plain that that. Everybody cansee it.
  • Now, by using the secure interface you give yourself the maximum chance of security. Anybody listen to the data transmission will not be able to see the content as it’s encrypted. What do I mean by encrypted ? Simply put: a word “John” probably transmitted as “ae62bef4589ade56219bc785d5ad45deaba54d17304bd6dbacc2c3c5c62746ba”. That’s how difficult it is. It is not it can not be broken, but it will take considerable amount of effort (months of tens of computer continuously working on it) just to break that word. And the additional problem for the hacker, they don’t know really know where the word start. So it might capture the wrong data. (But with email, it would display as clear as it can get). Furthermore, with established merchant system, the chances are that your credit card number is transacted without even a person looking at it.

So, with above illustration, I hope I convince you that the safety of your credit card is really up to you.

Source:/financebyme.com

No comments:

Post a Comment