Forum Moderators: buckworks
I use trust seals from one particular company and they have proven to me without a doubt that trust seals work. As visitors come to my site one can see the seals and the next one can't.
Here are the results for the active split test from the last 10 days.
Status, Views, Sales, Percentage, Increase
Seals off, 775, 19, 2.45%
Seals on, 776, 37, 4.77%, 94%
Anyway, those of you who have said it's not worth it may want to reconsider. I suggest that you try testing various seals on your site. And, why not test them against each other? I know they are not cheap, but I know without a doubt that they are worth it.
Hope this helps...
Regards,
Reuben
[edited by: lorax at 9:42 pm (utc) on Nov. 12, 2007]
[edit reason] removed company name [/edit]
I declined.
I agree with Trinorthlighting... it does make it more tempting for hackers.
And since this was a "first post" whos to say that you aren't working for one of those companies.
Yes we're a tough crowd... we've all been scamed at one time or another by marketing schemes.
I'd like to see real statistical data from multiple sites.
I'd like to see one of the senior members of the forum be given a seal for a 30 day trial period and give us all updates to the success or failure.
That would impress me.
"Harrington said the company had installed "hacker safe" software before the breach, but the system was compromised anyway."
Whatever happened to the scrutiny of the card services themselves when simply having your card services logo meant you were trusted? oh well.. As long as there is money to be made in fraud companies will do whatever they can to leverage that into a market.
Money could be better spent elsewhere!
I tell my customers that I don't store there credit card number next to a lock icon, I think these seals are a bit of a marketing scam. Hacker Safe is just a red rag to a bull anyway. My message is also aimed at the hackers too, I am saying don't bother to hack me, theres nothing interesting here anyway.
Anyone who stores credit card numbers will be hacked at some point. Aren't there laws against storing all the data anyway? Its especially since the company only found out about the breach because 2 of their customers called.
Not entirely true... by the same logic simply being on the internet means you will be hacked. An attacker who is good at what he/she does will not need to find what is stored in the DB already when they could just as easily intercept it or modify the code to do so. Just because you aren't saving it doesn't mean it isn't passing through something that has been compromised. Thats just part of doing business on the internet.
As for storing the information - there is a lot of advantages and the biggest one is being able to process orders in batches or do an auth and then bill when shipped. It seems more respectable to the clients that should anything arise you wouldn't have to incur a refund but better manage your billing process to begin with.
With stored data - at least short term i can adjust shipping, have people modify orders, validate addresses and manually process or scrub orders and fix anything that may need to be fixed.
Storing the data has its risks but hopefully you have the controls in place to manage that risk and that is what PCI compliance and Hackersafe is all about. I surely hope you aren't implying there is no value in the service or understanding what compliance means but on the flipside i hardly see it is a method to decrease cart abandonment and and increase ROI either.
I use the PCI scanning to remain compliant and to understand the security controls as required and by sticking to those controls you lower your risk. Its not about being hack proof but doing everything you can to be hack safe and the "hacker safe" tool set is an automated scan to help bring awareness to your PCI compliance. (but they like to sell it as a sales increase tool)
The only difference I could say was that it made the site look more professional, just as if you saw a new gadget product with all these certifications proudly placed under it like "CE, roHos certified, ISO 9001 etc". I bet you don't think much of them but you know it cost at least $50,000 to be cert ready for each of these off-line gadgets. I have a friend who manufactures stuff and thats what he said..
The price I was quoted was extremely high and I quickly said no thanks. After that the sales person kept calling me with price reductions. His last offer was less than 10% of the original quote.
At that point I told him where to go as his first price was so over inflated.
The only way anyone can know with any certainty that trust seals work or not for their particular site is to test it out themselves.
Is a few hundred dollars not worth the test for your business if it can improve sales even marginally? You can write it off as a business expense....at least in the US.
I've tried seals on 3 of my sites, 2 site's conversions actually went down and one improved overall conversion by about 11%. What works for one site/market may not work in another but one thing I have learned when it comes to testing is to never let my personal assumptions prevent me from testing something because I'm wrong A LOT when it comes to what I think will win in a test and what actually does.
In the past, I've had a site that the uglier/more amateur I made it the better it performed!
Here are the results for my trust seal active split test as of Friday evening 12/07/07.
Status, Views, Sales, Percentage, Increase
seals off, 3076 89 2.89%
seals on, 3076 133 4.32% 49.4%
The other site I added the seals to is currently showing a 41.5% increase.
Regards,
Reuben
They only report how many complaints and if they were resolved or responded to without saying where the fault lies or the issue. Many customers assume the worst when no details are given. Its also an invitation to blackmail for the more vindictive customers and an invitation for a business to be unfairly advantageous towards such customers.
A couple complaints even filed no matter the reason and you have lost your hefty subscription fee and the seal works against you so you have to remove the logo altogether.
I have actually dealt with the BBB several times and they have never asked me to become a member. They have been helpful in dealing with customers who are basically nutz. It hadn't occurred to me that having their seal up might prompt complaints to them, though. That's a good point.
The cost is more than 'not cheap', the cost is exorbitant for what it does. It's extortion if you ask me. A third part 'claims' you are safe by doing a few tests and IT guy worth his salt could do. Then this third party charges an arm and a leg for their 'blessing'.
Also their stats are not only misleading, they are almost criminal. In our testing, we found no significant increase in sales, and no where NEAR worth the expense of the cefiticate. We also had an issue with one of these sites names (can't say it here) but it had the word 'hacker' in it. That's a word we don't allow on our site. Out of site out of mind is our philosophy.
Even Verisign is not what it used to be. Now we find customer accept a wide range of security certificates. Verisign is still gouging for their so called 'service' but more and more they are losing people. They will lose our company next year which will include dozens of sites because frankly they charge too much.
That's my 2 cents.
Reading your post I got the uncomfortable feeling that you work for one of these 'trust' seals and are running into opposition.
Could it be this part:
That is exactly why I went looking for another company.
[edit reason] removed company name [/edit]
Not saying you are, just saying it came across like that to me.hmmmm, it came across like that to me too :)
reuben, if trust seals had such a benefit, why have I lost trust in this thread? :)