Where to check if shopwebsites are secure?

[toplisek]

Where to check if shopwebsites are secure?

[bwnbwn]

There isn't a place and thank goodness for that. Why I say this well we had a customer do a charge for some stuff for her son. Her card was declined. I called her and told her to call her bank either her card had some funny stuff and the bank had put a stop on it, charging someing in the US needed a pre-authorized number, or she entered something wrong.

Well she said the card was fine had just used it so gave me the number to redo the charge. This one was declined so then I knew the bank had put a hold on the card.

I called her back and told her I feel the bank had put a hold on the card and to call them and authorize the charge.
Not long latter she emailed me back and said her card was indeed comprimised and it came from my site.....What lady the card was declined so the bank had already seen the card was comprimised so how could it come from our site. We are scanned once a month for any security problems and all is clear etc and etc.

Now if there was a site were people could report a site is secure or not could you see the abuse that could happen. ripoff is bad enough abused just think what would this be like.

The way I check if in doubt is check the contact info against the domain name whois. If there is a number to call, do they have a business hours, and call and ask or see if I get an answer during business hours. If I have to use an email to contact them or a fill in form then I am gone. If the whois is hidden I am gone. If the ss certificate is in the domain name or purchased through a 3rd party like godaddy with little or no checks. What type of ss certificate do they use. Some require more verifications than others. These are a few ways I do checks. Maybe others have more.

[yankeeman]

all secure shpiing sites (pages) that are collecting cc info should be on a https
(secure socket layer) or the shopping card offers a secure gateway.

[kevintynfron]

Where to check if shopwebsites are secure?

What do you mean by that?

As has been said, at the very least is that it should be an encrypted connection (https). What most of the public don't understand, however, is that this only means that nobody can intercept the credit card information between their computer and the website.

It is, however, no indication of the quality of the website, their handling of the information or the honesty of the owners. Taken to an extreme, the website at the other end could print your details out and stick them to billboards for all the world to see.

This shouldn't be taken out of proportion, though. Remember that operators at the end of a phone have been able to write down people's credit card information for years, and this is just along the same lines.

[piatkow]

Remember that operators at the end of a phone have been able to write down people's credit card information for years, and this is just along the same lines.

And a cheque has all your bank account details plus a copy of your signature on display.

Most cases that I have heard of recently regarding compromised cards have come through being skimmed at B&M locations.