Email and CC#s

[lysergic]

Have a client that is wanting to transfer a site to my servers. They have an order form that collects credit card information. Right now the card information is emailed to their aol.com email account. When ever this has come up before I offer to switch them over to something like mals-e.com so they can operate in a secure enviroment for free and everyone has accepted with glee. But this guy refuses to even contemplate it. I am half tempted to turn the guy away, but hate to turn away business. Any one have any idea how to talk to this person?

[Marcia]

You can try switching it to 2 messages, with the number split between them - that's a bit safer. Or can you write the credit card info to a password protected page where he can retrieve it? Can he encrypt his email?

[tedster]

If the prospect has disdain for the security of his customers, I probably would turn him away. But first, I'd make sure it's not an issue of being poorly informed.

I think you've got to talk to him about customer service overall - security and everything else. If he understands how that helps to grow his business, I think he'd come around. After all, concern about security of credit card info is one of the top reasons that people don't make web purchases.

A small business has to go a few extra miles over the big boys before I give them my information online, I know that!

[EliteWeb]

hah i sniff the net for credit card numbers - tell him its insecure couz im out there!

[TallTroll]

Point out that should someone intercept the CC details and abuse them, he is likely to be held PERSONALLY responsible. If he doesn't mind doing the jail time, would he mind signing this waiver, and we'll get on with it

If that doesn't change his mind, dump him. He's trouble waiting to happen

[IanTurner]

I use to take CC's online on an SSL - I thought even that was too much of a risk, now it all goes through a payment provider, they've got the security, they can focus on that aspect. It is too much for a small hosting company to risk.

Because you can guarantee if the details get hacked or intercepted the hosting companies name will go through the mud too.

[Crazy_Fool]

that guy is a fool. if you take him on as a customer with him using his existing system, then you will be a fool too.
yes, it may be business, but if someones card details were stolen and he got sued, you could get dragged into it as well.

sure it's not nice to turn away business, but for me, the risks would outweigh the benefits. i stopped providing SSL services over a year ago and all my hosting customers that take plastic now use a payment provider instead.

if he refuses to do that, can you post his email address? i could do with a new car and a few other bits and pieces.