How to Make Your Site Secure for Credit Cards

Consumer fears of using credit cards online are the biggest obstacle in developing a thriving e-commerce site. Go the extra mile to ensure your customers' privacy and security, and they'll keep coming back.

Instructions

Difficulty: Moderate

Things You’ll Need:

• Fax Machines
• Telephones
• Secure Server Companies
• Toll-free Telephone Line

1. Publish a security and privacy statement. Specify what safeguards and systems you have in place to protect electronically transmitted data, and let the buyer know what your policy is on selling or trading purchase and personal information with other merchants. Aside from clearing up a customer's misconceptions, this might let potential hackers know you're not an easy target.
2. Require all users of your site to register. Issue each customer a user ID and password of his or her own choosing. Entering the appropriate user ID and password should be the only way the customer can access his or her personal and account information.
3. Take further steps to verify the identity of users by using security systems such as Secure Socket Layer (SSL), Secure Electronic Transaction protocol (SET) and digital signature certificates. These are all popular varieties of data encryption systems that "scramble" data as it's transmitted electronically between parties.
4. Consider using an electronic payment service such as CyberCash. These services are set up through a participating bank and act as a secure site, merchant account and purchase guarantee firm.
5. Offer alternatives to online transactions. Provide a fax number, telephone number (toll-free if possible), mailing address and any forms necessary to make an offline purchase.
6. Ask the Better Business Bureau or National Computer Security Association to evaluate the security on your site and offer suggestions on ways to improve. If your security is up to their standards, you can display their logos on your site, which tells the world that security is of the utmost importance to your company.

Tips & Warnings

• If you choose to provide an offline purchasing alternative such as a telephone number, be prepared to spend the money necessary to man the phones and provide constant customer service.
• Thoroughly investigate any of your employees who have access to customer and credit card information. Inform them that violating customer privacy will not be tolerated. Also let them know - in writing - that they will be prosecuted to the fullest extent of the law for any attempt to steal credit card or other customer information.
• An electronic payment service is convenient, but the fees are higher compared with most standard credit card merchant accounts.