Payment and order processing
There are a number of catalogue Web sites being run by UK companies, varying from large sophisticated book retailers to small ‘mom and pop’ operations. The most popular payment mechanism is payment by credit card, and clearly such payments must be secure. However in a review of a number of such sites, we found that only a minority offered credit card payment over a secure link.
Other options are:
• Credit cards over an insecure link
• Purchase orders only
• Purchaser contacted later by phone or post
• Purchaser prints form and faxes it
The few sites that accept credit card information over an insecure link are almost certainly in violation of their agreement with the bank that is accepting their payments. They are also taking on the business risk of fraud. The risk does not stop at the bank but gets passed on to the merchant. .
Issues for these sites are:
• Perceived non-availability of secure payment methods. We discuss payment methods and security issues below.
• Inability of the design shop that developed the Web site to implement a complex catalogue or secure payment system.
• Difficulty in finding a commercial Web site hosting operation that will offer a suitable secure environment.
• Perceived cost of setting up a merchant server.
Most of these issues are perception rather than reality. There is no reason why a merchant should not be able to offer a fully functional catalogue site with a proper secure payment mechanism. This can be done very cost-effectively
|