Time to change, don't go for it.

truthman007

There are many occasions i come across, companies ask us to put debit/credit card details including the security code write it on the form, so they can collect money later for the service. e.g Law firms, mortgage providers and many more.

This is not a good idea, this should be illegal to ask details. If not them it can be misused by anyone easily.

Esqui

In the paper?


And also, it is illegal to misuse credit card details so you've already won!

truthman007

Sorry, i didn't get you Esqui.

mije1983

truthman007 wrote: »

There are many occasions i come across, companies ask us to put debit/credit card details including the security code in the paper, so they can collect money later for the service. e.g Law firms, mortgage providers and many more.

This is not a good idea, this should be illegal to ask details. If not them it can be misused by anyone easily.

What do you mean by 'in the paper'? As said above, it is illegal to misuse credit card details. If they provide a service to you that you need to pay for, how are they meant to do it without your payment details?

I don't really understand your post. Can you give some more detail?

Money-Saving-King

I don't understand. You're saying if you're buying a product which obviously involves paying for the item/service this should be illegal?

Azari

Money-Saving-King wrote: »

I don't understand. You're saying if you're buying a product which obviously involves paying for the item/service this should be illegal?

I think he's saying that companies should not retain the security code.

i.e. They can keep the main CC details but should re-acquire the security code each time they need it.

This is already best practice and you will notice a number of companies do this at the moment.

Jeff_Bridges_hair

mije1983 wrote: »

What do you mean by 'in the paper'? As said above, it is illegal to misuse credit card details. If they provide a service to you that you need to pay for, how are they meant to do it without your payment details?

I don't really understand your post. Can you give some more detail?

I see they have edited it to make it a bit clearer.

Basically they are saying that online forms ask you to enter you card details and your CVV pin on the same form online and that if it was gotten a hold of by a 3rd party it could be missed used - ID theft and that.

A second encrypted page for the CVV would be a safer way of making online transactions as this would be kept seperatly from the card details but alas people would just get peeved at the transaction taking longer.

What should be done is website owners making their payment pages as safe as posssible but also the home PC user making sure that they are free of any nastys on their computer too - very important.