Popup for entering credit card details

InDebted2U_2

If you try to purchase something on a secure webpage, which then pops up a window to enter your cc details into, how can you be sure the popup window is secure?

[Deleted User]

Doesn't sound good, would be really useful to know which website you are referring to in order to verify whether that is normal.

You can usually see an address bar for a pop up window, however that isn't always useful as it is likely to belong to the payment processor rather than the actual website you are trying to purchase from.

https://conversation.which.co.uk/shopping/scam-watch-fake-verification-pop-up

More information is definitely needed to help you, for example I use auto filled card details from Google Pay so I always get a pop up in my browser to ask for a CVV code to allow Google to auto complete my card details - example below.



If you can get us a screenshot or at least the name of the website it would be much easier to advise - without such info I'd just say don't enter the details.

debitcardmayhem

Oh btw is this on a pc or phone/tablet more info is less

InDebted2U_2

The website is boardgamearena and it does the popup whether on browser or mobile.

[Deleted User]

InDebted2U_2 said:

The website is boardgamearena and it does the popup whether on browser or mobile.

Ok, yes making a bit more sense now, I'm thinking you've already registered card details with them and this is like an in-game top-up? If so it is common for these sites just to ask for CVV via a pop up to verify existing card details.

I'm now reading your original question differently and with less suspicion, I think you are asking that if the main website it HTTPS and therefore encrypting traffic, is the pop-up also using HTTPS encrypted - sounds like it is an in-page pop-up rather than a new browsing window - especially if you can't see the address bar in the pop-up.

Answer is probably yes it is secure, if a browser connects to a secure website then the browser should only allow secure content on that page including pop-ups and should warn if being re-directed or has non-secure secure content.

If you are still concerned, I'd be tempted to use Paypal with the website and then you aren't providing card details to them.

InDebted2U_2

[Deleted User] said:

InDebted2U_2 said:

The website is boardgamearena and it does the popup whether on browser or mobile.

Ok, yes making a bit more sense now, I'm thinking you've already registered card details with them and this is like an in-game top-up? If so it is common for these sites just to ask for CVV via a pop up to verify existing card details.

No, this is the popup for subscribing and you enter all your card details into it. It's the only payment option for paying in £ Sterling.

I'm suspicious of popups I can't verify are secure, and I don't see how I can check it.

[Deleted User]

InDebted2U_2 said:

[Deleted User] said:

InDebted2U_2 said:

The website is boardgamearena and it does the popup whether on browser or mobile.

Ok, yes making a bit more sense now, I'm thinking you've already registered card details with them and this is like an in-game top-up? If so it is common for these sites just to ask for CVV via a pop up to verify existing card details.

No, this is the popup for subscribing and you enter all your card details into it. It's the only payment option for paying in £ Sterling.

I'm suspicious of popups I can't verify are secure, and I don't see how I can check it.

Ahh ok, makes even more sense, that isn't a pop-up in the traditional sense where it is a new browsing frame / session with address bar etc, that it just a modal pop-up still within the original webpage frame.

All I can advise is double check the reputation of the website from independent sources and use Paypal if you are still unsure but it does look ok to me.

Sandtree

InDebted2U_2 said:

I'm suspicious of popups I can't verify are secure, and I don't see how I can check it.

This isnt a popup, it is just a layer of the webpage that they've brought to the front and so you can see that its secure because you have a padlock symbol next to the URL in the address bar. If it were the case that this was an insecure iframe or such rather than just a layer/div then the padlock symbol would be adulterated either with a warning triangle or a strike through which highlights that some or all of the content is not secure.

InDebted2U_2

Ok, good to know, thanks.