Archive for the ‘Securing Your Business’ Category

travel websites

Friday, May 2nd, 2008

travel website

travel package

discount travel

travel agency travel agent

Don’t Welcome Me To Your Site

Wednesday, November 28th, 2007

That’s right! I don’t want you to welcome me to your site. Nothing against you or your website. Aren’t you dissapointed when you see a home page of a business and your "Welcome to the XYZ web site"

I already know where I am, so please don’t waste my time. Instead tell me about what I want to know. What do you have that I want? I am not interested in what you are, I am interested in what you can offer me.

Remember, you only have a few seconds to convince a visitor to stick around your site. Welcome them with great content not empty words.

 

 

party favors

Tuesday, November 27th, 2007

party favors

Wedding Favors

Tuesday, November 27th, 2007

wedding favors

Building Business Credibility

Tuesday, October 9th, 2007

Make your website an asset to your visitors. If you are an accountant, your website should be an educational tool. Communicate tax code changes, and explain how the changes might affect them. Provide relevant content that may be of interest to your clients. Talk less about how great you are, and more about your customers’ needs. Provide hints, articles, interviews, podcasts, or even short video clips about relevant topics.

            Write articles about your expert area. If you have a dry cleaning business, you might write articles about the benefits of the earth friendly chemicals you use. You can post the articles on your website. In addition, you can encourage other website owners to post your article on their sites. In exchange, you could post an article about their services on yours. Update your website content regularly. Your customers will appreciate a website with relevant content. A stagnant website communicates neglect.

            Have a professionally designed website. Gone are the days when any website would be acceptable. If your cousin built your website, you might make him very proud but your customers will be less amused. Amateurish websites communicate a message that you are a hobbyist, and not a real business. You wouldn’t want your cousin to do your corporate taxes, or remodel your office, so don’t ask him to build your website either. The right website will require a professional company with expert designers, programmers, and Internet marketers. Your website is your business, treat it accordingly.

            Having a website with spelling errors, bad images, and poor design is worse than having no website at all. Avoid errors of all types. Encourage your customers to bring errors to your attention. Your customers can provide you with feedback as they browse your site, and you can quickly make the necessary changes.

            Clearly, explain what security measures you take to keep client information safe. If you pay for a third party security logo such as HackerSafe or ControlScan, make sure your customers understand the benefits. I would recommend ControlScan as opposed to HackerSafe because the word, Hacker” may have more of a negative effect than positive.

International Credit Card Processing Problems

Friday, October 5th, 2007

Deferred Processing

Deferred processing is the less expensive alternative to real time credit card processing. It is simpler to implement than real time processing, and it doesn’t require a secure gateway. The lack of a secure gateway in your payment processing system doesn’t mean that it is unsafe.  Most customers won’t know whether you have real time or deferred card processing.

            Deferred processing enables you to process credit cards manually. This processing method lacks automation. It is a slow manual process. Processing dozens of orders on a credit card terminal is mundane task. In addition to the added labor, potential for errors is high. It is easy to mistype a number that could result in a failed transaction.

 

            How does deferred payment processing work?

 

·        Customer adds product to shopping cart.

·        The connection enters secure mode, as the customer is required to complete payment information. The customer’s browser encrypts the data between the web server and the customer computer.

·        Customer will complete order and leave vendor site.

·        The vendor at a later time processes orders through credit card terminal.

·        The terminal provides feedback to vendor whether or not the transaction failed or succeeded.

 

International Credit Card Processing

For security and fraud protective reasons, do not accept international credit cards. Offer payment alternatives such as international money orders, or wire transfers. Accepting international cards is risky business for several reasons. Most importantly, you will not be able to perform address verification. If a foreign customer pays with a stolen credit card, you will be stuck with the bill. In addition to the charge back, the bank will charge you additional fees. To add insult to injury, you’ll have to pay a charge back fee. On top of everything, you will be stuck with the shipping charges.

International Orders

Accepting international orders can complicate your business immensely. Primarily, there is the above described payment concern. Second, shipping internationally is much more expensive than shipping within the U.S. International orders require a lot of extra work that will increase your expenses and reduce your profit margins.

Processing Credit Cards For Your Online Business

Wednesday, October 3rd, 2007

Online Payment Security

If you are new to online business, you best bet might be to outsource credit card processing. PayPal is the best example of outsourced credit card processing. Online vendors using this service don’t have to worry about buying or renting credit card processing machines. In addition, they don’t need to create a merchant account because PayPal is the gateway.

            More established businesses usually opt for an in-house credit card processing solution. There are two basic methods of accepting credit cards online, real time processing and deferred processing.

 

            Real Time Processing

 

The biggest advantage of real time credit card processing is that there is no delay in the buying process. The customer immediately knows if the order went through. This method is especially effective with companies selling downloadable products such as audio, video, or e-book. As soon as the credit card is authorized, the customer can download the product. The real time processing fulfills the need for instant gratification. If you are looking for automation, real time processing is for you. It requires more complex set up than deferred processing, but once it has been set up, credit cards are processed quickly, efficiently, and most importantly automatically.   

            Real time processing simplifies selling online because customers receive instant feedback. For example, if they enter an incorrect credit card number, the transaction will fail and the customer is notified instantly. Declined credit card transactions are immediately reported back to the buyer.

            Secure payment gateways are the most important components of real time processing because they provide a secure connection between your website and your merchant account. Some of the largest secure payment gateway providers are authorizeNet and VeriSign.

 

How does payment through a secure gateway work?

 

·        Your customer adds the product to the shopping cart.

·        The connection enters secure mode, as the customer is required to complete payment information. The customer’s browser encrypts the data between the web server and the customer computer.

·        The website forwards the encrypted payment information to the secure payment gateway.

·        The payment gateway forwards the encrypted payment information to the vendor’s acquiring bank account.

·        The acquiring bank forwards payment information to the customer’s bank account.

·        The customer’s bank responds to the payment request. It either approves or declines the charge.

·        The payment gateway received the response and forwards it to the vendor’s website.

·        Order completed or failed message is communicated to customer.

 

Please keep in mind that the above process is highly simplified version of the actual process. The entire transaction described above should take less that ten seconds.

Phishing - Don’t take the bait!

Monday, October 1st, 2007

Phishing is a subcategory of social engineering where attackers deceptively obtain sensitive information, such as credit card numbers, usernames, and password, by camouflaged as a trustworthy entity in an electronic communication. It is likely that you have received phishing e-mails in the recent past. Some of the most common phishing attacks involve recognized names such as PayPal, eBay, Amazon, and various banks.

            Phishing is normally carried out through e-mail. Instant messaging is another common vehicle for attacks. The key to deceiving people through phishing is to make a link in an email appear to belong to a legitimate company while the link really points to the site controlled by the criminal. A common trick is to make the anchor text for a link appear to be a valid URL when the link actually goes to the phishers’ site.

Phone phishing is the same principal with a low-tech twist. Instead of e-mail, attackers use the phone to contact their victims. They might leave a message pretending to be calling from a legitimate business such as a bank or long distance provider, leaving a phone number that terminates at the phisher location.