Re: trouble convincing client of ecommerce security requirements

by "Nancy S.Brown" <NancyBrown(at)designingweb.net>

Date:	Tue, 05 Mar 2002 14:00:02 -0600
To:	"Missy Scott" <MBScott(at)d-assistance.com>
Cc:	hwg-techniques(at)mail.hwg.org
	todo: View Thread, Original

Asked my husband the banker and here is what he had to say:

The fellow from SEFCU is correct that not a single credit card number has 
been documented as stolen through the email process BUT this  because no 
study has been done on this.  However it is widely held within the banking 
community that credit card numbers are indeed stolen through email.

As for your liability it depends upon what state you and the non-profit are 
in as the laws vary according to state.

A last comment, if the non-profits fraud rate is higher than the norm the 
credit union can and probably will drop their merchant account and more 
than likely their other accounts.  Once this happens it is extremely 
difficult to get an account elsewhere as this sort of information is 
routinely passed around among financial institutions.

****************************************
Nancy S. Brown     Designing Web
NancyBrown(at)designingweb.net
http://DesigningWeb.net

HWG hwg-techniques mailing list archives, maintained by Webmasters @ IWA