Tuesday, January 27, 2015

Protect Your Credit Card Online

Lately, it seems as if we hear about a new data breach almost every week.  The biggest threat to individuals in the online security world is no longer the virus or trojan that gets on your computer (not that they don't exist); instead, it is the threat of your personal information being stolen from someone else's systems.  Because it can be used to charge purchases worth thousands of dollars before you notice, your credit card number is a hot item to steal.  While you can't protect your information once you have handed it over to an online merchant, there are still steps you can take to make sure your credit card number remains secure online.

1) Only Enter Your Information on Secure Sites - Any information your computer sends on the internet can be intercepted and read by another computer.  That information includes the credit card number you sent to Amazon and the social security number on the tax return you e-filed.  To prevent criminals from obtaining this information, we use encryption to modify the data so that only you and the recipient can read what it actually says.  Anyone else only sees a long string of characters that makes no sense to them unless they are able to crack the encryption key.

To know if you are sending information securely, you should always check the first few letters of the internet address.  If you are sending personal information, it should always say "https".  If it says "http", do not give them your data:  the information will not be encrypted.  (There are other options that could appear here, but they are rare except in certain circumstances.)  There may also be a lock somewhere on the page, depending on the browser you are using, but the "https" will be there in any browser.

2) Don't Save Your Card - Simple statistics would dictate that the fewer places you store your information, the less likely it is to be stolen by someone else.  So why store your credit card on a site where a simple password crack can get to it?  Yes, it is more convenient to keep your information there so one click can make a purchase, so you must decide whether you want to trade security for convenience.  If you do choose convenience, make sure your account is secured with a complex, unique password to prevent access to your account.

3) Check Card Readers - Thieves are becoming more sophisticated in the way they go for your credit card numbers.  For a small amount of money, they can get a device to attach to an ATM or gas pump card reader.  (Theoretically, they could develop one to work at a grocery store, but they would need to install it without being caught, and it is more likely to be noticed.)  Before you swipe your card, give the card reader a firm tug.  If something comes off or feels loose, the card reader could have been compromised with a phony reader.  Also, check around for anything that could be recording you as you enter your PIN, and use your other hand to cover the keypad as you enter it.

4) Use Masked Card Numbers, PayPal, or a Similar Service - Some credit card companies are offering online card numbers for one-time use.  You simply log in to your account, request a number, and then copy and paste it onto the site for payment.  Once the company sees your purchase, the number is cancelled, and any future purchases with that number are automatically declined.  You can then request a new number for your next purchase.  If you use Blur to block sites from tracking you online, you can also get this feature by upgrading to the Premium version.

If you don't have access to masked card numbers, you can use PayPal to pay at a variety of online stores.  By using PayPal, stores do not get your credit card number.  Yes, it is possible that your card could be stolen from PayPal's site, but using PayPal in multiple places keeps your card number in only one place.  Once again, the fewer places that have your credit card number, the less likely you are to have your card compromised.

No comments:

Post a Comment