Taking money safely.
WHAT TO USE
A reputable payment gateway that handles card details for you.
WHY
It removes card data from your systems, which removes most of your exposure.
WHAT NOT TO DO
Take card numbers by phone, message or email Write card details down Store card details anywhere
FOR BANK TRANSFERS
State clearly on your site and invoices which account payments go to, and that it never changes.
That protects customers against redirection fraud.
WHAT TO VERIFY
That funds have arrived in your own account before delivering.
Never on a screenshot or a notification message.
WHAT TO MONITOR
Repeated small failed payments Unusual order patterns Changes to your payment configuration
WHAT TO SECURE
Access to your gateway account, with a second step.
WHAT TO RECONCILE
Gateway transactions against your records, regularly.
WHAT TO TELL CUSTOMERS
To call you if they receive a message asking them to pay elsewhere.
WHAT TO KEEP
Records supporting every transaction.
