What are the major threats to e-payments?

Replies

• 

  Ashraf HZ

  I believe a major threat is via phishing. An authentic looking email requesting login credentials to the payment gateway will steal your info using a fake website. Though obviously online financial systems never would send an email requesting your details, one might still be fooled by this if not careful.
  
  Another threat related to phishing is with DNS cache poisoning. When you type in the website of your payment gateway, you might be redirected to a rogue IP address hosting a phishing website due to an "infected" DNS server. Though very rare, it can happen with the most determined of criminals. This is quite a scary scenario 😔
  
  At least with the advent of authorization codes (such as via mobile phones), the consequences of getting your account compromise can be minimized. But websites like Paypal don't have this... knowing just the Paypal credentials is enough to purchase whatever you want up to the card limit. That is why its better to link your Paypal account with a fund limited debit card rather than a credit card.
• 

  vik001ind

  Hackers are now done with the customers, they are now directly attacking the bank sites & stealing credentials of many hundreds of customers. They use social engineering technique & they gather information by their hacker's network about what type of security systems, softwares & hardwares are installed in the bank & vulnerabilities of the system. Then the hack the bank systems or design the cracking tools or buy it from some other elite hacker. And rest is history.
• 

  jhbalaji

  The major problem is forgery and paying the item with less then its marked value!
  If its a digital item then MySQL Injection may be Possible by a Dev! 😀
• 

  Manish Goyal

  jhbalaji

  The major problem is forgery and paying the item with less then its marked value!
  If its a digital item then MySQL Injection may be Possible by a Dev! 😀

  Can you please elaborate this a little bit more?
• 

  jhbalaji

  goyal420

  Can you please elaborate this a little bit more?

  SQL injection refers to the act of someone inserting a MySQL statement to be run on your database without your knowledge. Injection usually occurs when you ask a user for input, like their name, and instead of a name they give you a MySQL statement that you will unknowingly run on your database.
  Likewise in downloaded products when weak spot is found then it can be easily broken 😀