Security

GoldenPay takes your online security seriously. Read on to find out how you can keep your personal data safe while paying online!

Online transaction and data security is our number one concern. Unfortunately, due to the fact that e-commerce is so new in Azerbaijan, most people are unaware of what "online transaction and data security" actually means. Below you will find information that explains everything you need to know about online security and what you can do to keep your information safe.

Online Transaction Security

E-commerce transactions require sensitive data like credit card numbers to be passed from one website to another. To prevent third parties from intercepting the data and using it to commit fraud, the transaction is encrypted. This means that the data being passed between website is changed from its original form into a completely unrecognizable form. Thus, any third party viewing this information would not be able to understand it.

Verisign, Inc. is the world leader in online transaction encryption (called Secure Socket Layer encryption). GoldenPay uses Verisign to encrypt all transactions, so you can be assured that your information is safe when you pay online.

Online Data Security

If you hold an account with Paypal or Amazon, you probably store credit card information to make future payments more convenient. Have you ever stopped to think about what steps are taken in order to ensure that your data is stored securely? Thankfully there is an organization called the PCI Security Standards Council. Its goal is to ensure that global standards for account data security are continuously developed, enhanced, and implemented.

What this means for the consumer is that any company or organization that stores sensitive account data will need to do so on a PCI-certified server. To become PCI certified, strict requirements must be met. More info can be found by going to the PCI Security Standards Council's website.

Phishing

Phishing is defined as an attempt by a third party to gain access to sensitive information using a fraudulent website clone that looks exactly the same as its genuine counterpart. An example is as follows:

A phisher sends you an email that appears to be from an institution you trust (your bank, for example). The email tells you that you must verify information to keep your account active and provides a link where you can do so. When you click the link, you are taken to a page that looks exactly like your bank's website. On it there is a form asking for your username, password, and other sensitive information.

Entering information into this form will in fact send your data directly to the phishers, who will then use the data to undertake fraudulent activities. While this is not the case 100% of the time, if you receive a random email that appears to be from an institution you normally trust, ask yourself the following questions:

  • Does this institution normally send emails to me?
  • Was I expecting an email from this organization?
  • Is the link in the email legitimate? Right click on it, choose "Copy Shortcut" and then paste in Notepad. Is the URL the same as that of your trusted institution?
  • Does the salutation contain my name or username? e.g. Dear Your Name Here

If you answered "no" to any of the above, it is likely that someone is trying to steal your information. One thing you can do is email the institution that sent you the email and ask it if the email is legitimate. Otherwise, simply delete the email and stay alert for future phishing scams.

Keeping Your Sensitive Information Safe

Keeping your information safe should be of utmost importance to you. This means creating strong passwords and safeguarding them at all costs, being sure to log out of your accounts (and clearing the cache) before leaving a public computer, not revealing your credit card details to anyone, and being aware of attempts by third parties to steal your information from you. If you take the necessary steps, you should be able to enjoy a fraud-free e-commerce experience.