When it comes to maintaining
credit card processing security, protecting sensitive customer data, and preventing fraud against a merchant or customer, mistakes in
credit card terminal installation and credit card processing software set-up are very high on the list of ways merchants open themselves up to security breaches.
One of the main mistakes is improper POS software installation. Partial understanding of a software package or use of third-party software not fully compliant with Payment Application Security Standards can result in a number of vulnerabilities. For example, software that retains extensive consumer data such as the card number, expiration date, and security code and doesn’t frequently purge the information is ripe for theft. Coupled with this, lax standards about who can access the backroom server where sensitive data may be stored creates opportunities for employees to participate in fraud.
Another likely mistake is an improperly configured internet connection and processing network that does not make use of internal and external encryption. Some online merchant portals do not configure well with security software on the backbone computer, and some merchants use their back office database computer for other purposes that open it up to breach. Any of these software mistakes is easily avoidable when instructed by an expert, but very risky if left uncorrected.
The other realm of mistakes relates to the physical installation of the POS terminal, including the debit and credit card processing device and the registers. When not installed by a professional, minor differences in how the terminals interface with the network or are physically connected can create an opportunity for unscrupulous employees to take advantage and steal from customers or the merchant.
A reputable POS and credit card processing service provider will make the trip to the merchant’s place of sale to install POS terminals correctly, and thoroughly explain their proper use as well as how to protect against fraud.
The best way a merchant can avoid security-risking mistakes is to get as much support as possible from trusted professionals providing the various payment processing services, and maintaining the system with diligence.