Timeline for How to safely collect bank account from website and without an external gateway payment system
Current License: CC BY-SA 3.0
3 events
| when toggle format | what | by | license | comment | |
|---|---|---|---|---|---|
| Jul 3, 2012 at 2:13 | comment | added | Lèse majesté | You would need to encrypt the primary account number before sending it via e-mail (this is a PCI-DSS requirement), and you should still ensure that all of your MTA relays are using TLS. Also, PCI-DSS compliance is required for any organizations that handle credit/debit/cash card information. You need to be especially familiar with these standards if you intend on implementing your own payment acceptance system. At the very least, when you're done implementing it, you need to pay a PCI-DSS auditor to go over your system to make sure you're not endangering your customers. | |
| Jul 2, 2012 at 16:03 | comment | added | Alexandru Trandafir Catalin2 | I was thinking about this option, but I don't know if it is legal. | |
| Jul 2, 2012 at 14:33 | history | answered | nycmixing | CC BY-SA 3.0 |