Is it good idea to put a captcha on credit card payment form?
I am thinking to put one on my asp.net mvc application's payment section to make it more secure but I have never seen anybody doing that.
Webmasters Stack Exchange is a question and answer site for pro webmasters. It only takes a minute to sign up.Sign up to join this community
Your goal is to make the payment process as simple and straightforward as possible. Adding a CAPTCHA to your payment form will do the opposite of that.
CAPTCHAs are notoriously difficult to complete. They have to be complex to defeat bots that are continually getting more and more sophisticated. But that complexity makes it more difficult for humans to complete as well. If you make the CAPTCHA easy to complete then not only is it easier for the bots to defeat, all you've done is add yet another field for users to fill out.
Using session tokens and honeypots are easy ways to find bots without humans ever knowing they were there. So start of with them and then if a user seems to be submitting a lot of forms in a short period of time and/or their payments are repeatedly declined, then use a CAPTCHA to make sure they are a human being.