Card-Testing Attacks on Donation Forms: Why Nonprofits Get Targeted and Where the Exposure Sits
Card-testing attacks hit nonprofit donation forms more than most checkouts because a donation form is built to be open, fast and friendly, and those same qualities make it an ideal place for a bot to check whether stolen card numbers still work. The attacker wants...
In What Order Should a New Business Set Up Its Financial Infrastructure?
Set up a new business’s money in the order each step depends on the last: first the legal entity and its registrations, then the tax ID, then a business bank account in the exact legal name, then your bookkeeping, and only then the tools for getting paid, such...
What Is a POS System for a Small Restaurant or Bar?
A POS system for a small restaurant or bar is the register, the order screen and the card reader working as one, so an order goes from the server or bartender to the kitchen, onto the check and through the card payment without anyone writing it down twice. For a small...
The POS Terminal as an Attack Surface: Where Card-Present Fraud Enters the Transaction Flow
Card-present fraud does not come through one door. It comes in at six or seven specific points in an ordinary sale: the card itself, the reader it touches, the way the card is entered, the person at the register, the POS software and network behind the counter, the...
PCI DSS vs. Card Network Rules: Why They Are Not the Same Thing and Why the Gap Matters at the POS
PCI DSS and the card network rules are related, but they are not the same thing, and treating them as one is how a store that “passed PCI” still ends up paying for fraud at its own register. PCI DSS is a security standard. It tells you how to protect card...
CEO - Nationwide Payment Systems
