JCC SECURITY BEST PRACTICES

Viruses and other malicious programmes are transmitted over the Internet and can spread quickly to cause chaos on personal devices and company networks. To protect your device (desktop, laptop, tablet or smartphone), use up-to-date antivirus software that scans files and email messages for viruses and firewalls to prevent malicious attacks and block certain types of data from entering your device or network. Firewalls can also be set up to notify you if anyone tries to access your system.

Modern browsers warn you if you visit fake websites, so it’s harder for viruses to infect them. But browsers function properly only if you use the latest versions. Here’s why. Hackers create viruses to exploit software bugs in order to infect computers. Software companies like Google, Firefox, Microsoft and Apple, fix those bugs by providing free downloadable updates/patches on a regular basis. Installing those security updates as soon as they become available makes it harder for viruses to infect your software. The same goes for your browsers. In your preferences settings, select automatic updates for your web browser(s), operating system(s) and software. If you prefer not to have automatic updates, check regularly for required software patches and updates.

Be aware of the threats and risks posed by downloading and installing software or files from unknown sources. Ensure that the software is genuine before downloading. Programmes downloaded online may contain viruses or other malicious code that can harm your computer or be used to steal private or confidential information like card numbers and passwords. Always use up-to-date antivirus software that scans all the files your download.

You can recognise our official website when you see a small green padlock/security icon in the address bar of your browser to the left of our URL. That URL should also begin with an “https” prefix, which means that you’re accessing your account over an encrypted SSL connection. SSL-secured websites will also have their “https” prefix highlighted in green like this:

When a credit card transaction is disputed by either your customer or by a customer’s credit card issuer, you may receive a chargeback. If a chargeback occurs, the amount of the original sale will be deducted from the checking account on file with your merchant account. If you want to prevent chargebacks, here’s what you can do:

1. Make sure the business name that appears on the cardholder’s statement is a name that your customer will recognise.
2. Respond to retrieval requests within 12 days.
3. Provide a local or toll-free number on invoices and receipts for customers to contact you directly with purchase questions and concerns.
4. When you need to credit a customer and the original sale was made on a card, put the credit back on the original card. Don’t issue the refund with cash or a cheque. If credit is due on more than one sale, process each amount individually.

• Have proof the card was used by swiping it through your terminal.
• Encourage customers to come into the store and swipe their credit card, instead of taking credit card numbers over the phone.
• Always check the identification of the cardholder. Don’t accept borrowed cards.
• Never accept an expired card
• Where possible, compare the signature on the sales receipt to the signature on the back of the customer’s card or on their ID.
• If a card is declined, do not attempt to repeat the transaction for a lesser amount. Instead, request a new form of payment from the cardholder.
• Never accept an authorisation number from your customer to enter into your terminal.
• Never accept a phone call on your customer’s phone – always call the JCC helpline directly.
• Get an imprint of the card when it has to be manually keyed into a terminal, as well as all other transaction information such as the sale amount, the business name and location, and the customer’s signature.
• Verify that the number on the screen matches the embossed number on the card.
• Obtain an authorisation number for the full amount of the sale. Don’t break the sale down into smaller amounts.
• Have your return policy pre-printed on the credit card sales draft and signed by the cardholder at the time of purchase. Your policy must be placed in proximity of the signature line to be recognised by Visa or MasterCard.

• Obtain a signed credit card authorisation form from the customer.
• Obtain a customer’s full billing information, such as the name of the cardholder, the billing address and the billing phone number.
• When prompted, enter the cardholder’s address or postal code. This is known as Address Verification Services (AVS).
• Ask for the three- or four-digit code on the back of the card.
• Be extra careful with orders that come from free email services (Yahoo, Hotmail, Gmail), especially if you do not have a prior business relationship with the customer.
• Use caution when orders come from overseas or request shipment overseas.
• Be extra careful with larger than typical orders and next-day deliveries.
• Always verify any order that has different billing and shipping addresses.
• Avoid shipping to post office boxes and other non-permanent addresses.
• Document clear return policies and terms and conditions on your website and invoices.
• Only use shipping that allows proof of delivery to the billing address.
• When shipping expensive items, request a signature from the buyer when the merchandise is received.