RisusSardonicus

Hi there. I have a competitor who is taking credit cards online but processing them manually.

He is using a credit card form provided by a site called formnut.com All the information on that form is sent to formnut.com who forwards the information to him. They do use SSL for the form and I believe formnut.com declares itself PCI compliant.

He also states on his site that all credit card information is stored on secure servers. He operates out of his home and I suspect he is storing that information on his personal computer.

I can't see how having your customer's information sent to a third party, and then having them forward it to you so you can process it manually is secure.

You can send totally false information through the form.

But, with my site the credit cards are processed automatically through a credit card processor and I never even see the information, must less store it or share it with a third party.

I almost want to warn people about him but I don't want to make myself legally liable.