Quote:
Originally posted by Driven@Dec 9 2003, 12:49 AM
1. I build a fake join page on my site that has all the same info as 3dsecure and looks and acts to the user as if it was a normal page, it pops up the 3dsecure page info and all the rest and requests the user to input his 3dsecure "password". All that data is then sent to a relay via form and then to my email address.
|
In order to prevent this, VISA has what they call the "personal message":
From the
Verified by VISA Q&A:
Q: What is a Personal Message?
A: Your Personal Message appears in your password screen when you make purchases. When the Verified by Visa window appears during the purchase process you should always check to see that your Personal Message appears correctly. This confirms that it's an authentic Verified by Visa window.