Internet Shopping & Co .: How to Pay Securely Online | Free Antivirus Software

What is the safest method of payment? What is the main danger of e-banking? Ivan Bütler, the cybersecurity expert and professor at the Rapperswil Technical University (HSR), provides answers to these questions. He also gives us three insider tips for making secure online payments.

In 2019, the Swiss bought 10.3 billion francs worth of goods and services on the Internet. And the Covid-19 crisis is boosting online commerce. For example, Credit Suisse is forecasting an overall growth of 30% in online sales for 2020. “One more reason to pay close attention to the dangers of online transactions,” says Ivan Bütler.

This cybersecurity expert mainly deals with the security of computer systems of large companies. And occasionally his father's computer problems. “He was the victim of several phishing attacks,” says Bütler. “Anyone who is the target of these kinds of attacks should change the password of the affected account as soon as they can. Ideally from another device, if possible. ” 

Cybersecurity expert Bütler also has important tips for customers of online shops, people who make in-app purchases via a mobile application (“in-app”) or e-banking users. Because online transactions are particularly sensitive. It explains how to make purchases and payments over the Internet fearlessly and securely.

Online Shopping: How to Pay Securely?

Basically, you should shop online using an encrypted https connection - until the payment process is complete. This is the prerequisite to prevent your credit card data and passwords from being stolen. Also pay attention to the payment entry mask that appears when you are asked, for example, to enter your credit card data. Does it sound familiar to you? It should be.

Because virtually all large online stores use the same payment entry masks, which are provided to them by an external provider. For online store managers, creating a payment entry mask themselves and negotiating with credit card providers would be far too expensive. Another important point: you must use two-factor authentication, whether for your credit card, e-banking or PayPal. By creating a second obstacle for outgoing payments, thus increases your security.

What Is the Safest Way to Pay Online?

Credit cards, PayPal, Twint, Apple Pay, Samsung Pay or Google Pay are all payment systems that meet high-security standards and have a proven track record. To make payments online, avoid prepayments or down payments as well as transfers via Western Union as much as possible because if there is a dispute, it would be The existence of a pool for damage coverage is a central evaluation criterion for the security of means of payment. For each transaction, a micro-amount is then paid into a fund which is used to cover the damages. This is particularly the case for credit card providers.

What Is the Main Danger When Shopping Online?

The greatest danger comes from Trojans in the terminal. Indeed, if the terminal is infected, the payment procedure may in itself be completely secure, but this does not prevent your data from being surreptitiously stolen. The weak link in online transactions is the human being and his interaction with computers, laptops and tablets.

Many users do not have virus protection on their smartphones. Is buying online via your smartphone riskier than via your computer?

No, in principle, it is not riskier because, unlike a desktop or a laptop, it is not mandatory to download a free antivirus software application on a smartphone. For the good reason that only the operating system and applications are installed on the smartphone. You cannot control or limit access to applications installed through the administrator level as you can on a computer. And this is not necessary, because smartphone apps only have access to certain general data, such as contacts or photos. Communication from one application to another is also not possible.

How Can I Recognize a Fake App?

It is difficult to recognize fraudulent applications (“fake apps”). The hackers who create them use the same names as the original apps. You have to take a close look at the icon: does it correspond to the official icon of this app? In principle, this can be checked on the website of the app provider. Also, see how long this app has been in existence. If this is a known app that has been on the App Store for only two weeks or has only been downloaded a few times, you should have serious doubts. 

How Can I Protect Myself From Unintentional in-app Purchases?

This feature can usually be disabled manually, although, in my opinion, this is not really necessary. It seems to be more relevant to configure your smartphone so that confirmation is required for any in-app purchase within a mobile application. It must then be validated by entering a password or via the fingerprint sensor. Parents should activate receipt of purchase confirmations. This makes it possible to discover additional purchases made unintentionally and to better control spending.

How to Manage the Automatic Renewal of Application Subscriptions?

I have of course already fallen into the trap. At the moment, I don't see any technical solution. The only advice I can give is to make a list of your subscriptions with their termination dates and enter this data into your calendar. 

Which Networks Present the Least Risk for Using E-banking?

The main danger comes from unfamiliar networks, such as free wi-fi at the airport, train station or hotel. Of course, the https of a connection protects against spies. However, warnings may appear in the browser, for example indicating that the connection is not private. The average user is then quite distraught and clicks on "continue", which allows a hacker to read his data. In Switzerland, when you have private or professional VPN remote access, it is preferable to use the Internet through these VPN connections. If this is not the case, you should be more attentive to the warnings or refrain from banking online on free wi-fi networks.

Is E-banking as Secure on a Smartphone as It Is on a Computer?

It is even more secure on a smartphone than on a PC. Indeed, the main danger comes from Trojans, which are much more difficult to implement on a smartphone than on a computer. As the applications are not connected to each other, the Trojan applications also have no access to the data of other applications. The central element in e-banking security is double authentication. It must absolutely be activated, whether you are using a smartphone or a computer. 

What Is the Main Danger of E-banking?

It certainly comes from its users. If we do not notice that an invoice has been manipulated, we will pay it on a fake account. And this risk could well grow with the emergence of QR code invoices. When you receive an invoice with a QR code in PDF format by e-mail, there is no more data to enter, just scan the QR code. This is convenient, but there are already Trojans that manipulate these QR codes and modify the recipient's account. It is therefore imperative to carefully check to which account and to which biller you are transferring the money. 

As for you, how do you make your payments online?

Personally, I use e-banking with double authentication. Also, I pay small amounts with Twint and larger amounts with my credit card. I also regularly pay in bitcoins, mainly for services I bought abroad, for example, a graphic made by a graphic designer in Brazil or the development of software by a young engineer in the United States.

3 Tips From the Cybersecurity Expert

1. Use a different password for each service and never store your passwords in the Notes app on your smartphone, as other apps have access to them. Instead, use a password manager, such as SecureSafe. SecureSafe is very reliable, I have personally checked it.

2. Check that your e-mail address and password have not been exposed to a data breach. This could especially be the case if Facebook, Linked In, Adobe or Netflix have been hacked. And ask to be alerted if your email and/or password is roaming around the world. You can do this with the Firefox monitor for example. 

3. Two-factor authentication is a key element in securing payments on the Internet. You must activate it for all means of payment and services, such as credit cards or PayPal and of course for e-banking.