Best Practices Make Perfect

How to create a safe, secure online-giving environment

Oct. 11, 2005

By Jackie Christensen

When you think online giving, your first thoughts probably tend toward how accepting donations through your Web site will increase the dollars you raise. In all the excitement of creating compelling donation pages and working with vendors to get the technology you need, there are two key words that should stay in the forefront of your mind -- security and privacy.

Philanthropists are not the only people interested in your online-giving program. Cyber criminals have been known to use nonprofit donation sites to test the validity of guessed or stolen credit cards. If a fraudulent donation is processed, then the criminal knows the number is good and can be used for other charges.

Unfortunately the nonprofit organization is left with the administrative burden of administering refunds, removing fraudulent records from its database, and reassuring donors that its online-giving site is legitimate.

There are a few things you can do to protect your organization -- and the constituents who choose to support you via the Internet. First, make sure your online donation pages are SSL designed. The secure socket layer protocol encrypts all information typed into the forms on your Web pages so hackers can't read it as it travels across the Internet.

You also should require your donors to enter the CVV2 security code on their credit card before they can complete their gift transaction. Card verification value is an authentication process established by credit card companies to further efforts toward reducing fraud for Internet transactions. It consists of requiring a card holder to enter the three- or four-digit CVV2 number at transaction time to verify that the card is on hand. This enhances fraud protection by validating that the donor is in possession of the credit card and that the credit card number is legitimate. While not required by law, this extra layer of security is meant to thwart fraudulent activities and will help your donors feel even more confident about making financial transactions on your Web site.