Friday, April 23, 2010

Pay-at-the-Door Special Events... PCI Compliant?

It seems every week there is another business seminar, sales training event, networking cocktail hour or some other event that promises to make you a better business person. Some are free (and well should be), but many charge a nominal fee. I saw one recently that I caught my eye and I decided to spend the afternoon in sessions at this half-day sales rally. After all, it was just $45... pay at the door.

I got there early -- as is my habit with any appointment -- and the event staff was still setting up. I overheard enough conversation to know that they were searching for the hotel/conference WiFi. Free public WiFi, that is. We've all been there, right? Looking through the list of networks within signal reach, looking for the one that says "Unsecured Network." Jackpot.

"Ahh, found it." One lady said. Then, looking up to me, she said, "Ok, I can take your credit card now, sir." Really? On an unsecured network. Is that PCI Compliant?

I hate to admit, but I went along. I suppose I'm a risk taker... a thrill seeker. Or, maybe I just didn't think there were any hackers on the network at that exact moment. But, it highlights a very important point: free public wifi is not the solution for card processing on-the-go.

This occasion, however, is not the least of the travesties in the special event business. Over the years, I've stood in line at check-in tables while my credit card number was written down on a spreadsheet to be charged later. I've listened as card numbers and other vital PAN data was read over the phone in conspicuously public places. I've even replied to a vendor who emailed me simply asking, "what's your card number and exp date?" As if I was to reply directly back with the information. I decided to call, instead.

If you're on the go, and processing credit cards from mobile locations, the investment in mobile broadband to establish your own, secure, connection to layer 3 would be well worth it. What are some of the best mobile card processing solutions you've used? Please share your recommendations here.

Labels: Broadband, PCI Compliance, PCI Compliant Broadband, Wi-Fi