Security in E-Commerce

Since buyers and sellers do business without seeing each other in electronic commerce, they need to take additional precautions to ensure mutual trust. First of all, the buyer and seller parties want to be sure of each other's identities. This need is the reason why digital signatures and digital certificates were developed. Through these, the two parties can be sure of each other's identity. Since the legal infrastructure regarding digital certificates has not yet been established in Turkey, individual users on the buyer side have not yet started using digital certificates, and selling sites have not required this to their customers. For this reason, sellers cannot check the identities of buyers. However, our bank has imposed this condition on companies that want to sell online using Garanti Bank's payment system, thus preventing consumers from having doubts about the identity of the site they are shopping on.

Another issue that needs to be evaluated regarding security in electronic commerce is the credit card etc. that buyers have to give to shop on electronic commerce sites. It is the risk that information may be intercepted by third parties while being transmitted over the Internet. As it is known, especially in sales made over the phone (placing an ad in the newspaper, catalog sales, etc.), the credit card number and expiration date are sufficient for shopping. Therefore, protecting this information is of great importance for the development of electronic commerce.

However, in electronic commerce, the risk of credit card information falling into the hands of others is much less than in daily life. When making payments in daily life, the credit card is given to someone else, so the confidentiality of the information on the credit card is largely eliminated. Companies that provide virtual shopping services commonly use security standards such as SSL and SET to ensure the security and confidentiality of credit card information. Thanks to security systems based on the principle of encrypting and transferring information during the data flow between the user, the workplace and the bank, it is prevented that the information can be decrypted (i.e. used) if it falls into the hands of another person.