How do you tell if the Internet connections are secure?
Many web sites use Secure Sockets Layer (SSL) or Secure Electronic Transaction (SET) technology to encrypt the credit card information that you send over the Internet. These sites usually inform you that they are using this technology. Alternatively, check if the web address on the page that asks for your credit card information begins with https:// instead of http:// . If so, this technology is in place.

• Your browser displays the icon of a locked padlock at the bottom of the screen (Netscape Navigator, version 4.0 and higher)
• Your browser displays a broken key at the bottom of the screen (earlier version of Netscape Navigator)
• Your browser displays the icon of a lock on the status bar (Microsoft Internet Explorer)

What to watch out for when you made online payment?
You should only give your password and credit card number in a secure connection on a web site, not in an email. Theft of identify, in which someone get access to your bank account or gets credit cards or loans in your name, is a growing problem, and you should carefully guard personal information that might allow a thief to impersonate you.

Do you use different passwords?
If you use a password to log on to your network or computer, use a different password for others. You may want to create a special password for particularly sensitive sites, such as your banking site.

How did you choose your password?
The best passwords are not your address, birth date, phone number, identity card number, or recognisable words. Choose a string of at least five letters, numbers, and punctuation marks. One easy way to create a memorable password is to take the first letter of each word in an expression or song lyric, and add some numbers and punctuation marks. For example, PGR4E! is derived in part from “PanGlobal Rocks for ever!”.

How should you record your password?
Don't write down any password near your computer where someone could see it. If you do record it somewhere, reverse the order of the characters or transpose some letters or numbers.

How to protect yourself from theft of identity? Know who you are dealing with!
Be very careful about responding to an email, phone call, fax or letter from anyone who asks for your password, identity card number, birth date, bank account, credit card number, mother's maiden name, or other personal information. To verify that the person contacting you really does work for the seller, call and request to speak to that person directly. Except for your password and credit card number. And, you should only give your password and credit card number in a secure connection on a web site, not in an ordinary email.

How can you avoid viruses?
If you receive an unsolicited commercial message, you should not open any attached file whose name ends in “.exe”. Clicking on such files could activate a computer virus that might affect the operation of your computer and/or damage the information stored on your computer. You can also protect yourself against viruses carried by email or by computer files that you have received on a floppy disk, by purchasing and installing on your computer or network a virus-protection programme.

How can you protect against unauthorised use of your credit card account number?
Carefully and promptly check your credit card statements when they arrive. If you identify any irregularities, you should immediately bring these to the attention of the issuer of the credit card by telephone and in writing.

Do you need a separate credit card for online transaction?
Consider dedicating a single credit card for online purchases. It will be easier for you to review your records. Also, should the security of this number be compromised, you'll still be able to use your other credit cards.

Is the seller be at the same web address tomorrow?
With a physical store or a catalog, you know where to turn to if you run into problems. But in cyberspace, all you may have is a web address. Look on the site for a street address and phone number. Be cautious if the seller is only contactable via a post office box or mobile phone number.

Is the seller still in business?
You might wish to telephone or send an email to be sure the seller is still in operation, particularly if the web site's material appears to be old or out of date.

What do I do if I think I've been “phished”?
If you suspect that your personal information has been “phished” by an unknown source, you should assume that you are the victim of an identity thief, and you should take immediate self defense measures. Here's are some recommendation to you:

• Make a police report and inform authorities such as MIMOS and Bank Negara Malaysia
• If you were lured by a “spoof” of a genuine company or organisation, get in touch with the real company immediately. They may be able to help you minimise the damage.
• If you provided your credit card information as part of the “phishing” scheme, contact the customer service department of the bank that issued your credit card and ask to speak to someone in risk management or loss prevention.