Initially posted on Quora What is the best way to shop online in or from Pakistan? Updated Mar 2015 since the information was out dated.
I have done a lot of online purchases within Pakistan through credit cards. I was also a Product Manager for a company that used to route all these transactions on the internet in Pakistan. Hence let me explain both sides of the story.
90% people fear that their credit card data is not secured and someone or the website itself will get access to it and might abuse it in future. 10% fear that their purchase will not be completed successfully i.e. what they purchase will not be given/delivered to them.
Credit Cards & Security
To address the first part of the problem, the biggest problem in Pakistan is lack of 3D security which means that VISA and MasterCard can only verify your credit card details on the internet and not the person using it. Generally online fraud is due to this. If 3D security is being used then the VISA/MasterCard network actually directs you to the bank where they ask you to register (once) and enter a security key which you know. Afterwards, everytime you are purchasing online, the 3D security mechanism verifies the information with you. All websites that use 3D security will have Verified by Visa or MasterCard SecureCode logo or seal on it.
UBL credit cards provide 3D security through Verified By Visa (VBV) which makes it a good credit card to use on any website with VBV.
To circumvent the above problem, Bank Alfalah, devised the solution of blocking their cards by default for internet. You can get them activated for Rs. 100 before making a transaction. Personally, I prefer this and have used it effectively. I have never been surprised by any transaction. Now nearly all credit cards issued in Pakistan do this. This ensures that those who do not shop online are safe. Those who do shop online have the baseline knowledge of risk, fraud, and online security.
For all websites, you need to ensure that the security trifecta is in place when you are entering credit card information. This is:
- Browser address bar display HTTPS and the website shows Verisign (or Norton Secured) logo. In this day and age, the bar should be green.
- The website displays the VBV, MasterCard SecuredCode logo or simple card logos.
- There is a box for 3 digit security code.
- If by any chance you are buying online via a card or even via your online bank account (IBFT) and sitting in a public place with open Wifi then please use a VPN to ensure your entire transaction is secure. Do not for a minute think that only your card info needs to stay safe, your own information too needs to be safe and this includes your name, email address, password, address etc.
Thankfully, now we have the likes of Kaymu.pk, Daraz.pk where many people are now able to shop online as well as setup their own stores. These points below still apply regardless where you’re shopping from.
- Websites that display Verisign Seal (soon to be Norton Secured) do not save your card information in plain text nor do they transmit it in plain text. The information is encrypted via SSL and transmitted over the internet in a secure tunnel linking to gateways which are the same used for physical credit card transactions. If the information is saved within a database then it is in an encrypted format. No one can query the Database and get plain text replies, unless they decrypt the fields first. And mind you there is generally only one or two people in the entire company who know how to do this hence it remains very secure as any theft or illegal use can be traced back to these individuals.
- Similarly, for internet transactions the security code (at the back of your card) is always required which is NEVER SAVED ANYWHERE. Without this no one online accepts a credit card.
- Expiry date is also not saved in most instances.
- All the above information is never taken on the website you are shopping unless they are a payment processor as well (e.g. Amazon is both a payment processor now and a shopping site).
Shopping from Pakistan on International Sites
To shop on international websites such as Amazon.com, BestBuy, etc, you need a card that can be used online. Unfortunately, Debit Cards issued in Pakistan are blocked from online usage however there are the likes of Prepaid cards such as UBL Wiz and MCB Lite that can be preloaded and used for international transaction. If however you are like me, then you may be interested in a long term solution that gives you security as well as allows you to pay online via multiple currencies. I’m speaking about Virtual Debit and Prepaid cards that can be preloaded easily.
Billing Vs. Shipping Address
The billing address is where your card is registered. With virtual cards, you can edit the billing address with ease which is a huge plus point. The Shipping address is the address where you send your purchased product. Many websites employ verification methods to ensure that the Cardholder’s address is verified. With a virtual card, this is easy.
International Address for Products that cannot be delivered to Pakistan
Many of us have suffered from this. All you need is a great parcel forwarding service to ensure that your packages are received and checked before being sent to you in Pakistan. I have successfully used Stackry for this service and there is a great post of parcel forwarding services over on TechVise. The post is regularly updated so be sure to check it out.
Other Things to Take Care of
You need to also ensure that the security trifecta is in place when you are entering credit card information. You might have access to VBV / MasterCard SecureCode however, you will always get charged in USD. If for some reason your transaction is being done in GBP or Euro then you will get a double whammy with the conversion and may end up paying about 5% more by the time your transaction is billed in PKR.
It is safe as long as you make sure that you are being informed at every step of the way. A website with noble intentions will always inform you before sending you to another website, about security, about its data protection procedures and will have all the relevant logos.