Clear Path step · Business · Your industry's rules and risks
Secure the giving platform and watch for card testing
Why it matters: Criminals use donation forms to test stolen cards with small charges, which brings fees and can get your account suspended.
On your path if you picked “Nonprofit or faith community” for “What's your industry?”.
Do it
- Confirm your processor handles all card data.
- Turn on MFA for every giving platform admin.
- Turn on CAPTCHA or bot protection and velocity limits on donation forms.
- Set alerts for unusual volumes of small gifts.
Check it worked: Online giving runs through a compliant processor, admin accounts have MFA, donation forms have bot protection, and someone watches for floods of tiny donations.
Simply put
Card testers use donation forms like a free vending machine, checking stolen cards with tiny gifts. Bot protection and someone watching for floods of small donations avoid the fees and keep your account in good standing.
In detail
Check the payout bank account on the platform each month; changing it is the quiet way to steal recurring gifts.
Points toward the Long View: giving that reaches your cause, with payout details checked every month.