talk2me006: Halima! is like u have enough time to write all those things over there

talk2me006: Halima! is like u have enough time to write all those things over there

soloqy:

Meaning what? They are critical and pertinent issues she raised.

Small time people like you will open threads and shout *So and So payment processors are killing my business* or *Orishirishi payment processors are a fraud, they have taken my money since 1912*

Why not applaud someone who, from this post, clearly knows the terrain, to point these things out.

Its either they sit up and fix things or they pack up if they feel they have been exposed.

aterad: Halima thanks for the info.pls i need to contact u, pls send ur phone contact to my mail (oludareman@yahoo.com) so dat i can call u. Thanks

puzuwe:
We concentrate our security policies in our clients accounts , when logged in.

PAYFAS.COM FRAUD PREVENTION POLICIES
-------------------------------------
Phone Verification and Validation.

To ensure safety at all times we have devised a system we call phone verification as all transactions are monitored on the account holders mobile phone to ensure that he/she/company gets alerts at all times.
Bank Account Verification

Bank Account Verification enhances the overall security of your account and our network, it allow us to maintain our strict compliance with anti-money laundering and anti-terrorist funding legislation.
128/256-bit SSL Encryption

256-bit Security Socket Layer encryption is our guarantee that you can trust us with your personal details.

Dual Core: Puzuwe, there's still a lot of cleaning to do on that site other than what the OP pointed out (which you have cleaned without even a Thank you).

Here's one of the many more:
https://payfas.com/helpdesk/knowledgebase.php?category=3

That link has two occurrences of the word "voguepay", as it was a copy paste job. Voguepay should sue you.

halimat1985:
Will mail u shortly.

halimat1985:
The owners of this payment processor should provide answers to the following questions. If they claim to be a payment processor, at least they should get the basics right.

Payfas is using positive ssl which costs N100 per month. Its even the cheapest on namecheap.
Why would a real payment processor not be able to afford a sensible security certificate?

Payfas is not even among the top 5,000 websites in Nigeria on alexa and not among the top 2 Million in the world.
Why? Is it just starting up or is it that it has no history or no users?

According to Alexa, payfas has no business websites linked to it. The only 2 sites linked to it are nairaland and domainprcheck.com probably because of the posts you have on them. I know they own jobstadia.com, does that mean they are not using their own payment processor? Is no one really using paylfas or is it a scam?


Payfas is sharing a server with sites like jobstadia.com instead of having a server dedicated to it for something as delicate as payment processing. Is it that the owners cant afford a dedicated server for payfas?



Payfas is using the free and vulnerable version of Hesk support tickets. They also cannot afford a paid support ticket script despite the security loopholes on the free version of hesk. Are they inviting hackers or are they just plain ignorant? Or is it too much to program their own if they cant buy a supported version?

Why did you launch a site with so many errors:
https://www.payfas.com/images/howitworks/register_files/like_data/
https://www.payfas.com/images/
https://www.payfas.com/images/howitworks/
https://www.payfas.com/images/howitworks/register_files/

I do not want to mention the sensitive flaws on your site so i wont be giving out free entry points to hackers. But you should fix the above listed ASAP.
Did you not have a security consultant or you just developed a payment processor without security in mind?


The attached images shows where payfas.com have copied content ( plagiarism ) from other payment processors: Voguepay.com, Simplepay4u.com and payza.com. Shouldn't you at least edit your copy and paste job?

If a blog or bulk sms site or hosting site does this king of poor job, they will be criticized. What are we supposed to do to you now?