MyPaymentForm never handles any credit card data so it is pretty safe to begin with. There are a few things you should keep in mind when implementing a form on your website though...

Send sensible data

Credit card numbers etc. are never handled by MyPaymentForm. All credit card information is entered on DPS' secure Hosted Payment Page which is a PCI DSS compliant solution.

That being said, any optional transaction data that does get submitted to MyPaymentForm (merchant reference, custom fields etc.) must never contain sensitive information. While MyPaymentForm does not store this information, it is better to avoid the possiblity of a third party intercepting it upon submission.

Recognise abuse

Since MyPaymentForm makes it super easy to accept payments on your website, some preventative measures have been implemented to limit excessive and/or suspicious transaction numbers. If you suspect your form is being abused (it's a good idea to opt for transaction updates via email), you are advised to simply delete your form using the instructions further down.

DPS may be able to provide additional Risk Management functionality as required.

Deleting a form

To delete a form, you can follow the deletion link that is towards the bottom of every transaction update email (if you opted to receive them). Alternatively, open your website code and copy the address that the MyPaymentForm is being submitted to. This will be something like:

<form action="http://www.mypaymentform.com/forms/process/53/hpPX5hXeGT" method="post">

Paste only the address into your web browser and change the word "process" to "delete". For example:

http://www.mypaymentform.com/forms/delete/53/hpPX5hXeGT

When you visit this link, you will need to provide the email address that you entered when you first generated the MyPaymentForm. A link to confirm deletion will be sent to this address.