Abstract: The convenience of online commerce has been embraced by consumers worldwide. However, criminals exploit the vulnerabilities existing in online systems to commit fraud. While, there has been good progress in identifying threats, educating institutional and individual users and identifying countermeasures, there has also been an increase in attack diversity and technical sophistication. Attack on consumer sensitive information has the adverse effect of decreasing consumer confidence in online commerce. Avoidance of security vulnerabilities in online systems requires awareness of typical risks, a good understanding of these vulnerabilities and the existing mechanisms to protect customer sensitive information.