Abstract
Trust seals, such as the VeriSign and TRUSTe logos, are widely used to indicate a website is reputable. But how much protection do they offer to online shoppers? We conducted a study in which 60 experienced online shoppers rated 6 websites – with and without trust seals - based on how trustworthy they perceived them to be. Eye tracking data reveals that 38% of participants failed to notice any of the trust seals present. When seals were noticed, the ratings assigned to each website were significantly higher than for the same website without a seal, but qualitative analysis of the interview data revealed significant misconceptions of their meaning (e.g. “presence of seals automatically legitimizes any website”). Participants tended to rely on self-developed – but inaccurate – heuristics for assessing trustworthiness (e.g. perceived investment in website development, or references to other recognizable entities). We conclude that trust seals currently do not offer effective protection against scam websites; and suggest that other mechanisms – such as automatic verification of authenticity are required to support consumers’ trust decisions.
Keywords
- trust signaling
- e-commerce
- trust seals
This is a preview of subscription content, access via your institution.
Buying options
Tax calculation will be finalised at checkout
Purchases are for personal use only
Learn about institutional subscriptionsPreview
Unable to display preview. Download preview PDF.
References
The UK Cards Association, http://www.financialfraudaction.org.uk/cms/assets/1/be%20card%20smart%20release%20final%20-%2024%20nov%2011%20(nfa).pdf
Riegelsberger, J., Sasse, M.A., McCarthy, J.D.: The mechanics of trust: a framework for research and design. International Journal of Human-Computer Studies 62(3), 381–422 (2005)
Financial Fraud Action UK, http://www.financialfraudaction.org.uk/cms/assets/1/fraud%20figures%20release%2010%20mar%2010.pdf
DirectGov, UK, http://www.direct.gov.uk/en/Governmentcitizensandrights/Consumerrights/Howtocomplainaboutgoodsandservices/DG_196229
Publicservice.co.uk, http://www.publicservice.co.uk/news_story.asp?id=18293
Retail Digital, http://www.retail-digital.com/consumer_trends/top-retail-scams
BBC News, http://news.bbc.co.uk/2/hi/8392600.stm
UK Cards Association, http://www.theukcardsassociation.org.uk/media_centre/press_releases_new/-/page/1323/
http://www.internetretailer.com/2011/01/18/fraud-losses-fall
Hu, X.R., Lin, Z.X., Zhang, H.: Myth or reality: effect of trust promoting seals in electronic markets. In: Proceeding of the Eleventh Annual Workshop on Information Technologies and Systems (WITS), New Orleans, Louisiana, pp. 65–70 (2001)
Resnick, P., Zeckhauser, R., Friedman, E., Kuwabara, K.: Reputation systems: facilitating trust in internet interactions. Communications of the ACM 43(12), 45–48 (2000)
Kim, D., Ferrin, D., Rao, H.: A trust-based consumer decision-making model in electronic commerce: The role of trust, perceived risk, and their antecedents. Decision Support Systems 44(2), 544–564 (2008)
Ba, S., Whinston, A.B., Zhang, H.: Building trust in online auction markets through an economic incentive mechanism. Decis. Support Syst. 35(3), 273–286 (2003)
Kimery, K.M., McCard, M.: Third-party assurances: mapping the road to trust in e-retailing. Journal of Information Technology Theory and Application 4(2), 63–82 (2002)
Rifon, N.J., LaRose, R., Choi, S.M.: Your Privacy Is Sealed: Effects of Web Privacy Seals on Trust and Personal Disclosures. Journal of Consumer Affairs 39, 339–362 (2005)
Bakos, J.Y., Dellarocas, C.: Cooperation without enforcement? A comparative analysis of litigation and online reputation as quality assurance mechanisms. In: Proc. Internat. Conf. In-form. Systems, Barcelona, Spain, pp. 127–141 (2002)
Peterson, D., Meinert, D., Criswell II, J., Crossland, M.: Consumer trust: privacy policies and third-party seals. Journal of Small Business and Enterprise Development 14(4), 654–669 (2007)
Wash, R.: Folk models of home computer security. In: SOUPS 2010: Proceedings of the 6th Symposium on Usable Privacy and Security, SOUPS 2010, pp. 1–16. ACM, New York (2010)
Tan, Y., Thoen, W.: Toward a Generic Model of Trust for Electronic Commerce. International Journal of Electronics Commerce 5, 61–74 (2000)
Nielsen, J., Molich, R., Snyder, S., Farrell, C.: E-Commerce User Experience:Trust. Nielsen Norman Group, Fremont (2000)
Jarvenpaa, S., Tractinsky, N., Vitale, M.: Consumer trust in an internet store. Information Technology and Management 1(1-2), 45–71 (2000)
Hoffman, D.L.: Building consumer trust online. Communications of the ACM 42(4), 80–85 (1999)
Bolton, G.E., Katok, E., Ockenfels, A.: How Effective Are Electronic Reputation Mechanisms? An Experimental Investigation. Manage. Sci. 50(11), 1587–1602 (2004)
Ratnasingam, P., Pavlou, P.A.: Technology Trust in Internet-Based Interorganizational Electronic Commerce. Journal of Electronic Commerce in Organizations 1(1), 17–41 (2004)
Akerlof, G.: The market for lemons: quality uncertainty and the market mechanism. Quarterly Journal of Economics 84(3), 488–500 (1970)
Handy, C.: Trust and the Virtual Organization. Harvard Business Review 73(3), 40–50 (1995)
Shneiderman, B.: Designing trust into online experiences. Communications of the ACM 43(12), 57–59 (2000)
Stajano, F., Wilson, P.: Understanding scam victims: seven principles for systems security. Communications of the ACM 54(3), 70–75 (2011)
Riegelsberger, J., Sasse, M.A., McCarthy, J.D.: The researcher’s dilemma: evaluating trust in computer-mediated communication. Int. J. Hum.-Comput. Stud. 58(6), 759–781 (2003)
Bacharach, M., Gambetta, D.: Trust as Type Detection. In: Castelfranchi, C., Tan, Y. (eds.) Trust and Deception in Virtual Societies, pp. 1–26. Kluwer, Dordrecht (2001)
Egger, F.N.: Affective Design of E-Commerce User Interfaces: How to maximise perceived trustworthiness. In: Proceedings of International Conference on Affective Human Factors Design, pp. 317–324 (2001)
Kirlappos, I., Sasse, M.A.: Security education against phishing: A modest proposal for a major re-think. IEEE Security and Privacy, 99(preprints) (2011)
Twyman, M., Harvey, N., Harries, C.: Trust in motives, trust in competence: Separate factors determining the effectiveness of risk communication. Judgment and Decision Making 3, 111–120 (2008)
Google Good to Know, http://www.google.co.uk/goodtoknow/online-safety/shopping/
Stay Safe, http://www.staysafeonline.org/
DirectGov UK, http://www.direct.gov.uk/en/Nl1/Newsroom/DG_180506
DirectGov UK, http://www.direct.gov.uk/en/Governmentcitizensandrights/Consumerrights/Protectyourselffromscams/DG_195960
Harvey, N., Harries, C., Fischer, I.: Using advice and assessing its quality. Organizational Behavior and Human Decision Processes 81, 252–273 (2000)
Action Fraud, UK, http://www.actionfraud.org.uk/festival-lovers-must-beware-of-ticketing-fraud-mar11
Strauss, A., Corbin, J.: Basics of Qualitative Research: Techniques and Procedures for Developing Grounded Theory. SAGE publications, London (1998)
Edelman, B.: Adverse selection in online ”trust” certifications. In: Proceedings of the 11th International Conference on Electronic Commerce (ICEC 2009), pp. 205-212. ACM, New York (2009)
Verisign: Report Seal Misuse, https://www.verisign.com/support/contact/seal-abuse/index.html
TRUSTe, http://www.truste.com/consumer-privacy/comparing-web-privacy-seals
Beautement, A., Sasse, M.A., Wonham, M.: The compliance budget: managing secu-rity behaviour in organisations. In: NSPW 2008: Proceedings of the 2008 Workshop on New Security Paradigms, pp. 47–58 (2008)
Herley, C.: So long, and no thanks for the externalities: The rational rejection of Security advice by users. In: Proceedings of the New Security Paradigms Workshop 2009, pp. 133–144 (2009)
Whitten, A., Tygar, J.D.: Why Johnny can’t encrypt: a usability evaluation of PGP 5.0. In: Proceedings of the 8th Conference on USENIX Security Symposium (SSYM 1999), vol. 8, p. 14. USENIX Association, Berkeley (1999)
GHD Repair, http://www.ghd-repair.co.uk/fake_ghds.html
Ebay, http://pages.ebay.com/help/account/securing-account.html
SOLID Authentication, https://www.solidauthentication.com
Wu, M., Miller, R.C., Garfinkel, S.L.: Do security toolbars actually prevent phishing attacks? In: Grinter, R., Rodden, T., Aoki, P., Cutrell, E., Jeffries, R., Olson, G. (eds.) Proceedings of the SIGCHI Conference on Human Factors in Computing Systems (CHI 2006), pp. 601–610. ACM, New York (2006)
Author information
Authors and Affiliations
Editor information
Editors and Affiliations
Rights and permissions
Copyright information
© 2012 Springer-Verlag Berlin Heidelberg
About this paper
Cite this paper
Kirlappos, I., Sasse, M.A., Harvey, N. (2012). Why Trust Seals Don’t Work: A Study of User Perceptions and Behavior. In: Katzenbeisser, S., Weippl, E., Camp, L.J., Volkamer, M., Reiter, M., Zhang, X. (eds) Trust and Trustworthy Computing. Trust 2012. Lecture Notes in Computer Science, vol 7344. Springer, Berlin, Heidelberg. https://doi.org/10.1007/978-3-642-30921-2_18
Download citation
DOI: https://doi.org/10.1007/978-3-642-30921-2_18
Publisher Name: Springer, Berlin, Heidelberg
Print ISBN: 978-3-642-30920-5
Online ISBN: 978-3-642-30921-2
eBook Packages: Computer ScienceComputer Science (R0)