Payment and Security

This page covers payment security and how money actually moves when you buy a snow blower here: which methods we accept, why your card number never touches our database, what that mysterious pending charge on your statement is, and how to tell a real Canadian equipment retailer from the seasonal fakes that appear every autumn. Payment security is mostly boring architecture, and boring is exactly what you want it to be.

What we accept, and the payment security behind each

Payment security starts with keeping the money in one currency. Everything is charged in Canadian dollars. There is no currency conversion step, no foreign transaction fee from your bank, and no surprise on the statement because the merchant turned out to be offshore.

The last row matters for payment security reasons rather than snobbery. Cheques and wires have no chargeback protection for you, and cryptocurrency has neither chargeback nor a reversal mechanism of any kind. If a snow blower site insists on one of those, that is the single loudest warning sign in online retail and you should close the tab.

Payment security rules apply to trade accounts too. Trade and bulk buyers can arrange invoiced terms after an account review. Talk to us through the contact page rather than trying to force a large order through a consumer checkout, which usually trips a fraud rule and delays you.

Why your card number is not in our database

This is the core of payment security for any online shop and it is simpler than people expect. Your card details never arrive on our server.

At the payment step your browser talks directly to the payment processor over an encrypted connection. The processor validates the card, takes the risk, and returns to us a token: a string with no mathematical relationship to your card number, useful only for charging and refunding that one transaction with that one merchant.

The payment security consequence is worth being blunt about. If somebody compromised this website completely tomorrow, they would find no card numbers, because there are none to find. That is not a promise about our defences, it is a property of the architecture, and it is a far stronger guarantee than any assurance about how carefully we guard a card database.

This design is required rather than optional. The standard is maintained by the PCI Security Standards Council and every merchant accepting cards has to meet it. Handling card data on your own server pushes you into the most onerous compliance tier, which is why almost nobody sensible does it.

What we do store is described in the privacy policy: your name, addresses, contact details and what you ordered. Useful for shipping a machine and honouring a warranty. Useless to a card fraudster.

Encryption, and what the padlock proves about payment security

Payment security should not stop at the checkout, so the whole site runs over HTTPS. Some retailers still encrypt only the payment page, which means a network observer can see every product you browsed before you bought. Encrypting everything closes that.

The padlock in your address bar proves two things and no more: the connection is encrypted, and the certificate matches the domain you are actually on. It does not prove the business is honest. Fraudulent stores get certificates too, free, in minutes. Anyone who tells you a padlock means a site is safe to buy from is giving you bad payment security advice.

Check the domain rather than the padlock. This site is snowblowerscanada.com and nothing else. Not a variant with a hyphen, not a different extension, not a lookalike with a swapped letter. Those exist and they multiply in October.

Pending charges, holds and why the amount moved

The most common payment security worry we hear is not fraud, it is a customer seeing something on their statement they did not expect. Almost always it is an authorisation.

Authorisation is a payment security step, not a charge. When you place an order we ask your bank to authorise the amount, which reserves it against your available balance without moving it. We capture the money, meaning actually take it, when the order is dispatched. Between those two moments the amount shows as pending.

If we never dispatch, we never capture, and the authorisation expires on its own. The timing of that release is set by your bank, not by us, and it is typically three to seven business days. We cannot make it faster, and any merchant claiming they can instantly release a hold is describing something they do not control.

Two pending amounts for one order looks alarming and is nearly always a retry after a soft decline. Only one will ever post. If both post, tell us and we refund the same day. Refund routes and timing are set out in the returns and refunds policy.

Payment security checks, and why an order gets held

Occasionally an order pauses for a manual payment security check. The control exists to protect cardholders, and the person it protects is often not the person placing the order.

Typical triggers: a shipping address in a different province from the billing address, a first order at a high value, several failed attempts in a row, or a billing address that does not match what the issuer holds. None of these implies you did anything wrong, and every one of them is a pattern that also appears in genuine card fraud.

When it happens we email or phone you and ask you to confirm a detail with your issuer. It usually adds hours, not days. We will never ask you for your full card number, your PIN, your online banking password or a photograph of your card, in an email or on the phone. If anybody claiming to be us asks for those, it is not us.

You can reduce the chance of a hold by using the billing address exactly as your bank has it, including the postal code format, and by giving a phone number the freight carrier can reach as described in the shipping and delivery policy.

Chargebacks, disputes and the order to use them

A chargeback is the last resort in the payment security chain, your card issuer reversing a payment. It is a genuine and valuable consumer protection, and it is also a blunt instrument that takes weeks and costs a small retailer a fee whatever the outcome.

Use it when you need it. Card not present fraud, a merchant that has vanished, goods that never arrived from a seller who stopped replying: these are exactly what the mechanism exists for.

Where we ask for a chance first is on the ordinary problems: a machine that arrived damaged, a part that did not fit, a delivery running late. Every one of those we will resolve in a day or two under the returns and refunds policy, where a chargeback takes six weeks and leaves you without a machine in the meantime.

If you do file, we will supply the carrier proof of delivery and the order record to your issuer, because that is what the process requires. We do not treat a chargeback as hostile, and it never affects your ability to buy from us again. The wider dispute route, including provincial consumer offices, is described in the terms and conditions.

How to spot a fake snow blower store

The weakest payment security in this category is not technical, it is a fake shop. Every autumn a crop of fraudulent equipment sites appears, buys advertising against the same searches as legitimate retailers, and disappears in January. They share a recognisable set of traits, and none of the traits require technical skill to spot.

• The price is impossible. A 28 inch two stage machine at four hundred dollars does not exist. Our snow blower price guide sets out what each class genuinely costs so you have a reference.
• Payment is by e transfer, wire or crypto only. All three are irreversible. This is the strongest single signal.
• No physical address and no phone number. Or an address that turns out to be a car park.
• Stock photographs with no brand, model or specification. Real retailers publish clearing width, engine size and stage count because customers ask.
• Every model in stock in January. Nobody has full stock after the first storm.
• Policy pages that are copied boilerplate naming a state in the United States or a country that has nothing to do with the business.

If you have already paid one, contact your bank immediately, and report it. The Financial Consumer Agency of Canada publishes guidance on what your bank must do, and the Competition Bureau Canada takes reports of deceptive marketing practices. Speed matters enormously with card fraud.

Payment security on your own side

Half of payment security is out of our hands. Most account compromises we see anywhere in retail come from a reused password, not from a breached merchant. The strongest thing you can do costs nothing.

Use a unique password here that you use nowhere else. If you use a password manager, let it generate one and never look at it again. If you do not, three unrelated words are stronger than a short string of symbols and far easier to remember.

You do not need an account to buy from us. Guest checkout is available and it leaves nothing behind to compromise. An account is only useful if you expect to reorder parts, in which case having your machine on file genuinely speeds things up.

The best payment security habit costs nothing: turn on transaction alerts with your bank. Interac and the major card issuers all offer them free, and Interac publishes guidance on transfer safety that is worth ten minutes. An alert on your phone is how you catch a fraudulent charge in an hour rather than at the end of the month.

Related pages: the privacy policy for what we store and for how long, the cookie policy for the one third party the checkout introduces, the warranty policy for what happens after the money has moved, and the accessibility statement if the payment step itself is difficult to use.

Common questions