This is a classic catch-22 situation: a company doesn’t have enough money to SECURE their networks, but by the same token they can’t afford a payout if they get compromised. At the same time, they really can’t afford to have a dedicated computer technician, let alone a security consultant. If you are able to explain (in words that don’t make it sound like you’re just fearmongering), an SMB will acknowledge what they need to do to KEEP their store secure and keep RECEIVING payments since following the money will tend to HELP move things along.

This is a classic catch-22 situation: a company doesn’t have enough money to secure their networks, but by the same token they can’t afford a payout if they get compromised. At the same time, they really can’t afford to have a dedicated computer technician, let alone a security consultant. If you are able to explain (in words that don’t make it sound like you’re just fearmongering), an SMB will acknowledge what they need to do to keep their store secure and keep receiving payments since following the money will tend to help move things along.