1. When booking a hotel or air ticket online on eLong, the payment can be completed without going through the online banking platform or third-party payment channel or entering a password.

2. This is not a security vulnerability issue. Credit card payment does not require entering a transaction password, which is an international practice. Many domestic online payment websites also choose this payment path: enter personal identity confirmation information and bank card number to pay, and do not require dynamic passwords, transaction passwords, etc. This is a choice made by credit card organizations, merchants and consumers after balancing transaction efficiency and security. eLong itself has set up a fraud prevention team that will conduct internal data audits when users enter information; it will also review the risk of credit card theft through a third-party database based on its constantly updated information. High-risk credit cards will be declined based on review status.

3. All banks in China will send text messages to consumers’ mobile phones as soon as possible after a credit card debit transaction. If consumers find fraudulent use, they should immediately complain to the bank, and the bank will immediately refuse payment or compensate the consumer; consumers should also immediately complain to eLong. After eLong receives the complaint, it will verify with the bank in a timely manner and Contact the merchant to cancel the order and refund the deducted fees. In addition, if a credit card is swiped, the victim only discovers it a few days later, by which time the person who has swiped the credit card has completed the consumption. Consumers should report the case to the public security organs. After verification by the public security organs, eLong is willing to bear the losses of the injured party.