Speaking of which, how do you know?

Not that many people fall for phishing e-mails, for example. It's somewhere between 10-30% based on email type, if that's anyhting to go by.

I couldn't find any research on purely web based phishing.

I'm not talking about people falling for phishing, I'm talking about legitimate customers getting irritated or suspicious and abandoning the purchase after being bounced to another domain to put in their credit card details.

Our conversion rate got much better when we switched to a single-page purchase flow. My theory is that because "real" sites like Amazon don't force users over to a separate bank page, users have come to expect that experience. Redirecting out to Paypal (or whatever) marks you as a "disreputable" fly-by-night operation in users' minds.

I guess it depends on the country. Where I'm from, people were used to push payments (like free wire transfer), or cash on delivery payments, when shopping online. Banks worked hard to change that in the last decade+, so now debit cards are used much more than before. Credit cards are used very little (10% of online purchases).

I only guess that this leads to a feeling where when you give a card info to someone, it's like giving them access to your bank account. But 1 in 2 users can't tell a difference between debit and credit, so who knows.

Users don't like giving card info to companies and almost no companies, including very big online stores, handle card info themselves, or use single-page purchase flow. I rememeber only two local websites that didn't redirect me to some payment gateway in the last 10 years. Amazon is not a thing here at all.