Trade association warns that web users still not taking security seriously.
New payment service rivals Google Checkout and Paypal.