This is not illegal, however it is against every credit card regulation in the book if your friend is using an IPSP or third party aggregator. Actually if he's using his own merchant account he is supposed to be using a secured page.
I'm sure that Visa would love to terminate his account and any others doing this.
|