Sorry about the long post but I think I should outline the situation fully. My mum was purchasing anti-virus software online and was asked for her details and at the end she was asked to enter her credit card details which she did. She clicked on what she thinks was the "continue" button (does it matter if it was the "submit" button?) and was advised that she was proceeding to an unsecured website and did she want to proceed. She said that she did not. We assumed that this was the end of the matter until she received an e-mail thanking her for her purchase. The product she was billed for was more expensive than the product she was intending to buy. Nothing was downloaded and she does not have the anti-virus software. She contacted her credit card company (mastercard) and after being transferred from pillar to post the disputes section told her once she entered her details she had authorised the payment (despite the fact that the payment taken was larger in any event) however her argument is that when she was asked if she wanted to proceed she said she did not. What should she do now?