System and method for two-click validation

A non-transitory computer readable storage medium that stores instructions for improving security of a transaction by utilizing Simple Mail Transfer Protocol (SMTP), the instructions when executed a processor cause the processor to execute a method comprising:

• Receiving an email response message addressed to an e-commerce system from a sender, wherein the email response message is generated in response to activation of a mailto link and the email response message includes a token;
• decoding the token contained in the email response message to determine an email address of a customer, a vendor and a version frame, wherein the version frame distinguishes between token types and behaviors for the transaction;
• authenticating the sender of the email response message as the customer by comparing the email address in the token with an email address of the sender;
• validating the token based on the version frame and the vendor determined;
• and
• sending a validation message to the vendor based on the validating and the authenticating.

A device for improving security of a transaction by utilizing Simple Mail Transfer Protocol (SMTP), the device comprising:

• a communication interface;
• and
• a processor that is communicatively coupled to the communication interface,
• wherein the processor is configured to:
• receive, use the communication interface, an email response message that is addressed from a sender, wherein the email response message is generated in response to activation of a mailto link and the email response message includes a token,
• decode the token contained in the email response message to determine an email address of a customer, a vendor, and a version frame, wherein the version frame distinguishes between token types and behaviors for the transaction,
• authenticate the sender of the email response message as the customer by comparing the email address in the token with an email address of the sender,
• validate the token based on the version frame and the vendor determined, and
• send, using the communication interface, a validation message to the vendor based on the sender being authenticated and the token being validated.