A method for securing online transactions, in a computing system that includes a processor, a control module, data storage, and input/output devices including a network interface device, and an operating system, the method comprising: detecting, by the control module, a start of an online financial transaction between a user-controlled online transaction application executing on the computing system and a remote payment service; then assessing, by the control module, a risk level of conducting the financial transaction based on a vulnerability assessment and on present condition of the computing system; then executing, by the control module, a protected environment module configured to apply a selected degree of protection of the user-controlled online transaction application from being compromised by malware; and executing, by the control module, a protected data input module configured to apply a selected degree of protection to limit access by unauthorized processes to an input sequence via at least one of the input/output devices while permitting the input sequence to be accepted by an authorized process; and executing, by the control module, a safe data transfer module configured to apply a selected degree of protection to determine whether a connection with the remote payment service is a correct connection with a reputable party; and setting, by the control module, an initial degree of protection for each of the protected data input module, the protected environment module, and the safe data transfer module based on the risk level; and then in response to a user response, adjusting, by the control module, a protection scheme for at least one of the protected data input module, the protected environment module, and the safe data transfer module based on the risk level to a different degree of protection than the initial degree of protection for each of the at least one corresponding modules, wherein the control module is configured with a database containing a hierarchy of protection settings and adjusting the protection scheme includes accessing the hierarchy of protection settings that represent each item of protective functionality facilitated by the protected data input module, the protected environment module, and the safe data transfer module in terms of its degree of protection and its burden on user experience of using the computing system, and wherein the protection settings further comprise substitute functions that are mapped to primary functions, wherein the substitute functions are enabled or have their functionality increased to improve security in response to a call for disablement or a reduction in functionality of the corresponding primary function. detecting, by the control module, a start of an online financial transaction between a user-controlled online transaction application executing on the computing system and a remote payment service; then assessing, by the control module, a risk level of conducting the financial transaction based on a vulnerability assessment and on present condition of the computing system; then executing, by the control module, a protected environment module configured to apply a selected degree of protection of the user-controlled online transaction application from being compromised by malware; and executing, by the control module, a protected data input module configured to apply a selected degree of protection to limit access by unauthorized processes to an input sequence via at least one of the input/output devices while permitting the input sequence to be accepted by an authorized process; and executing, by the control module, a safe data transfer module configured to apply a selected degree of protection to determine whether a connection with the remote payment service is a correct connection with a reputable party; and setting, by the control module, an initial degree of protection for each of the protected data input module, the protected environment module, and the safe data transfer module based on the risk level; and then in response to a user response, adjusting, by the control module, a protection scheme for at least one of the protected data input module, the protected environment module, and the safe data transfer module based on the risk level to a different degree of protection than the initial degree of protection for each of the at least one corresponding modules, wherein the control module is configured with a database containing a hierarchy of protection settings and adjusting the protection scheme includes accessing the hierarchy of protection settings that represent each item of protective functionality facilitated by the protected data input module, the protected environment module, and the safe data transfer module in terms of its degree of protection and its burden on user experience of using the computing system, and wherein the protection settings further comprise substitute functions that are mapped to primary functions, wherein the substitute functions are enabled or have their functionality increased to improve security in response to a call for disablement or a reduction in functionality of the corresponding primary function.