A number of websites do not enforce adequate security for online payments, leading to a greater risk of identity theft and fraud, according to analysis from Deloitte Enterprise Risk Services.