{"id":91467,"date":"2024-04-23T05:38:40","date_gmt":"2024-04-23T05:38:40","guid":{"rendered":"https:\/\/feedzai.com\/?p=91467"},"modified":"2024-05-03T14:31:57","modified_gmt":"2024-05-03T14:31:57","slug":"card-not-present-fraud","status":"publish","type":"post","link":"https:\/\/feedzai.com\/blog\/card-not-present-fraud\/","title":{"rendered":"Why Card Not Present Fraud is Surging & How to Fight Back"},"content":{"rendered":"
[vc_row row_height_percent=”0″ override_padding=”yes” h_padding=”2″ top_padding=”1″ bottom_padding=”2″ overlay_alpha=”50″ gutter_size=”3″ column_width_percent=”100″ shift_y=”0″ z_index=”0″][vc_column width=”1\/1″][vc_row_inner][vc_column_inner width=”1\/12″][\/vc_column_inner][vc_column_inner width=”10\/12″][vc_single_image media=”91469″ media_width_percent=”100″][\/vc_column_inner][vc_column_inner width=”1\/12″][\/vc_column_inner][\/vc_row_inner][vc_row_inner][vc_column_inner column_width_percent=”100″ gutter_size=”3″ overlay_alpha=”50″ shift_x=”0″ shift_y=”0″ shift_y_down=”0″ z_index=”0″ medium_width=”0″ mobile_visibility=”yes” mobile_width=”0″ width=”2\/12″][\/vc_column_inner][vc_column_inner width=”8\/12″][vc_custom_heading heading_semantic=”h3″ text_size=”h3″ text_weight=”400″ uncode_shortcode_id=”110148″]Fraudsters are flying high on card-not-present fraud attacks, which are estimated to result in $200 billion in losses by 2025. Banks need a strong card-not-present (CNP) fraud prevention<\/a> strategy to help keep eCommerce safe for customers and their bottom lines.\u00a0<\/span>[\/vc_custom_heading][vc_column_text uncode_shortcode_id=”930740″]<\/p>\n Card-not-present fraud is a sneaky crime where criminals use stolen card information to make unauthorized purchases online, by mail, or over the phone. By collecting stolen credit or debit card information, including CVV numbers), fraudsters do not need a physical card nor present one to a merchant for verification to buy goods or services.<\/span><\/p>\n CNP fraud is a significant concern in today’s digital world, where online shopping reigns supreme. Customers no longer have a real-life person to physically check their card at the point of sale, meaning criminals can make illicit and illegal purchases without disruption.<\/span><\/p>\n As customers shop increasingly online, card-not-present fraud is expected to rise sharply. Recent <\/span>data<\/span><\/a> shows that 57% of customers said they did more than half of their shopping online following the pandemic, a large jump from the 31% who said the same thing before the pandemic.<\/span>[\/vc_column_text][vc_single_image media=”130968″ media_width_percent=”100″ uncode_shortcode_id=”300565″ media_link=”url:https%3A%2F%2Fhubs.la%2FQ02tMTrj0|target:_blank”][vc_column_text uncode_shortcode_id=”192437″]Losses from eCommerce-based CNP fraud are expected to reach a staggering <\/span>$200 billion by 2025<\/span><\/a>. The trend is being observed in multiple global markets. For example, CNP fraud accounts for the highest share of <\/span>unauthorized fraud losse<\/span><\/a>s in the UK at \u00a3395.7 million. Meanwhile, Latin America has seen some of the <\/span>highest rates of CNP fraud transactions<\/span><\/a> since 2020.\u00a0<\/span><\/p>\n The rate of CNP fraud soared due to the exponential rise of online shopping during the pandemic, mixed with efforts to serve unbanked and underbanked populations. Banks need card-not-present fraud prevention solutions to keep their customers safe while protecting themselves from lost revenue due to chargebacks.<\/span>[\/vc_column_text][vc_single_image media=”131827″ media_width_percent=”100″ uncode_shortcode_id=”393019″ el_class=”hide-in-desktop-tablet”][vc_single_image media=”131823″ media_width_percent=”100″ uncode_shortcode_id=”815254″ el_class=”hide-in-mobile”][vc_column_text uncode_shortcode_id=”180465″]<\/p>\n Here are the three factors driving CNP fraud, plus four solutions for banks to implement card-not-present fraud solutions.<\/span><\/p>\n One of digital banking\u2019s top selling points is how easy it is for consumers to access and transact. Fraudsters are also flocking to the digital banking arena for the same benefits\u2014although for more sinister reasons.\u00a0<\/span><\/p>\n Digital banking has made it easier for fraudsters to commit transaction fraud at scale while facing few consequences. Fraudsters can obtain credit card or debit card information \u2013 including credit card numbers, CVVs, and billing addresses \u2013 under false pretenses or purchase stolen credentials on the dark web.\u00a0<\/span><\/p>\n What\u2019s most troubling is the speed at which fraudsters can operate in the digital banking environment. Fraudsters can make hundreds of CNP fraud attempts in very little time, putting in little effort and gaining considerable rewards. Even if they only succeed two or three times, they yield significant benefits with few, if any, consequences from law enforcement.\u00a0<\/span><\/p>\n Fraudsters have a wealth of CNP schemes available to them and aren\u2019t discouraged by failure. That\u2019s a dangerously potent combination for financial institutions (FIs) to address.\u00a0<\/span><\/p>\n A one-size-fits-all approach to fighting fraud adds unnecessary friction for legitimate customers and risks driving them to another FI. Segmentation solutions can ensure that FIs employ different monitoring methods for different types of customers.<\/span><\/p>\n Customer segmentation can define customers within an established risk profile. For example, you can split risk profiles into high, medium, or low risk based on how much they typically spend regularly. Every bank should segment clients based on its own risk appetite, products and services, and the type of customers it serves.<\/span><\/p>\n Segmentation considers a customer\u2019s industry, spending patterns, history, and profession to establish their level of risk. By understanding how much a customer normally spends per month, banks can more accurately flag unusual patterns as signs of a CNP attack.<\/span><\/p>\n The speed of payments also works in fraudsters\u2019 favor. Instant payment schemes and new payment types launched in many regions enable fraudsters to make faster transfers. In LATAM, this includes <\/span>PIX<\/span><\/a> and <\/span>Boleto Banc\u00e1rio<\/span><\/a> in Brazil, <\/span>Cobro Digital (CoDi)<\/span><\/a> in Mexico, <\/span>Transfers Now and ACH Colombia<\/span><\/a> in Colombia, and <\/span>Yape in Peru<\/span><\/a>.\u00a0<\/span><\/p>\n The US recently <\/span>launched FedNow<\/span><\/a>, the nation\u2019s real-time payment system. Meanwhile, Canada has its <\/span>Real-Time Rail payment system<\/span><\/a>, Australia has NPP, the UK has Faster Payments Service, and Hong Kong has <\/span>TME-1<\/span><\/a>.\u00a0<\/span><\/p>\n The rise of faster payment systems worldwide enables fraudsters to move money faster than ever. What\u2019s more, they can easily sidestep common card-present transaction restrictions. These systems have made CNP transaction fraud more accessible and given scammers more avenues to monetize their activities.<\/span><\/p>\n Latin America is home to one of the largest unbanked populations in the world. Recent data found that <\/span>122 million adults<\/span><\/a> in the region lacked access to a bank account.\u00a0\u00a0<\/span><\/p>\n Smartphones help fill this gap by bringing more consumers into the digital banking environment and boosting financial inclusion. In Brazil, for example, <\/span>155 million adults<\/span><\/a> have access to smartphones as of 2023.\u00a0<\/span><\/p>\n Given the high market penetration of smartphones and the constant threat of fraud, banks should work to implement tools like biometric solutions (like fingerprint scans or facial recognition) and <\/span>two-factor authentication (2FA)<\/span><\/a> to help keep their customers safe. Implementing these solutions will add a layer of friction to the online banking experience.\u00a0<\/span><\/p>\n Some laptops and desktop computers offer biometric technologies like fingerprint or facial recognition. The most common biometric and 2FA technology is available on phones, allowing customers to log into their accounts using fingerprint readers or facial recognition. Users can quickly receive 2FA codes to transact on services like PIX in Brazil or MB WAY in Portugal.<\/span><\/p>\n However, the prevalence of smartphones among the population means consumers are likely to accept the new measures quickly \u2013 and may even feel more comfortable with their banking experiences. In other words, this mild level of friction will ultimately prove reassuring to customers.<\/span><\/p>\n The ease of use of many of the aforementioned new payment types creates another opening for fraudsters to exploit. Many payment methods launched in LATAM, like Brazil\u2019s Boleto Banc\u00e1rio, use personally identifiable information (PII) like mobile phone numbers or email addresses to complete transactions or provide access to accounts.\u00a0<\/span><\/p>\n While these authentication methods are designed to simplify digital banking and eCommerce, fraudsters can exploit them to commit CNP fraud. If a fraudster learns a consumer\u2019s PII, they can easily breach the consumer\u2019s account. This is a very real threat in Latin America, where recent <\/span>data<\/span><\/a> named Brazil and Chile as having the highest risks for fraud worldwide.<\/span><\/p>\n Authentication methods for these new payment types (mobile phone numbers and email addresses) are also payment methods. If fraudsters can crack one method, they can easily crack the other.<\/span><\/p>\n As new customers join the digital banking environment, banks must monitor how exactly they transact. Machine learning systems can help banks track how often customers transact and the types of activities they engage in.\u00a0<\/span><\/p>\n Banks can better understand if a customer\u2019s recent activities are cause for concern using solutions that can access data from disparate sources. These solutions can review disparate data and highlight customer activities linked to suspicious entities. Monitoring these kinds of activities can help banks keep their organizations fraud-free.<\/span><\/p>\n These three factors create a perfect storm for CNP fraud to accelerate globally, particularly in the LATAM region. This means LATAM bank customers face a higher risk of fraud. Add the expansion of faster payment schemes in the region, and fraud is poised to increase and accelerate.<\/span><\/p>\nWhat is Card-Not-Present Fraud?<\/span><\/h3>\n
The State of CNP Fraud\u00a0<\/span><\/h3>\n
How Card-Not-Present Fraud Prevention Addresses Key CNP Challenges<\/span><\/h3>\n
Challenge 1: Fraudsters are undeterred by failure<\/span><\/h4>\n
Solution: Employ Customer Segmentation<\/span><\/h4>\n
Problem #2: New payment schemes enable faster CNP transaction fraud<\/span><\/h4>\n
Solution: Implement Behavioral Biometrics or 2FA<\/span><\/h4>\n
Problem #3: New payment types vulnerable to fraud<\/span><\/h4>\n
Solution: Utilize AI-enabled transaction monitoring solutions<\/span><\/h4>\n
LATAM: A Perfect Storm for CNP Fraud\u00a0<\/span><\/h3>\n