Solution Brief Efficient ecommerce Fraud Management for Acquirers

Solution Brief Efficient ecommerce Fraud Management for Acquirers

Table of Contents Introduction Sophisticated Fraud Detection and Chargeback Reduction Improved Compliance Posture Transparent User Experience Multi-channel Intelligence Business benefits of IDENTIKEY Risk Manager 4 5 6 7 7 8 Copyright 2015 VASCO Data Security. All rights reserved. No part of this publication may be reproduced, stored in a retrieval system, or transmitted, in any form or by any means, electronic, mechanical, photocopying, recording, or otherwise, without the prior written permission of VASCO Data Security Inc. Trademarks MYDIGIPASS.com, DIGIPASS & VACMAN are registered trademarks of VASCO Data Security. All other trademarks or trade names are the property of their respective owners. Any trademark that is not owned by Vasco that appears in the document is only used to easily refer to applications that can be secured with authentication solutions such as the ones discussed in the document. Appearance of these trademarks in no way is intended to suggest any association between these trademarks and any Vasco product or any endorsement of any Vasco product by these trademarks proprietors. VASCO reserves the right to make changes to specifications at any time and without notice. The information furnished by VASCO in this document is believed to be accurate and reliable. However, VASCO may not be held liable for its use, nor for infringement of patents or other rights of third parties resulting from its use.

Introduction As an acquirer, you face multiple challenges. You must diligently identify fraudulent cardnot-present transactions i.e., ecommerce transactions that will result in chargebacks and lost revenue. You need to stop organized account takeover attacks committed by fraudsters. You need to prevent purchases made from stolen credit cards. You need to identify and reduce the occurrence of friendly fraud chargeback cheaters, who purchase products using their own, legitimate credit card numbers but then fraudulently file a chargeback with the credit card company after receiving the goods. In addition, you need to understand and be compliant with ever-evolving compliance regulations and requirements, and do it all with a minimal impact on your consumers. 3

Sophisticated Fraud Detection and Chargeback Reduction Risk Manager With VASCO IDENTIKEY Risk Manager, you can improve the manner and speed at which you detect and stop fraud across multiple channels. Through sophisticated, real-time risk analysis, VASCO IDENTIKEY Risk Manager delivers strong and dynamic protection against fraudulent activities - identifying risk at critical steps, predicting risk levels, and taking quick action when fraud patterns are identified. The solution collects and scores activities and operations based on intelligent, multi-layered analysis, and by challenging unusual patterns and stepping up security where required, IDENTIKEY Risk Manager creates a barrier that a hacker or fraudster cannot easily circumvent. IDENTIKEY Risk Manager enables efficient fraud detection for acquirers with the following capabilities: By checking the consistency of the billing and the shipping addresses, the country of the bank via the BIN and the IP of the customer, IDENTIKEY Risk Manager is able to detect inconsistencies and block fraudulent transaction attempts. Through historical rules, IDENTIKEY Risk Manager is able to detect prior fraud attempts, problem customers, chargeback records and customers receiving funds. This reduces the incidence of repeat offenders. To reduce repeat or pattern-specific types of fraud, customizable rules can be set in IDENTIKEY Risk Manager in order to, for example, block orders from specific countries, put thresholds on transaction value, etc. IDENTIKEY Risk Manager can further refine detection of fraud and reduce false positives with flexible scoring models that can include factors such as previous orders, length of time as a customer, etc. By detecting IP addresses coming from proxy, IDENTIKEY Risk Manager detects suspicious activities that may lead to fraud or chargebacks. Acquirers who have less transaction history, or riskier business models have a greater credit risk. These are parameters IDENTIKEY Risk Manager can consider in its decision engine. 4

Improved Compliance Posture IDENTIKEY Risk Manager enables your organization to more easily comply with new and evolving regulations, without additional resources or disruptions to existing processes. Acquirers should have a process in place for consistently monitoring and reporting on security incidents. In the case of significant breaches related to payment services, notify appropriate oversight authorities and law enforcement agencies. Require all payment services partners (i.e., e-merchants) to cooperate. IDENTIKEY Risk Manager enables acquirers to improve compliance posture with the following capabilities: Continuously monitors transactions to identify, track and report suspicious activity related to Anti-Money Laundering (AML) Analyses and integrates data from multiple channels (payments/transfers/debits via online and mobile banking and credit card accounts, pre-paid credit cards, e-commerce activities, ATM) Features comprehensive and customizable self-service reporting tools that reduce demands on internal staff 5

Transparent User Experience Seamless UX IDENTIKEY Risk Manager ensures that customers can shop safely, without disrupting the user experience. Because it works silently in the background, IDENTIKEY Risk Manager is invisible to users, and keeps both users and their transactions secure, without requiring additional security measures unless suspicious activity is identified. With IDENTIKEY Risk Manager, your consumers can seamlessly and securely conduct business without restrictive controls, which can result in improved sales, more return visits, and continued loyalty to your brand. Multi-channel Intelligence Multi-channel IDENTIKEY Risk Manager delivers holistic support for today s multi-channel environment, which enables organizations to leverage data and intelligence from multiple channels (issuing, acquiring, pre-paid, e-commerce, etc.) and more holistically address fraud throughout the ecosystem. IDENTIKEY Risk Manager is device agnostic, and can capture data from different type of device: browser, mobile, ATM, etc., improving the detection and characterization of the fraud. 6

Business benefits of IDENTIKEY Risk Manager Reduce Business Risk: Robust analytics and intelligence to reduce overall fraudulent activities and improve risk intelligence Maximize revenues and minimize costs: Reduce chargeback rates and false positives, and reduce time and cost associated with manual reviews Strengthen Compliance Posture: Find, track and report suspicious activity related to Anti-Money Laundering (AML), as well as elevate compliance posture with other mandates. Improve user experience and adoption: Ensure users can conduct legitimate business without onerous security controls, resulting in more sales, return visits, and continued loyalty Leverage multi-channel Intelligence: Delivering the holistic cross-channel intelligence critical for comprehensive fraud management 7

For more information, please visit www.vasco.com/irm About VASCO VASCO is the world leader in providing two-factor authentication and digital signature solutions to financial institutions. More than half of the Top 100 global banks rely on VASCO solutions to enhance security, protect mobile applications and meet regulatory requirements. VASCO also secures access to data and applications in the cloud, and provides tools for application developers to easily integrate security functions into their web-based and mobile applications. VASCO enables more than 10,000 customers in 100 countries to secure access, manage identities, verify transactions, and protect assets across financial, enterprise, E-commerce, government and healthcare markets. Learn more about VASCO at www.vasco.com or visit blog.vasco.com