Prevention

Only the individual merchant can determine which procedures to implement in order to maintain a correct balance between fighting fraud and accepting credit cards from legitimate customers.

• Consider not accepting credit cards from the customer unless full information is provided including the complete address and phone numbers.
• Know Your Customer (KYC). By calling a customer with the information provided you can further confirm the security of sales. If the person contacted at the phone number provided doesn't recognize the name of the customer, the order is likely fraudulent.
• If they are available, utilise CVC2 (Mastercard) and CVV2 (Visa). These two numbers are the three unique digits on the back of a Mastercard or Visa credit/debit card. These are used in situations where the card is not present (CNP Transactions), e.g., mail order, telephone order and online card transactions.
• If a transaction is not made face to face, it is a good idea to send a confirmation directly to the cardholder's address to help identify the transaction when it appears on a billing statement.
• Process refunds to your customers' accounts quickly, always using the same card number from the original sale.
• Stop recurring transactions that a cardholder cancelled; this will reduce the number of repetitive chargebacks by the same customer.
• Always adhere to your returns policy and make sure your customer has a clear understanding of the returns procedure. This helps with reducing chargebacks but also saves valuable time and resources within customer services.

Detection

Understanding your customer models and behaviours can help in alerting you to suspected fraudulent activity, for example:

• Late night orders - Fraud increases late at night.
• Ordering in high volume - Cyber crooks don't care how high the bill is, since they don't intend to pay it.
• Physical address - Physical address must match the credit card billing address.
• Shipping address - This must be in the same area as the record of the customer's address. This is an indicator and cannot be considered as suspicious in all cases where gifts are purchased
• E-mail address - E-mail addresses which have no apparent connection to the customer's name or include random characters could be potential attempts to mask identity but again, this is an indicator.
• Repeated attempts - Repeated attempts on the same card number must be treated as suspicious.

Monitoring

• Control employee access to financial systems.
• Analyse customer behaviour and activity so as to understand your business risk indicators.
• Work closely with your business partners in understanding how you can leverage fraud control to best suit your business model.
• Have the relevant Security and Fraud policies required to maintain a risk based framework within your company.

Why You May Have Received a Chargeback

Understanding the reasons behind claims from your customers can help identify the main cause and provide you with valuable information on where you need to make changes or consider adopting a new approach within your business. This helps to reduce chargebacks but also saves valuable time and customer service resource.

Possible reasons for chargebacks include:

• Customer did not receive a product or service
• Customer does not recognise the charge or business name on their card statement
• Customer believes the product or service was defective, damaged or not as it was described
• Customer was a victim of fraud; card was stolen or used without consent
• Customer refund was not processed in a timely manner

Avoiding and Managing Chargebacks

The best approach to prevent chargebacks is to create best practices that are followed consistently by all employees. For example, always process a refund back to the original card number in a timely manner.

Chargebacks can cost you time and money – but it's important to remember that many chargebacks can be prevented and quite often, it begins with comprehensive employee training.

To contact our Fraud and Chargebacks team please contact fraudops@ecomm365.com