Turn on gateway fraud filters
Most payment gateways allow ecommerce merchants to set up some basic fraud prevention rules to block or flag transactions that may be fraudulent. Typical examples are to decline all transactions when the billing address does not match what the credit card company has on file (an AVS mismatch) or excluding all transactions from specified countries.
Pros: No cost to merchants.
Cons: The selection of available rules is inadequate for merchants facing a moderate to high amount of fraud. There is also a high risk of false declines as the rules are not very flexible.
This step is recommended for merchants in low-risk fraud categories and merchants that have not experienced much fraud.
Manual review
Most ecommerce merchants have employees assigned to review purchases that fall into specific risk categories, such transactions above a specified dollar amount and/or transactions where the billing and shipping addresses don’t match. Common manual review techniques include using Google to find verifiable data on the purchaser, checking social media accounts and using Google maps to see if the shipping address appears legitimate. The average merchant reviews 26 percent of all transactions, of which 80 percent are eventually submitted for processing.
Pros: This is more accurate than simple Gateway filters, since a veteran employee becomes quite effective over time in preventing fraud.
Cons: Time consuming, results vary greatly according to employee skill, potential bottleneck during high season, risk of experienced employee leaving the company and limited tools available for research
This is recommended for merchants in low to moderate risk fraud categories.
Fraud prevention solutions
There is a multitude of third-party fraud prevention companies (full disclosure: including my company, NoFraud) that leverage sophisticated fraud prevention technologies such as IP Proxy Piercing, Geolocation, Device ID and Global Fraud Blacklists to reduce or eliminate fraud liability. The solutions range from the very basic, providing a risk score and tools to build a fraud prevention algorithm, to full service solutions that leverage machine learning to give you a yes/no response and will even reimburse you for any fraud chargebacks that resulted from their decision.
Pros: Very effective against fighting fraud. Most solutions eliminate the need for manual review, providing expert service that is not tied to employee skill. Companies can accept more orders that would have normally been declined due to fraud concerns, allowing you to pre-determine fraud costs.
Cons: Score and tool models still require fraud expertise to set up and maintain. Solutions can be pricey, although they generally pay for themselves when calculating decreased chargebacks. You can accept more orders with less employee overhead.
This is recommended for businesses that have been targeted by fraud, businesses in high risk categories, and smaller businesses that want to free up resources devoted to fraud prevention to concentrate on sales and expanding their enterprises.