{"id":27953,"date":"2017-09-25T04:00:00","date_gmt":"2017-09-25T08:00:00","guid":{"rendered":"https:\/\/goebt.com\/https-blog-cdesolutions-com-2017-09-best-ways-to-help-small-merchants-fight-fraud\/"},"modified":"2025-05-27T09:10:34","modified_gmt":"2025-05-27T13:10:34","slug":"best-ways-to-help-small-merchants-fight-fraud","status":"publish","type":"post","link":"https:\/\/goebt.com\/best-ways-to-help-small-merchants-fight-fraud\/","title":{"rendered":"Best Ways to Help Small Merchants Fight Fraud"},"content":{"rendered":"<p>&nbsp;<\/p>\n<p><em><strong>Transaction fraud costs US merchants and banks an estimated <a href=\"https:\/\/www.forbes.com\/sites\/rogeraitken\/2016\/10\/26\/us-card-fraud-losses-could-exceed-12bn-by-2020\/#56cafa3d2432\" rel=\"noopener\">$8.5 billion<\/a> per year.<\/strong> <\/em>For small businesses, fraud losses are especially painful.<\/p>\n<p><!--more--><\/p>\n<p>Small merchants have unique vulnerabilities when it comes to retail and online card fraud. Since these business owners tend to wear many hats, they usually don\u2019t have the time or expertise to pay much attention to fraud prevention. \u00a0As a payment service provider, it\u2019s up to you to educate your merchants regarding the threats they face. After all, they don\u2019t know what they don\u2019t know.<\/p>\n<p><b>Retail Fraud Snapshot<br \/>\n<\/b><\/p>\n<p>First, the good news. As a result of the EMV shift, things are looking up at the cash register. Merchants using chip card terminals have seen a <a href=\"http:\/\/www.nacsonline.com\/Media\/Daily\/Pages\/ND0531163.aspx#.WcJwjtOGM8Z\" rel=\"noopener\">reduction of 39%<\/a> in card fraud.<\/p>\n<p>EMV-compliant terminals are the small merchant\u2019s best defense, but participation still lags. As of July 2017, only <a href=\"http:\/\/www.uspaymentsforum.org\/us-payments-forum-summer-2017-market-snapshot-chip-on-chip-transactions-increasing-improving-consumer-transaction-experiences-educating-merchants-on-emv-implementation-challenges\/\" rel=\"noopener\">half of US merchants<\/a> were equipped for chip card transactions. It\u2019s essential to encourage your merchants to upgrade their terminals to take advantage of chip security. A gentle reminder of the liability shift could be an effective motivator, as in 2016, US merchants found themselves on the hook for <a href=\"http:\/\/www.digitaltransactions.net\/news\/story\/EMV_s-Chargeback-Toll_-_5_8-Billion-in-2016\" rel=\"noopener\">$5.8 billion in chargebacks<\/a>.<\/p>\n<p><strong>Avoid EMV Scams<\/strong><\/p>\n<p>While EMV has seriously cut back on the incidence of card-present fraud, <a href=\"https:\/\/www.cdesolutions.com\/2017\/04\/4-scams-that-bypass-emv-security\/\" rel=\"noopener\">thieves have gotten a little more creative<\/a>. Now, some fraudsters have produced cards with a fraudulent mag stripe and a sham chip. These chip cards look legitimate, but of course terminals can\u2019t read them. After the chip \u201cmalfunctions\u201d a few times, transactions are processed as mag stripe. While this is a clever scam, it\u2019s actually pretty easy to stop. Merchants can simply train their cashiers to require additional identity verification, such as a driver license, before allowing a mag stripe transaction.<\/p>\n<p><strong>Cut Register Fraud<\/strong><\/p>\n<p>In fact, requiring additional credentials is an effective to way to prevent all sorts of retail fraud, from card fraud to refund fraud to discount abuse. \u00a0Retailers may be hesitant to add in-person verification for fear of causing offense, but the returns can be well worth it.<\/p>\n<p><b>Online Fraud Outlook<br \/>\n<\/b><\/p>\n<p>As EMV has reduced retail fraud, thieves have turned their attention to CNP channels. It\u2019s estimated that online fraud will cost retailers $71 billion globally over the next five years. Without robust resources to navigate data security and online fraud, small merchants are an atttractive target for fraudsters.<\/p>\n<p><strong>Build a Strong Foundation<\/strong><\/p>\n<p>PSPs can help their merchants develop a secure ecommerce presence by making sure they start from a strong foundation. Choosing a PCI compliant e-commerce platform is a crucial first step. Beyond that, merchants need to take the proper steps to secure their TLS 1.2 certificates. It\u2019s always a good idea to encourage merchants to participate in a trust seal program, such as Norton or Thawte. Other trust seals such as Verified by PayPal and TrustE can help by verifying that merchant sites are set up correctly.<\/p>\n<p><strong>Enlist MFA<br \/>\n<\/strong><\/p>\n<p>To reduce online fraud, multi factor authorization is the small merchant\u2019s best friend. It\u2019s fairly easy to incorporate additional fields into a merchant\u2019s order page. Requiring a CVN is one obvious step, but it\u2019s just the starting point. Today\u2019s MFA can use a variety of unique indicators such as biometrics, one-time cellphone codes and security tokens. MFA is a very effective way to prevent fraud. After all, a hacker may sell your card number, but they can\u2019t match your fingerprint. What\u2019s more, with a mobile-first audience, MFA is usually frictionless, so merchants shouldn\u2019t suffer any hit to conversions.<\/p>\n<p><strong>Do Due Diligence<\/strong><\/p>\n<p>While large merchants have the ability to incorporate machine learning into their e-commerce sites, nothing replaces eyes on the street. Small merchants will benefit from a hands-on approach to online order checking. Encourage your merchants to verify order data and flag questionable transactions. For instance, merchants can make sure the IP address of the originating device matches the cardholder\u2019s city and state. Merchants can also require data fields such as a telephone number, and verify that it matches the right area code. These low-tech steps are quite effective in stopping fraud.<\/p>\n<p><strong>Block Malware<\/strong><\/p>\n<p>To prevent fraud in all its insidious forms, securing transactions is only one half of the battle. Malware infections are a serious risk: stealing sensitive customer data, even extending to outright bank account theft. <a href=\"https:\/\/www.cdesolutions.com\/2016\/10\/connected-culture-managing-risk-at-the-point-of-sale\/\" rel=\"noopener\">Social engineering scams <\/a>are rampant. Remind your merchants that it\u2019s crucial to keep all their software programs up to date and all their computers secured behind rigorous firewalls. This is especially important for merchants who may use the same tablet for both personal and professional needs. Many payment service providers can recommend an ASV service (PCI-approved scanning vendor) which essentially runs as an anti-virus program to check for data vulnerabilities.<\/p>\n<p>It\u2019s the truth: an ounce of prevention is worth a pound of cure, and nowhere is this more evident than fraud prevention. Fraud results in lost revenue, angry customers and damaged reputations. Fortunately, small business owners have a number of effective tools to fight back. As a payment service provider, it\u2019s your responsibility to make sure your merchants know how to protect themselves.<\/p>\n<p>&nbsp;<\/p>\n","protected":false},"excerpt":{"rendered":"<p>&nbsp; Transaction fraud costs US merchants and banks an estimated $8.5 billion per year. For small businesses, fraud losses are especially painful.<\/p>\n","protected":false},"author":244,"featured_media":27954,"comment_status":"closed","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"content-type":"","footnotes":""},"categories":[1],"tags":[227,218],"class_list":["post-27953","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-important-announcement","tag-best-practices","tag-security"],"_links":{"self":[{"href":"https:\/\/goebt.com\/wp-json\/wp\/v2\/posts\/27953","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/goebt.com\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/goebt.com\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/goebt.com\/wp-json\/wp\/v2\/users\/244"}],"replies":[{"embeddable":true,"href":"https:\/\/goebt.com\/wp-json\/wp\/v2\/comments?post=27953"}],"version-history":[{"count":2,"href":"https:\/\/goebt.com\/wp-json\/wp\/v2\/posts\/27953\/revisions"}],"predecessor-version":[{"id":31926,"href":"https:\/\/goebt.com\/wp-json\/wp\/v2\/posts\/27953\/revisions\/31926"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/goebt.com\/wp-json\/wp\/v2\/media\/27954"}],"wp:attachment":[{"href":"https:\/\/goebt.com\/wp-json\/wp\/v2\/media?parent=27953"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/goebt.com\/wp-json\/wp\/v2\/categories?post=27953"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/goebt.com\/wp-json\/wp\/v2\/tags?post=27953"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}