How to Prevent Fraud when you have no CC #?

[tmilone103]

On large orders prior to being with 3D, When we received a large order we always had the option to call the card holders bank and speak with the bank to verify additional info that is not available through AVS, Such as Phone Numbers, Etc.

Without having the CC # its impossible to call the bank to verify the phone number that you are contacting the customer at is the same phone number the bank has on file. Cell Phones today can be purchased at any drug store so when calling a customer you have no idea if you are really speaking to the card holder if the number is not listed.

How do you prevent fraud when you have large orders that you can not verify?

[ElegantWeddings]

In the admin area you get the following, those should be enough to verify with the card provider that the card itself is issued to the name on the card and the correct expiry date.

Billing Address:
Name on Card:
Card Type:
Card Number: XXXX-XXXX-XXXX-9999
Expiration Date:

[tmilone103]

In the admin area you get the following, those should be enough to verify with the card provider that the card itself is issued to the name on the card and the correct expiry date.

Billing Address:
Name on Card:
Card Type:
Card Number: XXXX-XXXX-XXXX-9999
Expiration Date:

Without the card number you have no idea what the bank is. We routinely get orders well over $1000 and its very frustrating trying to verify information especially if an alternate address is used.

If you have the full card number you can call the Visa or Mastercard merchant line and they tell you the banks phone number. Amex is even better in that they will contact the customer at your request to verify they authorized the order.

With no card number you are out of luck.

[InsnWizard]

Give your payment gateway a try.

[BrigadeGames]

You could always have a special field for the customer to put the credit card bank phone number.

You should be able to also adjust your settings in your gateway to require the billing address to match.

A third option would be for orders over a certain threshold to require you to call them for the number (and then you can gather the info to verify the address.)

[celebra1]

Online Fraud Prevention

I'm with InsnWizard on this one. Call your payment gateway when in doubt! You pay them for a service. Use it! Let the gateway confirm with the customer.

There are valid reasons NOT to "see" your customer's cc number; the main one being YOUR responsibility for that information. You can be held liable for that information.

Online merchants have less recourse in fraud areas and more vulnerability. The main cc sites, like Visa and MC, have good resources for detecting fraud. Read them. There are some good tips for recognizing potential fraud.

[tmilone103]

I'm with InsnWizard on this one. Call your payment gateway when in doubt! You pay them for a service. Use it! Let the gateway confirm with the customer.

There are valid reasons NOT to "see" your customer's cc number; the main one being YOUR responsibility for that information. You can be held liable for that information.

Online merchants have less recourse in fraud areas and more vulnerability. The main cc sites, like Visa and MC, have good resources for detecting fraud. Read them. There are some good tips for recognizing potential fraud.

We have contacted Authorize.net in the past and they will not help. We do all the standard checks but sometimes contacting the bank is just so much easier and they will in many cases contact the customer if you ask.

Shipping to only billing addresses would cost us lots of lost orders. When customers buy high value items they don't want them sitting on their doorstep and many times we require a signature so if they are not there it becomes a hassle.

[BrigadeGames]

Obviously the payment gateway can check if the billing address and zip match.

Since the order system requires a shipping and billing address, if they are different you can ask for the information.

You might need some good html coding expertise to add a statement to show up if the addresses are different.

You could always put a line of text in red that if the addresses do not match to answer a checkout question to collect the bankcard phone number.

[InsnWizard]

Talk to you merchant account.