background preloader

Ponderings - Fraud Prevention

Facebook Twitter

25.1 Fraud Handbook. Digital Identity, Privacy, and the Internet's Missing Identity Layer. Regular readers will have come across (or participated in shaping) some of my work over the last year as I looked at the different ways that device identity and personal identity collide in mobile location technology.

Digital Identity, Privacy, and the Internet's Missing Identity Layer

In the early days following Google's Street View WiFi snooping escapades, I became increasingly frustrated that public and official attention centered on Google's apparently accidental collection of unencrypted network traffic when there was a much worse problem staring us in the face. Unfortunately the deeper problem was also immensely harder to grasp since it required both a technical knowledge of networked devices and a willingness to consider totally unpredicted ways of using (or misusing) information. This got me to look at the issues even more closely, and I summarized my thinking at PII 2010 in Seattle. A few months ago I ran into Dr. Ann Cavoukian, the Privacy Commissioner of Ontario, who was working on the same issues. B - 2009 Fraud Trends.pdf (application/pdf Object) E-commerce stats round up. Digital_Thieves_October2010.pdf (application/pdf Object) Credit card fraud screening strategies - minimizing chargebacks. In the first part of this article, I outlined some frightening statistics regarding credit card fraud and chargeback fees to merchants.

Credit card fraud screening strategies - minimizing chargebacks

It's worthwhile reviewing if you haven't read it as yet; as is my guide to chargebacks Protecting your online business from fraud. One of the great things about the Internet is anonymity. One of the worst things about the Internet is anonymity - especially if you're an ecommerce merchant. If you utilize payment gateways for credit card transactions or are considering doing so, it is important to ask the gateway provider about their screening features (this precedes actual credit card payment processing). Many payment gateway providers use the Address Verification System (AVS).

The transaction may be approved even if the address verification information does not match! CVV2 takes things a step further. Request information. Check the IP address Check your payment gateway interface Email address awareness. Shipping addresses. Log analysis. Overseas orders. Internet Fraud: Telltale Signs of E-Commerce Fraud. As long as people can get away with it, there will be fraud. However, there are signs you can watch out for that might raise a red flag on potentially fraudulent transactions. Look for questionable street and email addresses as well as multiple orders from the same device.

ManageEngine OpManager, a powerful NMS for monitoring your network, physical & virtual (VMware/ HyperV) servers, apps & other IT devices. Deploy and start monitoring in less than an hour. Trusted by over a million admins worldwide. In a time of economic crisis, there tends to be an increase in the number of people that turn to criminal activity. Before you can stop fraud, you need to know how to define it in order to properly identify it. When fraud is carried out online, however, fraudsters can orchestrate an attack on a much larger scale, allowing them to sit back and wait for the goods to arrive. Define and Identify. FSA consults on implementation of the E-Commerce Directive. Firms and consumers will benefit from the Financial Services Authoritys (FSA) proposed implementation of the E-Commerce Directive (ECD), set out in a The FSAs Consultation Paper builds on the publication of draft regulations by the Department of Trade and Industry (DTI) and HM Treasury (HMT) on 7 March 2002.

FSA consults on implementation of the E-Commerce Directive

The ECD is an important directive for firms and consumers. It aims to ensure the European Community reaps the full benefits of e-commerce by removing potential restrictions on e-commerce and building consumer confidence in it. The ECD removes restrictions on the cross-border provision of services by electronic means, by introducing a country of origin approach to regulation. This means that generally the regulatory requirements that apply in a firms country of origin will apply to any cross-border services that it provides electronically.

H - Staff Fraudscape - examining the staff fraud threat in the UK.pdf (application/pdf Object) Cyber_threats_to_mobile_phones.pdf (application/pdf Object) Fraudsters 'copying online banking security' 19 October 2010Last updated at 09:53 By Samantha Washington BBC News Fraudsters are targeting online security systems that are designed to add extra protection Online security systems designed to protect the confidential bank details of millions of people are being copied by fraudsters, experts say.

Fraudsters 'copying online banking security'

Some 70 million cards are enrolled into the online security systems Verified by Visa or Mastercard SecureCode, according to the UK Cards Association, with both systems based on the same software and principles. An increasing number of banks and retailers are obliging or requesting their customers to sign up for one or other, with customers told it offers an additional layer of protection from fraudsters. But online security experts at Cambridge University say the systems encourage people to enter their confidential information into pages that they cannot be sure are genuine and customers could end up liable for the loss.