Subscribe to our e-mail newsletters
For more info on a specific newsletter, click the title. Details will be displayed in a new window.
Finance
Security
Computerworld Daily News (First Look and Wrap-Up)
Computerworld Blogs Newsletter
The Weekly Top 10
More E-Mail Newsletters 
Computerworld 2007Subscribe to Computerworld
40 years of the most authoritative source of news and information for IT leaders.

E-merchants Turn Fraud-busters

Web retailers are teaming up to fight online credit card fraud and take back the e-neighborhood.
 

Sign up to receive Security Resource Alerts

June 16, 2003 (Computerworld) -- Nobody likes being ripped off. But for online retailers, the pain of being ripped off by unethical consumers, identity thieves and bogus-card gangs has been magnified by what they consider to be the not-my-problem attitude of credit card issuers and card associations like Visa and MasterCard.
Tom Mahoney, a network administrator at Franklin & Marshall College in Lancaster, Pa., recalls vividly the shock he and his wife felt shortly after they launched their own mom-and-pop e-business in 1997 and discovered not only the threat of fraud but also the double whammy from the credit card companies.
"We thought from the beginning something was fishy -- getting orders for herbs and personal care products with U.S. credit cards, all ... for shipping to Yugoslavia," says Mahoney. He recalls that his card processor had assured him that if he had an authorization number for the transaction, then "all was well." But then the chargebacks started coming in, and banks refused to honor the transactions and added penalty fees for Mahoney's business.
Mahoney says he called some of the banks and was shocked to discover that many of the credit card numbers in question had never even been issued to cardholders, yet they were granted authorization numbers. "That's when I learned that something was wrong with the system," he says.
Today, credit card fraud is pegged as a $160 million annual problem for just the top 25 online retailers, according to Gartner Inc. in Stamford, Conn. But there are some glimmers of hope for improvement.
One encouraging sign is that Visa International Inc. and MasterCard International Inc. recently started full-scale marketing of credit card systems that require online purchasers to supply additional passwords or security codes (Verify by Visa and MasterCard's similar SecureCode). It's an attempt to provide an online equivalent of the in-store signature. Even more important, from the retailers' perspective, merchants that join the programs will finally be freed from most of the liability and onerous chargebacks that so irked Mahoney. Instead, banks will absorb the costs of fraud themselves.
But merchants, analysts and even Foster City, Calif.-based Visa and Purchase, N.Y.-based MasterCard acknowledge that no one is out of the woods yet and that the new programs don't cover every situation. It may be a few more years before the two companies' programs reach critical mass and begin to show significant results. Plus, there's some concern that the pop-up window that requires the new codes will drive some legitimate customers away.
"The Visa and MasterCard programs won't solve all the problems. They are just one tool in the arsenal," says Mick Lester, director of Web services at KBToys.com, a Denver-based unit of KB Toys Inc. Still, he says, "with the liability shift to the card issuer, I definitely think merchants should jump aboard."
For now, Lester says that even with Verify by Visa and SecureCode, KBtoys.com won't abandon its homegrown fraud-busting methods, such as verifying and comparing card and shipping addresses, as well as flagging and scrutinizing transactions involving expensive items.
KBtoys.com also uses a scoring system to look for fraud, says Lester.

Continued...
1 | 2 | NEXT  



Print this Story Send Us Feedback E-mail this Story Digg! Digg this Story Slashdot this Story
Sidebar: Telltale Signs of Fraud
E-merchants Turn Fraud-busters
Sidebar: How One E-merchant Battles Fraud
"Security people can talk until they're blue in the face about the dangers of unsecured Windows PCs and how they..." Read more...
"Despite some progress, many federal agencies appear unlikely to meet an Oct. 27 deadline for completing the roll-out of new..." Read more...
Read more Security posts or See all Blogs
Update: Microsoft to appeal $1.3B EU fine
XP SP3 cripples some PCs with endless reboots
Windows Vista more secure than XP, says security company
More top stories...
Microsoft grows DAISY for blind computer users while Adobe wilts
Sun's JavaOne show re-dubbed 'VomitOne' after stomach bug hits
Leopard at six months: Does it live up to the early hype?
Mistakes such as putting down co-workers or burning bridges when you resign are surefire ways to darken your career prospects. Here's how to avoid them
Hype and promises abound in the IT world, but these six breakthroughs really will change your life, says author and former IT manager John Brandon.
Baby boomers are retiring and taking their knowledge with them. Why do so few in IT seem to care?
Computerworld editors share stories of their first PCs, including some classics and some real clunkers -- then we ask readers to share their early-PC tales.
Reviews, analyses, how-tos, visual tours, hot issues and predictions about Microsoft's new OS.
Four years from now, the IT field will be a vastly different place. Will you be ready?
All Zones
Application Performance Zone
Enterprise-Class Security Zone
Enterprise Solutions Zone
The File Data Management Zone
Grid Computing on Windows Zone
Security Management Zone
ITIL Best Practices Zone
The SAS Zone
Storage Virtualization Zone
The Data Center Management Zone

Ads by TechWords

See your link here
Long Tail Supplier Collaboration - What's In It For You?
Long Tail Supplier Collaboration - What's In It For You?
Download this webcast, free, compliments of Sterling Commerce
Go to the webcast 
Computerworld Executive Bulletin: Building a Robust Antivirus Defense
Download this Executive Bulletin (a $49.95 value) for free, compliments of MessageLabs.
(Source: MessageLabs) Antivirus software alone isn't enough to prevent today's speedy, sophisticated virus attacks. Security managers should consider multitiered approaches that include behavior scanning, appliances that check e-mail for worms, and restricting user access to dangerous Web sites. Download this Executive Bulletin (a $49.95 value) for free, compliments of MessageLabs, to learn more.
Download this executive briefing download
Eliminate SPAM, Gain Productivity
Get this white paper now!
(Source: MessageLabs) Learn all about the dangers and the costs of spam in all its forms - from stock-touting to spreadsheet. Also, understand the drawbacks of traditional hardware- and software-based defenses - and the unique benefits of MessageLabs multi-layered, managed Anti-Spam solution; as illustrated by a real-world case study where MessageLabs stopped spam cold.
Download this white paper go
White Papers
Read up on the latest ideas and technologies from companies that sell hardware, software and services.
New Fujitsu High-End Itanium Windows- and Linux-Based PRIMEQUEST Servers Offer the Utmost in High Availability
New Fujitsu High-End Itanium-Based PRIMEQUEST Servers Offer Industry-Leading System Management for Linux and Windows
Symantec State of the Data Center Report 2007
View more whitepapers 
Layered Security Solutions
Although basic network security issues have changed very little over the past decade, the network security landscape has changed dramatically. Today's IT professionals still have the primary responsibility of protecting the confidentiality of corporate information, preventing unauthorized access, and defending the network against attacks. Security experts and analysts agree that a security solution comprised of multiple layers is the best defense against today's increasingly sophisticated attacks.

Download this white paper 
Universal Threat Management - Because Conventional UTM is Not Enough!
This white paper, written by Mark Bouchard of Missing Link Security Services, examines the challenges confronting today's enterprises with respect to managing threats on a network. It also discusses the need for "Universal Threat Management", which is a security solution approach for all physical locations within an enterprise that require threat protection.

Download this white paper 
Selecting the Right Threat Management Solution
This short demo will guide you through key considerations for selecting a solution to manage threats on a network. Learn about the popularity of Unified Threat Management (UTM), and how it fits into an overall security solution. Explore critical elements of a network-wide solution for multisite and large network-size deployments and identify the four key features of a threat management solution.

View this demo