Reducing card-not-present fraud using pre-approved transactions

Johan Pouwelse and Diederik Bruggink
Additional contact information
Diederik Bruggink: Head of Innovation and Payments at ESBG, Belgium

Journal of Payments Strategy & Systems, 2016, vol. 10, issue 1, 50-63

Abstract: In this paper, a remarkably simple method to reduce Internet card fraud will be presented, making ‘OFF’ the default for any payment card. First, an in-depth global overview of card fraud figures will be presented based on various sources. Global card fraud is expected to exceed US$35.54 billion annually by 2020. It turns out that most of the countries with mature card markets (defined as countries with high volumes and values of card transactions per inhabitant) experienced high rates of fraud. Card-not-present (CNP) fraud is typically the most common type of fraud experienced. In the next section, the authors explore the reasons why consumers are vulnerable to CNP fraud. Vulnerabilities like phishing attacks, Trojan software, and the man-in-the-browser attack are being discussed, as well as some data breaches. In Europe, legislators are developing regulation addressing the security of Internet payments and this is discussed in a separate section. The new requirements stipulate that the initiation of Internet payments, as well as access to sensitive payment data, should be protected by strong customer authentication. Strong customer authentication is currently widespread, mostly implemented in such a way that users need a special card reader, their smart card, and the use of a lengthy challenge/response procedure. However, in this paper another secure authorisation method is introduced where all payments are blocked by default and users require a dedicated smartphone app to unblock their account for a limited time, thus providing pre-approval for a single payment. The authors argue that the second method offers a superior trade-off for consumers in terms of convenience, integrity, and security. The authors also argue that there is a rationale to explain that the proposed solution, if deployed correctly, can reduce card-related fraud significantly, both for card-present and CNP transactions, and hence is in line with the EU regulator’s ambitions to reduce fraud on Internet payments with cards.

Keywords: card payments; card fraud; card-not-present (CNP) fraud; fraud prevention; strong customer authentication; pre-approval of Internet payments (search for similar items in EconPapers)
JEL-codes: E5 G2 (search for similar items in EconPapers)
Date: 2016
References: Add references at CitEc
Citations:

Downloads: (external link)
https://hstalks.com/article/513/download/ (application/pdf)
https://hstalks.com/article/513/ (text/html)
Requires a paid subscription for full access.

Related works:
This item may be available elsewhere in EconPapers: Search for items with the same title.

Export reference: BibTeX RIS (EndNote, ProCite, RefMan) HTML/Text

Persistent link: https://EconPapers.repec.org/RePEc:aza:jpss00:y:2016:v:10:i:1:p:50-63

Access Statistics for this article

More articles in Journal of Payments Strategy & Systems from Henry Stewart Publications
Bibliographic data for series maintained by Henry Stewart Talks ().