Avoiding credit card fraud

Avoiding Credit Card Fraud - An office or retail backroom where a professional woman is diligently verifying orders. On her desk, a computer monitor displays a "Suspicious Activity Check" alert, while a laptop shows a secure checkout interface. Various shipping boxes are visible, one featuring a prominent "Signature Required" label. In the background, a staff member at a checkout counter processes a card payment under a sign that reads "Validating Refund to Original Card." Other instructional posters on the walls highlight security measures like AVS and CVV verification, creating an atmosphere of proactive business protection against fraud.
Image by Gemini

Safeguarding your business against fraud is important, particularly if your business accepts credit cards. While credit card fraud is always a concern, it is something you can protect yourself against to reduce your risk of losses.

Preventing the cause of fraud

If you can and it’s appropriate, avoid the chance of any credit card fraud by offering alternative payment options for customers. Ensure your bank facility is approved to process mail, telephone and/or internet orders prior to accepting credit card payments.

Here are some additional steps you can take to reduce the risk of credit card fraud:

  • Take extra care to validate the customer’s full name, address, and contact details. Question any changes if customers request you amend their credit card details. Talk to someone you trust to confirm the change.
  • Have deliveries made ‘signature required’ with a courier of your choice to minimize the risk of carrier collusion and ensure all deliveries are to premises where a person is present.
  • When receiving card payments ensure all credit card information is sent through a channel that is encrypted and secure.
  • For paper invoices and mail or telephone orders, use options such as click-to-pay invoicing solutions. They allow your business to create a payment order that you can copy into an email. This is a far safer way of processing card details.
  • Use Address Verification Service (AVS) and Card Verification Value (CVV) to ensure the customer address matches the cardholder’s address and the customer has the card in their possession.
  • Monitor transactions for suspicious activity such as multiple orders from the same IP address, rapid transactions, or international orders (especially if the credit card address and shipping destination are different countries, or if the customer could purchase the goods locally for a better price).
  • If you are an e-commerce merchant, using an approved outsourced third party to capture and process payments is the safest option.
  • Secure your website, ensuring you have HTTPS/SSL certificates and consider having two-factor authentication or captcha on your checkout pages.
  • Regularly update your POS system and related payment software to ensure you have the most current security enhancements.

Protecting your business

Credit card fraud typically takes place online, so having the cardholder physically present to swipe the card and/or insert a PIN lowers the risk of fraud.

If you do experience credit card fraud, possibly the first you’ll know is when you get a chargeback.  This a reversal of a credit card payment from your account. For this reason, it is important that merchants take steps to identify the purchaser and ensure that every transaction is legitimate.

Refund fraud

Refund fraud is a common type of fraud which involves issuing credits (refunds) via your EFTPOS terminal. It is often committed by employees processing refunds to their own debit and/or credit card. To avoid detection, they may create a large sale on a fraudulent card then process a refund to their own card.

To guard against this type of fraud, we recommend you closely monitor all refunds, checking they all correspond to a legitimate sale and are refunded back to the card used in the original purchase.

Shipping scam

‘Shipping scams’ involve a malicious third party using a stolen credit card to pay for goods. The scammer contacts the business requesting goods to be shipped overseas. The price plus freight charges are requested to be billed and split between several credit cards.

The scammer insists that the business use a particular shipping company and provides a phony email address. The business then contacts that ‘shipping company’ which requests the freight charges be paid upfront by cash wire transfer.

The business checks that the credit cards have sufficient funds and are not stolen, then makes the transfer. But the shipping company’s email address is a front and the credit card details are stolen. Details stolen from online card accounts may take some time to discover.

Chargeback fraud

This occurs when a customer makes a purchase, then falsely claims they didn’t receive the item or service. They then dispute the charge with their credit card company. Where possible provide evidence that the item requested was shipped to the agreed upon address and delivered as requested. If possible, have the shipping company take a photo of the object as it is delivered.