2008's Record Year for Data Breaches

According to Verizon's 2009 Data Breach Investigations Report, the total number of consumer records compromised in 2008 exceeded the combined total from 2004 to 2007, which has resulted in cheaper black market credit card data. In terms of actual street price the value of stolen card information has dropped from $10 to $16 per record in mid-2007 to less than $.50 per record today.


The primary target for cybercriminals is still the retail and financial sector which represented 61% of the 285 million records compromised. According to the report, while the absolute number of attacks was smaller, the cyber criminals and methods utilized were very determined, very complex and extremely successful. 3 out of 4 data breaches came from an outside entity, not an insider.

FBI Ramps Up Probes of Financial, Mortgage Fraud

Red Bank, April 7, 2009/The FraudBlog Newsletter/- FBI probes into financial and mortgage fraud are growing at exponential rates. John Pristole, FBI Deputy Director, said that the bureau has more than 2,000 open investigations into mortgage fraud and about 566 corporate-fraud investigations. Corporate and financial-institution failures have forced the FBI to focus on accounting fraud, insider trading and financial-statement manipulation. The director has expressed concern that the amount of fraud that has begun to surface has actually put a strain on the FBI’s resources for investigating white-collar crime.

Credit Card Details Freely Available on Web

Red Bank, April 7, 2009/The FraudBlog Newsletter/- Details of up to 19,000 Visa, Mastercard and American Express customers were found publicly available on the web. Speculation is fraudsters posted the data with the intent to sell it to other fraudsters. Numerous internet security experts have voiced concern that it was a rare event to have such a complete set of credit card data to be publicly posted for anyone to access.

Bill Me Later finds a Diamond in the Rough

Red Bank, April 7, 2009/The FraudBlog Newsletter/- Bill Me Later will soon allow consumers and businesses to pay their federal taxes through Metavante Corp.'s Link2Gov subsidiary. If the deal goes through, Metavante should gain additional transaction volume and Bill Me Later should gain an increase in loan volume. This partnership will grant Bill Me Later access to the huge and potentially lucrative deep tax-payment market. Taxpayers will have to pay 2.49% of the payment amount in the form of a convenience fee. Metavante plans to enable tax payments by Bill Me Later customers to state, county and municipal governments at an unspecified date.

The Tax Man comes to eBay

Red Bank, April 7, 2009/The FraudBlog Newsletter/- Last year, Congress passed legislation requiring third party payment processors like PayPal, Google Checkout and Amazon to report individuals and businesses that received at least $20,000 a year from credit/debit-card payments from more than 200 transactions. Importantly, this required disclosure is part of the Housing Assistance Tax Act of 2008 and will be in effect in 2011.

Hacking, Why Not?

Red Bank, April 4, 2009/The FraudBlog Newsletter/- Recent congressional hearings have shown evidence that terrorists are more involved than previously believed in cybercrime. In short, evidence suggests terrorists are actively training new recruits on how to hack into computer systems, perform phishing operations and to move money using stolen credit cards and bank accounts. In his jailhouse manifesto, Imam Samudra (linked to the Bali terrorist bombing), urged his Muslim radical comrades to declare holy war not on the battlefield, but rather in cyberspace. Imam describes how America's computer infrastructure and networks are vulnerable to hacking, credit card and money laundering.

American Express enhances Advanced Address Verification Service (AAV)

Advanced Address Verification (AAV) goes beyond AVS and checking the billing address on file with what the cardholder provided to also check the shipping address, email and phone number. This service is only available on American Express and due to its recent changes in March 2009 may or may not be supported by your gateway.

How Good Is It?

AAV+ is a real-time solution for merchants doing e-commerce, mail order or phone orders. AAV+ is not the same as AVS. AVS is checking the billing address on file with the Issuing Bank, AAV+ is checking the shipping address, email and phone number on file. The service is provided exclusively by American Express and is intended to check the billing and shipping address when the two addresses are different.