Proxy Detection

Proxy Detection web services allow instant detection of anonymous IP addresses. While the use of a proxy is not a direct indicator of fraudulent behavior, it can be a useful indicator when combined with other data elements to determine if an individual is attempting to hide their true identity. The fact is, some of the most used ISPs, like AOL and MSN, are forms of proxies, and are used by both good and bad consumers.

The fraudsters know, that is very easy to make their IP geolocation information look like it is coming from the region where their stolen credentials originated. This ability makes them look authentic, when in fact they are using a proxy to mask their true location.

Again not all proxies are equal, some are very reputable, and to cut them off would be a death-nail to your sales conversion. The goal is to use this technique to distinguish which proxies are derived from compromised computers, or from proxies that are known to be highly used by fraudsters. The generic ability to identify an anonymous proxy provides little value.

Has Data Breach Legislation actually impacted ID Theft?

According to a recent paper published by Sasha Romanosky, Rahul Telang and Alessandro Acquisti of the Heinz School of Public Policy and Management at Carnegie Mellon University, the data breach legislation instituted from 2002 thru 2006 has had little effect on reducing ID theft.
While the legislation has not reduced ID theft cases the debate is still ongoing if has slowed the rate of increase. It seems the rate of increase is the same in states with legislation and in those without legislation.

A fascinating study showing how the legislation has made companies more aware, vigilant and proactive, but the net result is just plain lacking. Some of the more intersting findings from the paper were:

1. 44% of consumers ignore data breach notices, Choicepoint indicated that only 10% of consumers opted for the free credit watch services.
2. Most companies under estimate the costs associated with a data breach. Choicepoint reported a cost of $26 million related to their data breach and TJ Max reported a cost of 178 million related to their data breach.
3. The impact of a data breach on a companies overall performance, sales and stock performance are temporary typically lasting less than 4 quarters.
To read more on this article go to: "Do Data Breach Disclosure Laws Reduce Identity Theft?".

Telephone Identification

Telephone identifcation is the process of determining the type of phone being used by a consumer or end user. This technique looks up the phone number to determine where it was provisioned, and the type of phone it is associated with.
Telephone identification, or TNI, serves several important functions. First it authenticates that the number is a real "dialable" phone number. Second it will let you know where the phone was provisioned, the country, region, and city. Lastly, and most importantly it will tell you the type of phone the number is assigned to.

To read more on Device Identification: http://www.fraudpractice.com/gl-phoneID.html

PCI Compliance does not Gurantee Protection from breach

While the PCI standards have done a tremndous job at helping to secure sensitive credit card data, organiztions still need to take proactive measures to secure their systems from hacking. There have been several documented cases where PCI compliant organizations have been hacked and card data has been stolen. The most notable recent case involved Hannaford Food stores where 4 million credit cards / debit cards were comprimised when fraudsters loaded malicious software on the companies 300 servers. The software allowed the fraudsters to pull and store credit card and PIN data as it was being processed from the stores.

To read more on this article go to the CS Decisions website and view the May 2008 article from Pat Pape entitled: "Secure your System".

Verified by Visa & MasterCard SecureCode drop Sales Conversion by 30%!

We are all well aware of the complaints about consumer adoption, issuer adoption, complexity in signup, usability and protection rights with these programs, but we have all been trying to quantify if there is a real impact to sales conversion. Mick Scott of Lastminute.com was quoted in the recent article “Industry lays into 3-D Secure”, Phil Muncaster, IT Week, 11 April 2008 as saying "We turned on Verified by Visa in Spain and it was horrific," said Scott. "There was a 30 per cent drop off in completed purchases."

For more information on this topic see the article “Industry lays into 3-D Secure”, Phil Muncaster, IT Week, 11 April 2008

“We value and secure your private data”

The article from SCMagazineUS.com “Clothing retailer settles with FTC over credit breach” by Dan Kaplan may seem routine. It discusses the missteps the FTC believed the company Life is Good had taken and it outlined the corrective actions. But take a minute to reread the statement by Dan Kaplan; “The FTC said the merchant deceived customers by stating on its website that it valued and secured private data.” Wow, that got my attention. How many retailers take that statement for granted on their website?

Takeaway items:
· If you say you are doing something related to consumer data, you better being doing it.
· Data security issues can still damage your brand and your sales, even if nobody is defrauded. Mr. Kaplan stated in his article that there was no documented case of actual fraud from this breach of over 10,000 accounts.

To read the full article from SCMagazineUS.com “Clothing retailer settles with FTC over credit breach” by Dan Kaplan go to : “Clothing retailer settles with FTC over credit breach”

Australians Poised to rollout Credit Card Pins on June 4th 2008

On June 4th 2008 Australia will roll out the capability for card present merchants to offer consumers the choice of confirming payment authorization using a physical signature or by entering a 4 digit pin.

Notable Quote: According to Pen or PIN project spokesman Simon Greig "Australians are among the most prolific card users in the world, making more that 118 million card transactions a month," Quote is taken from the Herald Sun Article by Alice Coster tittled “Credit card PINs punch wrong busttons”.

For more information related to this subject go to the Herald Sun article by Alice Coster titled: “Credit card PINs punch wrong buttons”