Chip and PIN technology has become the new standard for payment card transactions, but the continued existence of magnetic stripes and ingenuity of card fraudsters insures that card based and other transactions are at risk. While proven more secure than magnetic stripe only cards, non EMV compliant or compromised terminals and card “fall back” events defeat the safety features of EMV chips and provide a playground for card fraudsters.
Shimmers…next generation Skimmers
One of the latest hacks targeting credit and
debit cards is the “shimmer.” Deeply inserted and sandwiched directly between
the card’s chip and an ATM or POS system’s card reader, it is embedded with a
microchip and flash storage capable of accessing a card’s EMV chip, the card
number and more. It is invisible to the cardholder and unlikely to be affected
by most anti-skimming, jamming or detection solutions. Collected information
can be used to create a cloned magnetic stripe card.
A CSFi customer was recently slammed by a skimmed card
attack. Approximately 15 skimmed/cloned cards had been used at multiple
ATMs at least 10 times each at $500 per withdrawal. They were getting hit hard
and fast by continuing on-us fraudulent transactions. With losses averaging
over $5,000 per card at the time of discovery, they needed a solution fast.
Deploying SWITCHWARE® Check BIN Limits functionality, the bank enabled CSFi’s Sentinel™ Alert Notification System to provide institution wide real-time monitoring and alerts for any violation of customizable card withdrawal rules at any ATM in their fleet. Designed to detect behavior consistent with fraudulent card use at the ATM, the bank was able to track potentially fraudulent behavior in real time and minimize losses.
With no comprehensive real-time fraud monitoring solution yet in place, the bank relied upon the capabilities of CSFi, SWITCHWARE® and Sentinel™ to stem the tide of losses from multiple on-us ATM withdrawals on the same cards. When future suspicious transactions occurred, the bank was immediately notified of the BIN, Card Number, Sequence Number, Transaction Amount, and location of the event through CSFi’s Sentinel Alerts.
While certainly not a substitute for CSFi’s far more comprehensive and robust FraudBlock® Real-Time Fraud Protection and Prevention System, monitoring and alert functionality proved invaluable in the early identification of fraudulent card activity and minimization of card losses.
What’s next? Who
The best deployed
technology always wins. Modern transaction monitoring, fraud analysis and
real-time authorization controls give the prepared bank the upper hand. CSFi
real-time card fraud prevention tools allow for split second recognition of
troubling transactional activity, an opportunity for immediate response,
reduced chargebacks, and an enhanced customer experience.
Designed to detect transaction
anomalies, CSFi’s FraudBlock is an easy-to-use solution that
provides granular “down to card level” control of fraud risk. Designed to
combat the efforts of fraudsters today and tomorrow, including card not present
transactions, FraudBlock puts
the bank in charge. FraudBlock can stop fraud before it happens.
- Block fraud at the cardholder level
- Alert of fraud based patterns of cardholder use
- Block fraud in real-time and background
Inspect transactions as they are being processed or immediately after approval.
- Allow instantaneous “on the fly” implementation, disablement, or modification of fraud rules and post review actions
No waiting on an EFT or ATM network.
- Block fraud using On-Demand Network Denial Rules
Build denial rules that reject transactions using values on the ISO8583 messages.
- Automate “on demand” blocking or authorization based on changes to card status
- Build or copy custom rules
Card issuers can build custom rules specific to their needs or copy existing rules to modify them.
- Block fraud outside the country
Isolate fraudulent transactions from a specific country or designate a specific set of countries as “risky.”
- And so much more…
For more information on optimizing
the security of your transaction environment contact
a CSFi representative today.
Visit CSFi.com and Register
now to watch a video of FraudBlock in
action and enable full access to our web resources. Once registered, users have
full access to brochures, videos and additional information describing the
features and benefits of
G4, FraudBlock™, ATM
Encryption Solutions, Sentinel™, EMV
support, and our entire suite of products, services and solutions.