Advertisement
If you have a new account but are having problems posting or verifying your account, please email us on hello@boards.ie for help. Thanks :)
Hello all! Please ensure that you are posting a new thread or question in the appropriate forum. The Feedback forum is overwhelmed with questions that are having to be moved elsewhere. If you need help to verify your account contact hello@boards.ie
Hi there,
There is an issue with role permissions that is being worked on at the moment.
If you are having trouble with access or permissions on regional forums please post here to get access: https://www.boards.ie/discussion/2058365403/you-do-not-have-permission-for-that#latest

3D Secure, suspicious transactions

  • 21-03-2011 11:15am
    #1
    Paddyo
    Registered Users, Registered Users 2 Posts: 414 ✭✭


    Hi All

    We run an online shop and have 3D secure on it.

    However, recently we have noticed a few strange transactions. One person has ordered 3 times, different orders, different Cr Cards (different issuing banks) and all have been approved. He has also made 4 other attempts (all different cards again) which have been declined. The same name has been used on all transactions.

    If the orders turn out to be fraudulent who is going to take the hit.

    We are using Realex to process the cards. Should they not see somthing strange going on and stop the approvals?

    Any thoughts would be appreciated.

    Paddyo


Comments

  • #2
    thecommander
    Registered Users, Registered Users 2 Posts: 2,537 ✭✭✭thecommander


    Worked in computer telesales a few years back. Have the same thing. It usually turned out to be a credit card ring using stolen numbers to buy stuff. Usually the delivery address, and billing address don't match up.

    Call your merchant and they'll check with cc holder.


  • #3
    nice1franko
    Closed Accounts Posts: 2,300 ✭✭✭nice1franko


    You'll take the hit. Don't take the orders unless you get the go ahead from Realex.. no matter how tempting it is.


  • #4
    TheWaterboy
    Registered Users, Registered Users 2 Posts: 379 ✭✭TheWaterboy


    Even if your payment processor gives you the go ahead to accept the order and it does eventually turn out to be fraudalent, then you will still take the hit as it is a 'person not present' transaction.

    Contact the buyer and request a work email or a landline phone number. If they are a genuine customer they will have no problem giving you these details. Normally fraudsters provide you with a mobile number which is untraceable. A work email address or a landline number are traceable to a person and an address.

    I had a lot of issues with fraudulent orders over the years - doing extra checks takes more time but usually ensures the order is genuine.


  • #5
    J_Wholesale
    Closed Accounts Posts: 245 ✭✭J_Wholesale


    Are you sure they had to enter their 3D secure password? Even if you have 3D secure installed, if the credit card issuing bank is not enrolled in 3D secure, the buyer does not see the 3D secure screens. Many US banks, for example, are not enrolled in 3D secure.

    We got caught out by this ourselves once - ring of stolen US credit cards. You should be able to check in the Realex control panel to see if the buyer entered a 3D secure password or not. If they did, then you will not be held accountable for the money - that's the entire purpose of 3D secure, it passes responsibility to the buyer and the buyer's bank. If they did not enter their 3D secure password, then yes, you will have to pay.


  • #6
    sandin
    Closed Accounts Posts: 1,594 ✭✭✭sandin


    Another system of checking is to get a list of credit card prefixes and the bank / country they are issued to.

    If its issued by Soc General in France and the delivery address is Cork, I'd be suspicious.

    This site has most prefixes
    http://www.bindatabase.net/search.php


  • Advertisement
  • #7
    HellFireClub
    Closed Accounts Posts: 3,912 ✭✭✭HellFireClub


    J_Wholesale wrote: »
    Are you sure they had to enter their 3D secure password? Even if you have 3D secure installed, if the credit card issuing bank is not enrolled in 3D secure, the buyer does not see the 3D secure screens. Many US banks, for example, are not enrolled in 3D secure.

    We got caught out by this ourselves once - ring of stolen US credit cards. You should be able to check in the Realex control panel to see if the buyer entered a 3D secure password or not. If they did, then you will not be held accountable for the money - that's the entire purpose of 3D secure, it passes responsibility to the buyer and the buyer's bank. If they did not enter their 3D secure password, then yes, you will have to pay.

    This is the key thing about 3D Secure transactions. In a situation such as this, you are only covered in the case of fraud, if the transaction has been authorised using the 3D Secure pin at the buyer end. Even though your site is 3D Secure, if the transaction itself has not been authorised on the basis of a correct 3D pin having been entered, then you are not covered in the case of loss due to fraud. As far as I'm aware, if the transaction has been authorised by the bank through Realex on the basis that the correct 3D secure pin has been entered, but subsequently turns out to be fraudulent, then you are still covered, but obviously the chances of that happening are fairly remote I'd imagine, so I'd check if these transactions are proper 3D secure transactions, as I'd imagine that they aren't...


Advertisement