Fraud prevention support

• Track hardware serial numbers and inspect for tampering
• Use security cables or locked stands
• Train employees to recognize suspicious activity

When your POS (Point of Sale) is tampered with, it means someone has physically altered or compromised the device. This could involve adding unauthorized equipment like skimmers to capture card details, tampering with the wiring, or replacing the device with a fraudulent one. Regular inspection of your POS hardware for signs of tampering, such as unusual attachments or damage, helps prevent fraud and ensures your equipment remains secure. Below are some signs that your device has been tampered:

• Missing or mismatched serial numbers
• Unusual attachments or loose parts
• Unexpected device behaviour (slow transactions, errors)

• Stop using the device immediately
• Notify your payment processor and IT team
• Review security camera footage if available

• Verify customer IDs for large purchases
• Be cautious of customers who rush transactions
• Watch for unusual card behaviour (e.g., multiple declines)

• Ensure regular maintenance and updates of your POS systems
• Work with vendors to maintain PCI DSS compliance
• Keep an open line of communication with your vendors for quick issue resolution

PCI DSS is a set of security standards that protect payment card data. It requires businesses to ensure that sensitive cardholder information is stored, processed, and transmitted securely. This includes encryption, access control, and regular security assessments. Compliance with PCI DSS helps protect your business and your customers from fraud and data breaches.

• Ensures secure handling of customer payment data
• Reduces risk of data breaches
• Helps businesses avoid fines and penalties

• Disable remote access from the Internet unless necessary
• Use remote management tools with strong security controls
• Regularly update remote access software and change your default passwords
• Restrict access to trusted third parties
• Enable data encryption and logging
• Implement a hardware-based firewall with advanced security features

• Placing orders with stolen credit card
• Hacking customers accounts to make unauthorized purchases
• Using bot attacks to test stolen card details

• Fraud scoring tools that analyze transaction risk
• IP tracking to flag unusual locations

• Use Address Verification Service (AVS), to verifies the billing address provided by the cardholder against the address on file with the card issuer. If the addresses don’t match, it could indicate fraudulent activity. It helps you reducing the risk of chargebacks and improves transactions security
• Require CVV codes for all transactions, also known as CVV2 (Visa), CVC2 (Mastercard) and CID (Amex and Discover card)
• Monitor high-risk transactions (e.g., large orders from new customers)
• Follow Payment Brand Data Security support to assist you in complying with Visa’s Cardholder Information Security Program (CISP) and Mastercard’s Site Data Protection Program (SDP)

For more detailed information on the above, visit:

• Payment card account verification codes: card & address
• Visa's CISP Data Security Standard Explained
• Mastercard Site Data Protection (SDP) Program | PCI DSS Compliance

Fraud can take many forms, and knowing the warning signs can help you protect your business. Here are some real-world scenarios where fraud may occur and what to do if you encounter them.

Being aware of these fraud tactics can help you make informed decisions and reduce risk. Always trust your instincts—if a transaction feels suspicious, it’s okay to take extra steps before proceeding.

A customer insists their bank provided them with an authorization code and asks you to enter it manually.

• Red flag: Banks do not issue authorization codes directly to customers. This is a common fraud tactic used to bypass security measures
• Recommendation: Do not process the transaction manually. Instead, request an alternative payment method or advise the customer to contact their bank directly

A new customer places a high-value order without hesitation and requests immediate processing.

• Red flag: Fraudsters often attempt large transactions before the cardholder reports the card as stolen
• Recommendation: Verify the customer’s identity, use Address Verification Services (AVS), and assess whether the purchase aligns with normal buying behaviour. If something seems off, consider declining the sale

A customer repeatedly attempts transactions with different cards, finally succeeding with one.

• Red flag: Fraudsters may be testing stolen cards to see which ones still work
• Recommendation: Request identification matching the cardholder’s name. If anything seems suspicious, decline the transaction and ask the customer to contact their bank

An online order has a billing address that does not match the shipping address, and the customer requests rush shipping.

• Red flag: Fraudsters often use stolen card details while shipping items to an unassociated address
• Recommendation: Use AVS to verify billing details. If there’s a discrepancy, contact the customer for confirmation before processing the order

A customer’s payment keeps getting declined, but they insist that your system is at fault.

• Red flag: Repeated declines could mean the card is stolen, blocked, or has insufficient funds. Fraudsters may pressure staff into overriding security protocols
• Recommendation: Do not manually override the decline. Suggest the customer contact their bank to resolve the issue

A customer makes a purchase but later disputes the charge, claiming they never received the item or didn’t authorize the transaction.

• Red flag: Some fraudsters abuse chargeback policies to get free products or services
• Recommendation: Keep detailed transaction records, including signed receipts and shipping confirmations, to provide evidence if a dispute arises