One of last year's most anticipated advances in fraud management was the final release of EMVCo's 3D Secure 2.0 protocol specification. Designed to take a risk-based approach to authorization and lower the checkout friction of its predecessor, 3DS2 will be a new tool in the growing anti-fraud arsenal.
In e-commerce and mobile commerce the problem of false declines is significant, especially during the holidays. Issuers decline transactions that online merchants approve. And vice versa. In other words, the necessary process of sorting out fraud from good transactions catches good transactions with the bad. This poor decision making means merchants lose the sale and the issuer its transaction fees.
Chargebacks are one of the card system's great consumer benefits. If fraud happens, the merchant doesn't deliver on what was promised, or you're charged six times for something you bought just once, the chargeback mechanism returns your money or restores your credit. What's not to like? Well, if you're a merchant, a lot. While there are plenty of legitimate chargebacks, there are also consumers who take advantage of the system through "friendly fraud," the "I didn't do it" chargeback category abused by all too many.
Payments industry professionals naturally have a hard focus on the industry's own dynamics. So, it's not uncommon to lose sight of who the customer is and who pays the freight. In retailing, yes, the consumer pays, but payments is a direct cost to the merchant. With all of the changes underway in the U.S. payments landscape, merchants now address payments as a complex, strategic element of their business, both as a way to drive new sales as well as a cost component to be tightly managed.
Anyone even vaguely conscious during Sunday afternoon football games has seen adverts for Visa Checkout, that shopping cart checkout assistant the card network is encouraging everyone—cardholders, issuers, and merchants—to adopt. Visa is not alone. MasterCard’s MasterPass and American Express Checkout are similar product offerings all meant to add convenience and security to the merchant’s checkout flow.
With the EMV liability shift only days away, consumers and merchants are facing any number of changes in the point of sale experience. Unlike some other countries where the EMV change-over took place on a single day, the US EMV transition is going to be a long one, too. Not every issue is ironed out either.
The 3D Secure protocols, one for each network, that connect ecommerce merchants to the cardholder’s issuer, has had a rough go. But after ten years, smarter application of the tool and, in particular, risk-based usage makes it more attractive to both issuers and merchants.
Every payment pro in the US is also a shopper and we all know that the largest retailers are poised to support EMV. Nearly all have EMV capable hardware. A few have turned it on. Most are waiting for the October liability shift so the temporary pain and awkwardness of clerk and consumer confusion is spread across everyone.
The domain of point of sale (POS) has three legs to its security stool: EMV, point to point encryption, and card number tokenization. Card not present (CNP) merchants and issuers have the more challenging task of assembling fraud mitigation tools on their own.
Decisions about point of sale transactions are largely made using card data alone but in e-commerce the merchant has to use a rich mix of data sources to manage fraud. The merchant is, after all, liable for both the transaction as well as the goods or services lost due to fraud.
