| PSBill provides the highest level of | | | | about to make from this sale, you should |
| encryption available in the industry. But no | | | | exercise caution. |
| amount of encryption or security can prevent | | | | |
| fraud if the fraudster has managed to get | | | | Multiple transaction attempts |
| hold of card numbers and other details from | | | | |
| credit cards that haven't been reported as | | | | As a PSBill merchant, you have been given |
| stolen. Unfortunately, as credit and banking | | | | access to view all your transactions in the |
| laws stand, it is you, the merchant, who must | | | | backoffice area. If you detect multiple |
| bear the financial cost of any fraudulent | | | | failed attempts from the same person followed |
| transactions. However, if you are fully aware | | | | by an authorisation, this could signal fraud. |
| of the risk of fraud when trading on the | | | | With the backoffice, you have the ability to |
| Internet, you stand a better chance of | | | | suspend settlement of such transactions using |
| avoiding its consequences. | | | | settlement control. |
| | | | |
| Based on the experience we have gained after | | | | IP blocking |
| many years in the business of online | | | | |
| authorisations, we would recommend you take | | | | PSBill also offers the ability to block |
| the steps listed on this page to help you to | | | | certain IP addresses from your payment |
| reduce the risk of fraud. Please note that | | | | facility. Unfortunately, this is not |
| these steps and suggestions are only a | | | | infallible. Some persistent fraudsters will |
| guideline, and that this is not the | | | | merely sign in using another ISP. In these |
| definitive list of precautions you can take. | | | | instances, we cannot prevent internet access |
| Fraudsters are finding new ways of committing | | | | to these people because it becomes impossible |
| their crimes all the time, and there is no | | | | to detect a repeat attempt when a different |
| absolute solution to prevent online card | | | | ISP is used. |
| fraud. | | | | |
| | | | Address checks |
| Address verification and card security codes | | | | |
| | | | Address verification (AVS) will do this for |
| Online address verification (AVS) and card | | | | you automatically on most cards issued in the |
| security code checking (CVV2, CVC2) are now | | | | USA and UK. If AVS won't work on a particular |
| available through all the banks with whom | | | | card, or you are not using AVS for some |
| PSBill is integrated. These services are free | | | | reason, then you may be able to call your |
| of charge, and we recommend that all our | | | | acquiring bank and ask for a "Code 10 check" |
| merchants use them. You will need to add | | | | to verify the cardholder address, although |
| extra fields to your customised forms in | | | | this kind of check is not available on all |
| order to use these features; full | | | | card types. |
| instructions are in the Address Verification | | | | |
| (AVS) and Security Code Guide, which you can | | | | Deferred settlement |
| download from the technical documents page. | | | | |
| | | | If you sell high value goods, then it would |
| For more information about address | | | | be prudent to defer automatic settlement |
| verification and card security codes, see our | | | | until you have had a chance to vet the order. |
| fraud control page. | | | | |
| | | | Confirmed delivery |
| Free email addresses | | | | |
| | | | Signature upon delivery is NOT acceptable |
| Be wary of transactions that originate from | | | | proof to the banks in the event of a dispute. |
| free email accounts (such as Hotmail or | | | | However, if you do operate this policy, make |
| Yahoo!). Free email accounts are easy to set | | | | sure that you always use a reliable delivery |
| up and they enable a fraudster to retain | | | | agent. Should you subsequently wish to raise |
| total anonymity - no proof of ID is required | | | | a suspected fraud case with the police, such |
| when opening a free email account. We are not | | | | information would be vital in attempting to |
| suggesting that every customer who uses a | | | | establish whether fraud has taken place. |
| free email account is a potential villain - | | | | |
| many people have quite legitimate reasons for | | | | Look like you mean business |
| using them - but the use of a free email | | | | |
| account should be considered particularly | | | | Make it clear on your web site that you |
| suspicious if it occurs in conjunction with | | | | operate anti-fraud precautions, and that you |
| one or more of the other circumstances listed | | | | will make every effort to find and prosecute |
| on this page. | | | | fraudsters who abuse your online shopping |
| | | | system. Even if you lack the resources to do |
| Suspect countries | | | | this, it may encourage fraudsters to look for |
| | | | easier targets elsewhere. |
| Always check your delivery addresses. | | | | |
| Countries with the highest incidence of | | | | Summary |
| online card fraud include many parts of Asia | | | | |
| (including Indonesia, Malaysia and | | | | PSBill is reliant on the banks for |
| Singapore), the Baltic region, Eastern | | | | authorisation codes. We run additional fraud |
| Europe, Africa and South America. | | | | checks that operate across our systems |
| | | | looking for suspicious patterns in an attempt |
| Transaction values | | | | to avert large hits on any of our merchants' |
| | | | sites. But as the merchant, you also need to |
| Be aware of the general average value of your | | | | be vigilant and take responsibility for your |
| Internet sales. If you suddenly receive an | | | | own transactions. If in any doubt, place the |
| authorised order for an amount that far | | | | transaction on hold and do not despatch the |
| exceeds your average order value, instead of | | | | goods. Allow yourself time to investigate. |
| calculating the vast profits you feel you are | | | | |