{"id":6894,"date":"2017-05-24T00:00:00","date_gmt":"2017-05-23T16:00:00","guid":{"rendered":"https:\/\/www.fraudlabspro.com\/resources2\/tutorials\/how-to-identify-credit-card-fraud\/"},"modified":"2026-04-02T18:32:29","modified_gmt":"2026-04-02T10:32:29","password":"","slug":"how-to-identify-credit-card-fraud","status":"publish","type":"docs","link":"https:\/\/www.fraudlabspro.com\/resources\/tutorials\/how-to-identify-credit-card-fraud\/","title":{"rendered":"How to identify credit card fraud"},"content":{"rendered":"\n
\"Credit<\/a><\/figure>\n\n\n\n
\n
\n

 <\/h2>\n

Introduction<\/h2>\n<\/div>\n<\/div>\n\n\n\n
\n
\n
\n

In this tutorial, we would like to share with merchants some common techniques to pinpoint red flags of credit card frauds. Our goal is to cut down all frauds and chargebacks.<\/p>\n

John is an online merchant selling watches. Below is one of his typical order. Everything looks fine to him but we would like to highlight some important information to help him make an informed decision.<\/p>\n

\"FraudLabs<\/a><\/figure>

<\/p>\n<\/div>\n<\/div>\n<\/div>\n\n\n\n

\n
\n

IP Address<\/h2>\n<\/div>\n
\n
\n

The IP address is from an anonymous web proxy service. It allows the user to hide their actual IP address but still perform an order submission. In this case, the actual user IP address is unknown and we only know the proxy server’s IP address.<\/p>\n

If we analyze the user\u00e2\u20ac\u2122s IP address, it is located in a different country which is 1,000 miles away.<\/p>\n<\/div>\n<\/div>\n<\/div>\n\n\n\n

\n
\n

Amount and Quantity<\/h2>\n<\/div>\n
\n
\n

The order and quantity are also above average transaction values. Fraudsters will usually order large quantities of items to maximize their returns.<\/p>\n<\/div>\n<\/div>\n<\/div>\n\n\n\n

\n
\n

Addresses<\/h2>\n<\/div>\n
\n
\n

The shipping address is being listed as one of the forwarding service providers. The actual item will be forwarded to another address for collection upon fraudster\u00e2\u20ac\u2122s further instructions.<\/p>\n

The shipping address, billing address and IP address locations are all totally different. In this case, the fraudster is using a proxy server, mail forwarder and stolen credit card to avoid tracking.<\/p>\n<\/div>\n<\/div>\n<\/div>\n\n\n\n

\n
\n

Email Domain<\/h2>\n<\/div>\n
\n
\n

The order is being submitted using a disposable email address. The email address is easy to setup, anonymous and temporary.<\/p>\n<\/div>\n<\/div>\n<\/div>\n\n\n\n

\n
\n

Username and Password<\/h2>\n<\/div>\n
\n
\n

The user name and password is too simple and generic. Fraudsters usually apply easy-to-remember account information.<\/p>\n<\/div>\n<\/div>\n<\/div>\n\n\n\n

\n
\n

Credit Card<\/h2>\n<\/div>\n
\n
\n

The credit card number has been blacklisted due to prior exposure in public area. The fraudster purchased this credit card information from underground trading forums.<\/p>\n<\/div>\n<\/div>\n<\/div>\n\n\n\n

\n
\n

BIN and Issuing Bank<\/h2>\n<\/div>\n
\n
\n

The BIN number and issuing bank name do not match. Fraudsters usually only have partial credit card information except for the issuing bank information.<\/p>\n

There are many other techniques that are not readily apparent when looking at the order forms such as transaction velocity and device fingerprints, both of which can also unmask a serial fraudster.<\/p>\n<\/div>\n<\/div>\n<\/div>\n\n\n\n

\n

If you do not have the time to process these techniques for all orders, you can consider the FraudLabs Pro fraud service which is free for small businesses.<\/p>\n

FraudLabs Pro service screens credit card transactions for online frauds. It accepts online transaction data via its open API. Fraud screening engine analyzes transaction parameters and returns its fraud analysis. Merchants can then decide on the next course of action based on the fraud distribution score or custom rules by conditions. Below are some features of FraudLabs Pro.<\/p>\n