Al Pascual, director of Fraud & Security and Kyle Marchini, research specialist, for Javelin Strategy & Research co-authored this article.
Conventional wisdom indicates that card not present fraud will skyrocket as the United States shifts to EMV over the course of the next few years. Typically, this analysis is accompanied by analogies to balloons – as one end of the fraud “balloon” is squeezed, the rest expands. While this commentary correctly predicts the direction of Card Not Present (CNP) fraud, it mistakenly treats fraud as a homogenous mass and assumes that criminals can simply switch between different fraud types as the mood suits them. Point-of-sale (POS) card fraud and CNP fraud each have a notably different modus operandi and require different sets of skills, contributing along with other factors to an evolution of card fraud that will be more gradual in some respects and nuanced than many stakeholders anticipate.
Conducting fraud at the point of sale obviously requires accessing a physical location with a physical card. This could be the original payment card, obtained through loss or theft, or it could be a blank card encoded with track data from a compromised mag stripe card. To get any payoff, down-on-their-luck members of society are often relied upon to purchase goods from physical stores, and then the group must consequently fence the goods or try to return them for cash. This tends to mean that point of sale fraud rings have more knowledge of the physical streets than electronic avenues of fraud.
Nonetheless, as the United States transitions to EMV, POS card fraud will become progressively less lucrative. Card counterfeiting will border on impossible, given the inherent security of EMV chip-cards and the use of dynamic data to authenticate POS transactions. Additionally, merchants who use encryption or tokenization would effectively render data gained from compromised terminals useless for future POS transactions. These factors will largely restrict POS card fraud to lost or stolen cards. Since lost and stolen cards, along with cards obtained through fraudulent applications and account takeovers, are significantly more difficult to acquire and are more likely to be cancelled shortly after compromise, fraudsters at brick and mortar stores face a closing window of opportunity.
While POS card fraud is expected to decline gradually in an EMV-enabled U.S. market, CNP fraud will nearly double by 2018
Projections based on Javelin internal data, United Kingdom and Canadian card fraud data.
Still, POS fraudsters won’t be closing up shop any time soon. The long tail of EMV reterminalization and the inclusion of the mag stripe on US EMV cards means that the opportunity for POS card fraud will continue to exist for several years. By 2018, POS card fraud is only expected to decline to just under $5 Billion, from $6 Billion in total-related losses in 2013. With large retailers among the first adopters of EMV, they become less attractive targets for account data compromise and card fraud. Conversely, smaller businesses which may be less aware of the security implications surrounding EMV, such as local single-shop retailers, restaurants, or hotels, or unattended terminals including ATMs and gas station pumps, are expected to lag in implementation. This makes them prime repositories for mag-stripe data to compromise and prime targets for card fraud.
Further still, newly-issued chip cards will still retain the magnetic stripe to allow the card to be used at non-EMV enabled terminals and merchants equipped with chip readers will retain the ability to accept mag-stripe cards to prevent losing potential customers. Even at merchants who have fully reterminalized, mag-stripe data will be usable as a fallback if the chip and terminal are unable to communicate for any of a variety of reasons. If encryption is not used, any mag-stripe track data from attempted transactions will be just as vulnerable to breach—and subsequent counterfeiting—as before the migration.
Instead of growing because fraudsters shift their focus, CNP fraud will continue to rise in tandem with total U.S. e-commerce expenditures as was experienced in other major markets, according to Javelin’s Fixing CNP Fraud study. In fact, Javelin analysis of CNP fraud trends found that the transition to EMV will have a negligible effect on the volume of fraudulent e-commerce in the in the United States through 2018. The total value of fraudulent e-commerce transactions is expected to nearly double from $10 billion in 2014 to nearly $19 billion in 2018, making CNP the dominant card fraud type in the United States.
The “balloon analogy” is too simple to explain how card fraud will change over the next several years, but it is clear that EMV cannot bear the brunt of the blame for the coming growth in CNP fraud. Criminals will adapt to succeed, albeit slowly. Payment stakeholders that can effectively anticipate how fraud will change will be the most successful, bolstering their fraud prevention capabilities quickly and enacting aggressive steps to get ahead of the curve, including rapid reterminalization, stronger account authentication, and improved due diligence during account origination.
Forget the analogy. Don’t just squeeze the balloon. Pop it.
47 Comments
thank you
thanks you
Mastercard>Visa
Thanks for the team of the mastercard for developing such a security systems.
very good information…thanks
Thank you for this. Mastercard is our preferred CC vendor in Canada.
Thanks for this article,its very informative.
such an amazing article, very informative. thanks for sharing,
Hi…
A Hole in the Balloon Analogy: The Complex Evolution of Card Fraud in the US June 2015 by Al Pascual As we discussed in MasterCard’s Security Matters, conventional wisdom indicates that card not present fraud will skyrocket as the United States shifts to EMV over the course of the next few years.
Thanks a lot the article was very helpful
Hi…
The “balloon analogy” is too simple to explain how card fraud will change over the next several years, but it is clear that EMV cannot bear the brunt of the blame for the coming growth in CNP fraud. Criminals will adapt to succeed, albeit slowly. Payment stakeholders that can effectively anticipate how fraud will change will be the most successful, bolstering their fraud prevention capabilities quickly and enacting aggressive steps to get ahead of the curve, including rapid …
Thanks for sharing the information
Welcome to the Sonic Drive-In Employee Benefits login guide! This post is attempting by the employeebenefits.onl to give you detailed guidance about the benefits of the Sonic employees offered by the company.
Thanks for the post, it was very helpful
Hey! you have a good deals. Thanks
Thanks for posting this information. Keep it up!
thank you
سایدبای ساید
Searches related to گروه انتخاب
محصولات گروه انتخاب
شرکتهای گروه انتخاب
گروه انتخاب اسنوا
گروه انتخاب دوو
پرتال گروه انتخاب
فروشگاه اینترنتی گروه انتخاب
استخدام گروه انتخاب
زیر مجموعه های گروه صنعتی انتخاب
Schnucks RedPrairie is the employee and associate login portal offered to the authorized members working for the supermarket company, Schnucks. Schnucks Supermarket Chain has been providing its employees and associates healthcare as well as financial benefits at the portal, RedPrairie Schnucks Login.
Just got your new debit card fro the Canara Bank in your hand and are you excited enough to swipe your debit card? Well, one must generate Canara Bank Debit Card PIN in order to get the debit card for transactions.
Thanks for sharing this amazing Blog.
Nice Site, thanks for share
Now read and under stand the hindi numbers counting on qzyrics. BtW great article
Thanks for sharing this amazing Blog.
thanks for sharing this is a very great article please also check this site
مجله صادرات و واردات اگزیم مگ
جدیدترین اخبارمحصولات نوآورانه ایران و جهان
آمزش صفر تا صد صادرات و واردات
thanks for sharing this is a very great article please also check this site
Credit card payment processors take a number of steps to minimize card-not-present fraud. Thank You for sharing great pointers. I really like this blog.
Thanks for this article, its very informative.
A Libra man is always fully involved in any relationship and when he pulls away, it means he is badly hurt for some reason. Losing a Libra man is something that no lady can afford especially after having a relationship with a Libra man.
PG SLOT Demo ให้คุณได้ลองเล่นเกม สล็อต ได้พัฒนาฝีมือก่อนลงสนามจริง ทำให้ทุกการลงทุนของคุณมีความหมาย พร้อมรับโบนัสฟรีแล้ววันนี้ สมัครเลยที่ pg slot
istanbul hurdacı firması olarak adresten hurda alıyoruzx
en yakın hurdacı firması olarak nakit ödemeyle hurda alımı için adresinize geliyoruz
thanks for sharing this is a very great article please also check this site
Just because you’re making last-minute purchases doesn’t mean you’re on the naughty list and should be held responsible for unauthorized transactions.
Magenop Türkei ist ein Online-Medizinreise-Service Unternehmen. Wir arbeiten im international anerkannten Krankenhäusern und Ärzten aus der Türkei zusammen. Unser Ziel ist es, die höchste Qualität zu den günstigsten Preisen mit 100% Kundenzufriedenheit zu bieten.
This website is amazing and 100 % satisfaction for puchasing this Product and Money back gurantee .
I am also booking this product in this website … I have used Ikaria juice for weight loss for a while now and I really like it! It is easy to app
rchant. We’ve joined forces to tackle the cash problem head-on by developing an infrastructure for smallholder coffee farmers to bring electronic payments to these underserved communities. Working with banks, merchants and farmers, we’ll ensure these farmers receive their pay securely, and can use it for whatever the
This is just the latest example of how we continue to bring people into the financial mainstream. We can’t wait to get started and bring this capability to other partners around the world. In fact, we’ve also already started digging in deep to understand the challenges of factory workers within the garment manufacturing industry.
I’ve never come across such a good article. It’s really interesting. You write a very interesting article, I am very interested.
مهنث غخعق ذمخل شقف
The provided line graph illustrates only the POS card fraud during the period from 2014 to 2018. Overall it can be clearly seen that, the number of cases of POS card fraud was lower than the other types of fraud.
thanks for the article, very informative I hope It help other people
“Forget the analogy. Don’t just squeeze the balloon. Pop it.” – smart ending
Podcasting is the preparation and distribution of audio files using RSS feeds to the computers of subscribed users. These files may then be uploaded to streaming services, which users can listen to on their smartphones or digital music and multimedia players, like an iPod.
Very shortly this web page will be famous amid all blogging visitors, due to it’s nice posts.