Payment fraud is a growing concern for businesses of all sizes and industries, with losses estimated at over $42 billion worldwide in 2020 alone. For most businesses, particularly those that deal with a high volume of customer payments, payment fraud is an unfortunate yet unavoidable part of doing business. Managing the security of payments has become more complicated with the rise of digital commerce and new payment methods. As fraudulent actors’ tactics become more sophisticated, so too must fraud detection and prevention measures. The impact of payment fraud on businesses can be significant, including financial losses, damage to reputation, and legal and regulatory consequences.
Payment fraud is a type of financial fraud that occurs when someone intentionally uses false or stolen payment information to make a purchase. For example, fraudulent actors might use stolen credit card information, create fake checks, or make unauthorized electronic fund transfers. Retail businesses are particularly vulnerable to payment fraud, since they deal with a large volume of transactions and may not have the resources to thoroughly vet each payment method. Payment fraud can result in significant financial losses for businesses, damage to their reputation, and legal liabilities.
There are several types of payment fraud:
Credit card fraud
Credit card fraud is the unauthorized use of a credit card to make purchases or obtain cash. For instance, this fraud can involve the use of stolen credit card information or the creation of counterfeit credit cards. In credit card fraud, the fraudster can use the stolen credit card to make purchases online or in-person, or they may use the card to withdraw cash from an ATM.Credit card fraud losses increased to $4.2 billion in 2020, up from $3.5 billion in 2019. Card-not-present fraud is expected to increase from 57% in 2019 to 74% by 2024.
Debit card fraud
Debit card fraud is similar to credit card fraud but involves the unauthorized use of a debit card. The fraudulent actor may use a stolen debit card or the card information to make purchases or withdraw cash from an ATM. Debit card fraud can also occur if someone obtains access to the PIN associated with the card.
Bank fraud
Bank fraud refers to any type of fraud that involves a bank or financial institution. This can include fraudulent loans, account takeover fraud, and identity theft. Bank fraud can result in significant financial losses for individuals and institutions.The 2022 ACFE Report to the Nations found that banking and financial services are the second-most targeted industry for fraud, with a median loss of $100,000 per case.
Wire transfer fraud
Wire transfer fraud occurs when a fraudulent actor obtains access to someone’s bank account or wire transfer information and then uses it to transfer money to their own account. The fraudulent actor may employ various tactics to obtain the victim’s information, including phishing scams or hacking into the victim’s computer or email account. The FBI’s Internet Crime Complaint Center (IC3) reported that wire transfer fraud was the most commonly reported type of business email compromise (BEC) and email account compromise (EAC) scam in 2020.
Check fraud
Check fraud involves the creation or alteration of a check to obtain funds fraudulently. This can include forging a signature or altering the amount of the check. Check fraud can occur when someone steals a checkbook or obtains access to a victim’s checking account information. Checks were the payment method most vulnerable to fraud, accounting for 66% of all payment fraud in 2020.
Mobile payment fraud
Mobile payment fraud is the unauthorized use of mobile payment services, such as Apple Pay or Google Wallet, to make purchases or transfer funds. This can occur if someone gains access to the victim’s mobile device or payment information. Mobile payment fraud can also occur if a fraudulent actor creates a fake mobile payment account using someone else’s information. Seventy percent of fraudulent transactions took place on mobile devices in 2022.
How does payment fraud happen?
Fraudulent actors use a range of tactics to obtain access to sensitive payment information or carry out unauthorized transactions:
Phishing
Phishing is a technique used to obtain sensitive information such as credit card details, log-in credentials, and other personal information. Phishing is often done through email or social media, where the fraudulent actor creates a fake log-in page or payment portal to trick the victim into entering their information.
Skimming
Skimming is the process of stealing credit or debit card information by installing a device on a legitimate payment terminal. The device captures the card information and PIN number, which can be used to create counterfeit cards or withdraw cash from an ATM.
Identity theft
Identity theft occurs when a fraudulent actor obtains someone’s personal information, such as their name, address, and Social Security number, to commit fraudulent transactions. This can include opening new credit cards, applying for loans, or making unauthorized purchases.
Chargeback fraud
Chargeback fraud occurs when a customer makes a purchase using a credit or debit card and then disputes the transaction with their bank, claiming that the purchase was unauthorized or defective. With chargeback fraud, the business is often stuck reimbursing the customer, even if the purchase was legitimate and made by the cardholder.
Business email compromise (BEC)
BEC is a type of fraud that targets the employees of a business. The fraudulent actor will send a phishing email to an employee, usually a senior executive or business partner, requesting that the employee disclose sensitive information or transfer funds to the fraudulent actor.
Malware
Malware refers to any type of malicious software designed to gain access to sensitive information or control a victim’s computer or device. Fraudulent actors use malware to steal credit card information, log-in credentials, and other personal information. Source