~250 rules help refine account event screening, fine-tuned to its specific industry-predictive scenarios.
Authorize.net offers powerful payment acceptance and fraud and risk management solutions for ~450,000 small and medium size businesses.1
One of Authorize.net’s top priorities is securing the data stored in its customers' accounts. Given the sensitive nature of the data—from personal information to bank routing details—protecting against account-related fraud is key.
Authorize.net uses Cybersource’s Account Takeover Protection to protect existing accounts and guard against the creation of fraudulent new accounts. “By shifting the review process upstream, Account Takeover Protection helps prevent bad actors getting through the front door and attempting fraudulent activity downstream,” says Jason Trudeau, Senior Risk Management Analyst at Authorize.net.
Block fraud sooner with Account Protection
Account Takeover Protection leverages velocity, anomaly, and predictive behavioral patterns to screen account events like new account setup, account activation, account login, and credential changes and can block, challenge, or monitor the activity according to rules developed by Jason and his team.
Account Takeover Protection helps protect Authorize.net’s customers against attacks such as:
- Card testing attacks, which use botnets to run thousands of low-value transactions on an account to test the validity of stolen card details.
- Bank routing changes made by a fraudster to reroute revenue to their account.
- Misuse of expanded credit capabilities (ECC) by a fraudster to issue refunds to their own card or account.
Better screening means better decisions
Account Takeover Protection screens every application for fraud using a range of factors such as geography, behavior, velocity, known offenders, and data mismatches.
Applications that pass screening are then scrutinized by Visa risk team prior to a final decision to onboard. Once a business is onboarded, Authorize.net continuously monitors transaction volumes and behavior patterns.
~250
500+
500+ card testing accounts blocked in 1 month through a single reseller partner.2 New rules were swiftly implemented to prevent the accounts from activating.
4.3mm
4.3 million fraudulent logins blocked in 48 hours3 during a brute force card testing attack.
1 As of June 2023.
2 In January 2023. Results may vary per user.
3 In October 2022. Results may vary per user.