Over the Phone Payments (MOTO)
These types of payments, known as MOTO or card not present, are not the most secure, by definition.
They are one of the most common ways which fraudulent transactions arise.
To increase the security of your MOTO payments, please ensure you are set up for address checking and security code checking. These are often called AVS (Address Verification Service) and CVV/2 (Card Verification Value) checks on a virtual terminal.
You may need to add these in as a rule for your MOTO transactions if accepted through a virtual terminal, or ask your terminal provider to adjust the settings of your physical terminal to add in address and post code check
Still, even when taking the post code and address from the customer, this does not protect a business completely against a chargeback, should the real customer notify their bank that they do not recognise the transaction.
We would always discourage taking over the phone payments from new customers in particular.
Online Payments (ECOMMERCE)
The most common way fraudsters attack an E-COMMERCE site is by running thousands of stolen card details through a gateway, via an automated programme. In most instances, this is to simply test which stolen details will work, when it comes to making larger purchases.
One of the best ways to prevent such attacks, is to ensure that CAPTCHA checks are enabled, this must be implemented by a web developer.
Having 3DS checks enabled on your online payment method (a requirement of 100% of ECOM transactions by March 2022), will help to prevent fraudulent transactions, as the real cardholder must authenticate that it is them making this payment, before the payment is processed.
We have ensured that all of our Blink users who use a Blink Page or Pay Links (both ECOM methods), have automatically been enrolled for these checks prior to the cut off date in March 2022.