Take these steps, both preventative and proactive, to avoid the deceptive schemes that can inflict financial disaster on your web business:
- Validate and authorize the credit card numbers from your customers in real time.
- Enable the security features that your bank or authorizing authority provides, such as address (AVS) and card verification number (CVN or card verification value) checking.
- Report suspicious activity to your bank and/or authorizing authority as soon as possible.
- Refuse to do business with customers in countries known to be hotbeds of corruption and fraud, and be careful of any overseas order.
- Ban visitors who appear to be attempting to make fraudulent transactions by blocking their IP address from connecting to your web server.
- Contact suspected fraudsters with a cease and desist letter or email, assuming they give you a valid address.
- Don’t ship merchandise until payment is confirmed.
You might also consider these more extreme measures:
- Refuse orders where the billing and shipping address do not match.
- Refuse orders to be shipped to non-physical addresses, such as post office boxes.
- Refuse orders from customers using a free email account, such as Hotmail or Yahoo!.
- Confirm large orders by phone and/or request faxed copies of the credit card and customer signature.
Bear in mind that taking these extra steps will snub many honest customers along with the fraudsters. To address this problem, your might consider placing a pop-up window on your failed order page that allows customers to provide anonymous feedback about why their order failed. Or, since many people block automatic pop-up windows, send a follow-up email to shoppers whose orders were not accepted if you can match up failed transactions with an email address.
