Payments

    Payment Fraud

    Term #186

    Unauthorized use of stolen credit-card details for purchases. Includes card testing (checking which stolen cards are active with small charges), account takeover, and triangulation fraud. Costs the merchant the goods plus a chargeback.

    In practice

    Payment fraud is stores' 'hidden enemy.' Card testing: a store suddenly sees 200 purchases of $1 — a hacker is checking which cards are active. Every 'purchase' incurs a processing fee. Then come the big purchases. Fraud detection is mandatory.

    Common misconception

    'A small store won't be targeted.' Hackers attack automatically — scripts scan unprotected stores. A small store with no protection is an easier target. Fraud happens even to $14K/month stores.

    How to fix it

    High fraud? (1) Enable a fraud-detection tool: Shopify has one built in, WooCommerce uses Kount / Signifyd, (2) Set rules: orders over $550 = manual review, (3) Require CVV + AVS, (4) Rate-limit checkout, (5) Add a CAPTCHA on the payment page.

    Example

    Gadget store: a card-testing attack — 340 transactions of $1-5 in one day. Loss: fees + hours of handling. Shopify fraud detection + rate limiting: zero suspicious transactions the following month. Adding a CAPTCHA: $0 + 1 hour.

    Priority

    Fraud prevention is day 1. Shopify: built-in fraud analysis — turn it on. WooCommerce: WooCommerce Anti-Fraud + Stripe Radar (built into Stripe). Not optional — without protection, you're a target.

    Jimmy tracks your Payment Fraud, automatically

    WhatsApp alerts when something important changes. No dashboards, no hassle.