Getting defrauded and dealing with it

Look at using MaxMind and investigating all details when accepting card payments.

Check order IP address (and country/location) - you can also check the IP on Project Honeypot to see if it's been used for anything dodgy in the past
Check order address
Check credit card address (whether they match, don't allow big orders to be shipped to alternative addresses, especially for first orders)
Check the email address, whether the name has anything to do with the card holder's name, or just whether the email address itself looks dodgy

If anything looks out of place, call the person, explain to them a few things have flagged up and that you'll need a scan or high res photo of the card and some ID in order to process the order.

Edit: This might sound like a hassle, but this is the reality of accepting card payments online in this day and age. When a card payment is charged back against you, without a chip and pin (if you're a shop) or 3D secure authorisation (if you're online) it will automatically go against you as you can't prove the card holder gave permission for the charge.
 
Last edited:
I just can't believe how easy these scammers can get away. Anyone has similar experiences? Any idea if there is a way of chasing them? (without spending tons of money)

If they're organised crime no, give it up already. Sadly the police and card authorities don't care that much.

If it's a false report or kids with daddies card you could try paying them a visit or getting a private detective involved, some of them do specialise in recovering debts of this nature.

For the future though, I wonder why you've not used 3D-Secure? It would protect you against this sort of fraud (or at least the liability for it so long as you take sensible precautions).
 
When i spoke to o2 they were surprised to find an address registered to the phone that had been topped up, they said if i got in contact with the police they could ask them for the information they had on file, i did all this and explained the situation to the police.

The reason why the first thing they do with stolen CCs is to top up their mobile phones is because it's the easiest way to test whether a cc is working or blocked. That's why they did it. then they will proceed to use it for purchases (it seems you managed to cancel it before they had the chance).
 
Yup definitely only ship to the CC address then you have a name and address to issue money claims against, otherwise your gonna have to chalk it down to experience.

I wouldn't even let people use another address after just 1 order - only customers with a reliable order history.
 
The reason why the first thing they do with stolen CCs is to top up their mobile phones is because it's the easiest way to test whether a cc is working or blocked. That's why they did it. then they will proceed to use it for purchases (it seems you managed to cancel it before they had the chance).

When someone got hold of my debit card number the first dodgy transaction was a donation to Muslim Aid for £1, although at the time I read it as Musli Maid.
 
Back
Top Bottom