March 2023 Summaries

Omnichannel fraud presents a significant challenge to businesses by exploiting vulnerabilities across various digital channels, such as e-commerce sites and mobile apps, to commit financial crimes without physical interaction. Fraudsters use tactics like account takeovers, card-not-present fraud, and mobile payment fraud to access and misuse customer accounts and payment systems, often resulting in chargebacks and reputational damage for businesses. The rise of online shopping and mobile payments has expanded opportunities for fraud, making it crucial for companies to understand these threats and implement comprehensive security measures. Effective strategies include using data encryption, multi-factor authentication, and digital identification solutions to protect customer data and prevent unauthorized access while maintaining a seamless user experience. By addressing these issues, businesses can safeguard their financial assets and customer trust, ensuring long-term success in the increasingly digital retail landscape.

Triangulation fraud is a sophisticated form of eCommerce fraud involving a fraudster who acts as a middleman in transactions between a genuine customer and a legitimate eCommerce site. This scam typically occurs in card-not-present transactions on online marketplaces such as eBay or Amazon, where the fraudster uses stolen credit card information to purchase items from legitimate sites, leading to chargebacks and financial losses for the retailers while the customer receives their order unaware of the deceit. The impact of triangulation fraud is significant, with potential losses predicted to exceed $10 billion in the U.S. by 2024, comprising a major portion of all online fraud. Fraudsters obtain the necessary credit card information through methods like account takeovers, phishing, social engineering, and data breaches. To combat triangulation fraud, businesses are advised to adopt multi-layered anti-fraud strategies, including educating customers, implementing risk-based authentication, and utilizing digital identification solutions like browser fingerprinting. These measures not only help in identifying suspicious activities but also protect sensitive customer information, maintaining the trust and integrity of eCommerce platforms.

The gaming and gambling industry faces significant challenges from bad bots, which constitute 53.9% of malicious activity on related sites, necessitating robust security measures to protect customer data. Betting bots, designed to mimic human behavior and aided by AI, automate the gambling process by scanning sites for odds changes, which can lead to revenue loss through arbitrage and user frustration. These bots exploit gaming platforms by taking advantage of differences in bookmakers' odds and engaging in unethical activities such as account takeovers and promo abuse, often resulting in financial losses for both players and platforms. To combat this, companies can employ advanced bot detection systems, like Fingerprint, which distinguishes between legitimate users and bots, thereby safeguarding digital gambling and gaming businesses. Legal implications of using betting bots vary by jurisdiction, with some areas considering them a form of cheating or fraud, while others simply ban users from platforms.

False declines, a significant payment fraud issue, can result in substantial revenue losses and customer attrition for businesses, with estimates suggesting an annual revenue loss of up to 3% due to these declines. eCommerce businesses are particularly vulnerable and must adopt proactive strategies to mitigate payment fraud and prevent false declines, as traditional fraud prevention tools may inadvertently reject legitimate transactions, leading to additional costs. Key strategies include monitoring transaction trends in real-time, utilizing device identification to thwart fraud attempts, and implementing effective yet seamless fraud prevention measures. A webinar is available to provide further insights and strategies for businesses seeking to enhance their protection against fraud.

Letterboxing is a privacy feature available in browsers like Tor and Firefox, designed to obscure browser dimensions by adding gray bars around the web view, thereby making it harder for advertisers to track users through browser fingerprinting. Introduced in Tor in 2015 and Firefox in 2019, letterboxing adjusts the browser window dimensions to be multiples of 100 or 50 pixels, reducing the uniqueness of screen sizes used for identifying browsers. Browser fingerprinting, which collects data such as screen resolution, operating system, and browser version to create a unique identifier, is commonly used for fraud detection and user protection. While letterboxing can make it easier to reset simplistic fingerprinting identifiers by masking true screen dimensions, sophisticated solutions like Fingerprint Pro use a combination of client-side and server-side signals to maintain a stable identifier even if some signals change, making simple letterboxing ineffective against advanced fingerprinting techniques. Despite its limitations, letterboxing represents one of several strategies to enhance online privacy, as browsers increasingly adopt anti-fingerprinting measures amidst rising privacy concerns.

Online advertising faces significant challenges from advertisement fraud, which involves activities like botnet traffic, fake referrals, and fraudulent clicks that can cost businesses billions annually. This type of fraud gives the illusion of a successful ad campaign but fails to generate real revenue, as seen in cases like Aleksander Zhukov's "Methbot" scheme and Uber's litigation against ad networks. Fraudulent tactics include hidden ads, clickjacking, click flooding, fake app installations, and botnet fraud, all of which exploit the digital advertising ecosystem. To combat these threats, advertisers are encouraged to implement strategies such as blocking malicious users, managing Ads.txt and Sellers.json files, and monitoring data for anomalies to ensure genuine engagement with their ads. Tools like Fingerprint's BotD can help developers build applications that detect and prevent fraud, enabling businesses to safeguard their advertising investments and focus on effective marketing strategies.

Insurance companies face the persistent challenge of combating online fraud, which has evolved with technological advancements, allowing fraudsters to operate across multiple regions without physical presence. During the COVID-19 pandemic, a significant rise in fraudulent activities was noted, particularly phishing scams targeting the vast data held by insurers, resulting in annual losses exceeding $80 billion and increased premiums for policyholders. Cyber-criminals employ tactics such as identity fraud and account takeovers to create multiple fraudulent accounts and claims, often utilizing stolen identities and devices. These fraudulent activities highlight the necessity for insurance companies to implement advanced detection and prevention strategies, such as device fingerprinting, which uses machine learning to identify suspicious behavior and protect against malicious users. By assigning unique identification codes to users, insurers can effectively monitor and block potential threats, thereby safeguarding their financial interests and maintaining customer trust.

Online Travel Agencies (OTAs) like Booking.com, Expedia, and Skyscanner face significant challenges in combating eCommerce fraud due to the high resale value of airline tickets and hotel bookings, making the industry a prime target for fraudsters. Common types of fraud include the use of stolen payment cards, chargeback fraud, account takeover, and ticket cancellation schemes. To mitigate these risks, OTAs are advised to implement robust identity verification and fraud prevention measures, such as partnering with companies like Fingerprint and Vesta that offer advanced technologies like browser fingerprinting and machine learning-driven fraud detection. Customers are also encouraged to book through reputable OTAs, verify the authenticity of booking sites, and consult trusted review platforms to safeguard against fraud. With identity theft on the rise, both OTAs and their customers must remain vigilant and proactive in the ongoing battle against online travel fraud, leveraging specialist providers to enhance security beyond standard payment provider capabilities.

Fingerprint, founded by Valentin in 2019, has experienced rapid growth, marked by a recent Series B funding round, tripling revenue, and reaching over one billion monthly API calls. Originally an open-source project called FingerprintJS, it has become the leading browser fingerprinting library on GitHub with over 18,000 stars. The platform, utilized by more than 6,000 companies, provides comprehensive user identification across web and mobile, aiding in fraud detection, marketing attribution, and user experience enhancement. The company has expanded its workforce to over 100 remote employees from 24 countries, extending its market reach to EMEA and APAC regions. Fingerprint recently enhanced its product by adding a bot detection feature and integrations with Cloudflare and Google Tag Manager, along with 18 SDKs and open-source libraries. The team celebrated their achievements in Mexico City and looks forward to future product developments.