KEEP CYBER MONDAY SECURE AS TRANSACTIONS SOAR

Published 11/27/2017 11:53 AM CST

This article previously appeared on CUInsight.

Do you have the “Cyber Monday Blues”? That feeling of trepidation often sets in with fraud prevention professionals who are bracing themselves for the brunt of increased U.S. holiday shopping transactions. Let’s face it: Anxiety is overrated and easily controlled with some simple, specific security best practices.

Every year, weeks before Thanksgiving, CO-OP Financial Services reevaluates fraud strategy. Rules are re-calibrated, and much discussion and thought is put into how to best position and protect credit unions and their members during the whirl of the holiday season. An increase in electronic payments doesn’t have to contribute to increased tension and work stress.

It’s very clear that the card industry is making strides to reduce card-present counterfeit fraud by migrating to chip technology, but a much-anticipated increase in card-not-present fraud is slowly ramping up as more and more issuers and merchants adopt chip and tokenized payments.

“Card-not-present fraud increases every year as a result of several factors that include consumer preference for online shopping and the U.S. liability shift brought about by chip payment cards,” says John Buzzard, fraud expert with CO-OP Financial Services. “While credit unions excel at managing this type of fraud, the sheer volume of transactions conducted during the holiday season requires everyone to take extra precautions.”

Detecting Fraud in Real Time

According to Buzzard, every credit union should have advanced real-time fraud detection technology in place to monitor all transactions.

“If your credit union contracts with a third party to aid in fraud detection, make sure you maintain a very close working relationship with this organization, especially whenever there is employee turnover within the credit union or vendor organization,” Buzzard says. Even with outside assistance, he adds, it remains vitally important for internal staff members to watch account activity closely.

“Just because a third-party is handling your fraud analysis doesn’t mean that this entity will spot a compromise faster than you can,” said Buzzard. “Fraud prevention is a two-way street, so as you spot new fraud trends be sure to share them with your business partner immediately.”

Empowering Members with Mobile Alerts

While systems and services can go a long way toward detecting and mitigating risks, Buzzard emphasizes the valuable role members can play in protecting their own account data.

“With online card fraud on the rise, it is becoming increasingly important for consumers to play an active role in their own card security,” he says. “Providing members with a mobile app for card controls and alerts allows them to monitor all card transactions and stop any fraudulent attempts before they can be carried out.”

Buzzard adds that the most advanced tools in this space allow members to restrict transactions to certain geographic locations, merchants, merchant types, channels or time periods.

“Members can also use the technology to turn a card ‘on’ during a transaction and then ‘off’ again when the card is not in use,” he says. “Mobile security apps are highly effective – and very convenient for the member. They also serve as a point of engagement with your credit union.”

Educating Members on Safety Measures

To further help members secure their accounts, Buzzard encourages credit unions to take every opportunity to educate them.

“Members that shop online need to recognize the importance of varying their login IDs and passwords,” he says. “Using the same credentials across payment platforms quadruples a consumer’s chances of having all their accounts taken over.”

“Members should also be advised never to purchase from a retailer or organization they don’t recognize,” says Buzzard. “The biggest issue we see with Cyber Monday is that members are presented with so many great deals.

“If an emailed offer looks too good to be true, it could very well be fraud – which means members should delete the message immediately. If the offer is legitimate, it will certainly be featured on the retailer’s website.”

Buzzard also points to the importance of installing security software on all computing equipment.

“Make sure members know that their home PC and Android platforms need to be protected with antivirus and anti-malware software,” he says. “In the absence of these technologies, your members are likely working in an environment in which every keystroke they type is copied and sent verbatim to a fraudster.”

He adds that card-not-present fraud can occur just as easily begin from a phishing phone call.

“Advise them to be very cautious with overly coercive phone offers, and especially with robocalls,” said Buzzard. “Members should never provide account data, social security numbers or any other identifying information to solicitors. They should always hang up on these calls. If the offer truly interests them, they can call the company back to verify its validity.”

He continues: “Working together, credit unions and members can very effectively minimize card fraud and all the losses and inconveniences that go along with it. Remember also that the security resources and measures you employ deliver real value to members – and can serve as a point of differentiation for your credit union. Make sure branch employees tell members about all the many safeguards you provide. Highlight your security technologies in marketing messages and on ATM splash screens. Communicating with members about the protection you give them inspires trust and instills a sense of confidence whenever they reach for your cards.”