Sharing ideas for better fraud prevention.

Manual Review in 4 Simple Steps

Today, we are going to outline a process for manual review. It’s not the only way to do manual review, but it’s a pretty comprehensive one developed overtime by our in-house fraud prevention expert. Our hope is to help those new to manual review to get started and to provide some new ideas to those seasoned shop veterans.

To get started, here are 4 questions we always ask oursevles when we look at a fresh new order up for review.

1. Is AVS good?

AVS is a quick and inexpensive way to quickly assess the situation. If you need a refresher on what AVS is, read our post here. AVS is not fail-safe, meaning a good AVS result doesn’t always mean the order is legitimate, but it gives you a starting point.

2. Is billing address the same as shipping address?

With the prevalence of the Internet and the rise of smart devices, we are in the age of on-the-go everything. We can work from anywhere as much as we can shop from anywhere. However, most of us still only has one main residence where we live and where our bills go. Most of us also do most our shopping for ourselves. Therefore, having an order with different billing and shipping addresses raise a flag. Again, it’s not a definitively bad sign, but it definitely warrants a second look.

3. Is the IP location good?

As much as we are on the move, we still do most of our shopping from home or at work. This means that most the orders will have IP addresses that bear the characteristics of being a home IP address or a work IP address; in other words, it’s NOT normal for the IP addrss to be a proxy. It is also out of the ordinary to have an IP address so far from the billing address, especially, altogether a different country.

4. Is the email address good?

The corollary of living in the Internet age is the fact that we all have a digital identity, an email address, if not a full social profile on a social network. If the order comes from an email address that’s brand new, there are 2 logical possibilities. First, grandma just joined the 21st centurary. Second, the email was created recently by John Doe for a specific purpose. It’s not immediately clear whether the order comes from grandma or John Doe, but again, it’s a flag that should go up when you see a brand new email address.

There are many more verifications that you can do beyond these 4 basic checks. But these additional data points usually will push your risk scale one way or another.

Comments are closed, but trackbacks and pingbacks are open.