Can I get a lesson in deciphering IP addresses? How can you tell if
it's a foreign address?
Jimmy Hilburger
www.switchhits.com"Larry Bohen" <lbohen@audiobooksonline.com> wrote in message
news:ah8r0m$ks6$1@support.shopsite.com...
We received two orders recently with stolen credit cards in the last
few
days and I spent considerable time 7/18/02 AM researching them,
however we
had already shipped one order on 7/17/02, Express Mail for delivery
by noon
on 7/18/02. We highly scrutinize orders for shipment to foreign
(non-USA)
countries, particularly Africa, mid-East and Far-East, however the
thieves
have learned a new trick. The two orders were Bill To / Ship To an
innocent
looking address in Seatac, WA (small city with an airport that
serves
Seattle, WA). My research revealed:
1. The address was actually to a freight forwarding company, which I
expect
was supposed to ship the order on to the Nigerian customer. The
company name
was not part of the Bill To / Ship To address.
2. The IP address (thanks ShopSite!) revealed that the order
originated from
a Nigerian IP.
3. The Mastercard was issued by a bank in London. Yes, we did get
authorization for to charge the card.
4. The telephone number in the order was for someone who said they
did not
know the "customer."
The new thing I learned was that even innocent looking USA addresses
need to
be scrutinized.
The good news is that USPS was able to stop the delivery and the
order is
being returned to us.
I have reported the fraudulent credit card use to our clearinghouse
(NOVA)
who is notifying the London bank. I think merchants have a
responsibility to
notify either their clearinghouse, payment gateway or the issuing
bank when
we receive fraudulent orders.
I am in also in contact with a postal inspector who I hope will
investigate
the freight forwarder connection.
"Beauty Cafe" <beautycafe@mindspring.com> wrote in message
news:ah7mou$hpj$1@support.shopsite.com...
I've dealt with an extensive amount of fraud in the past 5 years
since
setting up shop. I think the worst case being when a girl borrow
her
father's social security number to add a Amex card in her name to
his
account. She ran up 10k on it. He reported all the charges as
fraud...She
was a college student. I actually had the police pick her up and
take her
in. Her father was a real jerk and said "good luck" getting
anything out
of
her since she's a poor college student. Unfortunately I just
didn't have
the
funds to sue (charges were to the tune of 700.00) but she got a
good scare
being taken in to the police station.
I use the CCV as a safety. I use address verification on a manual
system,
I
don't do online processing. If it doesn't come up as an exact
match, I
call
my merchant company provide them with the first 5 numbers of the
card and
they give me the issuing bank. The issuing banks are always
friendly to
work
with. You can ask that they contact the cardholder to verify a
purchase.
Most cardholders appreciate you going the extra mile. You can also
do this
on international orders, however it may set you back a day or two
waiting
for approval.
My merchant company suggested that on international orders or
orders being
shipped to a different name/address that you request a faxed copy
of the
credit card prior to processing the order.
Since using the CCV in combination with the faxed credit card, my
fraud
has
gone down to zilch (knocking on wood!). I've learned the tale tell
signs
and
obviously don't ship to the questionable countries. My funniest
story of
attempted fraud was an order for almost 3k being shipped to a
"questionable
country" as a belated birthday present. I was supplied with the
cardholders
name, billing address and yes even a telephone number. Imagine my
shock
when
the cardholder picked up the phone. She had just received the card
and
used
it once, to purchase a computer in a store in Silicone Valley.
Somehow her
one purchase had made its way to I believe Yugoslavia.
Unfortunatley we
both
contacted the credit card company and their attitude was that they
just
didn't give a hoot!
--
Love, laughter and friendship!
Lisa Slavik
www.beautycafe.com"Keith" <support@specialmart.com> wrote in message
news:3D370696.3446D010@specialmart.com...
Amen!
I do not care how much business I miss out on by not shipping
out of the
USA.
I refuse to allow even one fraudulent charge to go through my
system if
I
can help
it.
I even refuse to ship to alternate shipping address.
Keith
Loren wrote:
Exactly. And once the card is used somewhere, then the
cardholder is
no
longer
the only person with the CVV2 number. And what if the actual
card
itself
was
stolen?
I think that CVV2 gives an added level of protection, but it
certainly
does not
guarantee anything.
-Loren
Larry Bohen wrote:
Unless we can verify the CVV2, how can we be sure the thief
didn't
make up
the number?
"Loren" <loren_d_c@yahoo.com> wrote in message
news:3D36F550.9DDFFA2F@yahoo.com...
The CVV2 value is supposed to be a number that is not on
your bill
or on
any
receipts, only on the actual card so it is supposed to
provide
proof
that
the
person using the card has the card in their possession.
'Supposed'
being
the
operative word here.
-Loren
Larry Bohen wrote:
We (Audiobooks Online, USA) were just told by our
clearinghouse
(NOVA)
that
we had to call South Africa to verify a CVV2. They
evidently
can't
verify
CVV2s, at least foreign ones. They also can't verify
foreign
addresses
for
us.
Is CVV2 info is proving to be valuable? How is this info
being
used?
Thanks