The end-of-the-year holiday shopping season is going strong. Merchants are expecting more customers this year and that means more transactions. Unfortunately, this is also that time of year when fraudulent card increases.
Here are some tips to help you prevent fraud this holiday season:
Accepting Cards:
- Check the card’s security features: embossed number, hologram, and the
repetition of the first four numbers printed on the card. See
this post for more information on card security features.
- Swipe the card only once to obtain an authorization
- Check the authorization response:
- Approved – Ask the customer to sign the sales receipt.
- Declined – Return the card to customer and ask for another Visa card.
- Call or Call Center – Call your voice authorization center and tell the operator that you have a “Call” or “Call Center” response. Follow the operator instructions. (Note: In most cases, a “Call” or “Call Center” message just means the card Issuer needs some additional information before the transaction can be approved.)
- Pick Up – Keep the card if you can do so peacefully.
- No Match- Swipe the card and re-key the last four digits. If “no match” response appears again, keep the card if you can do so peacefully. Request a Code 10 authorization.
- Match the embossed number on the card to the four digits of the account number displayed on the terminal.
- Get the cardholder signature on the transaction receipt.
- Compare the name and signature on the card to those on the transaction receipt. They should match.
- If you suspect fraud, make a Code 10 call to your voice authorization center
Handling Key-Entered Transactions
If a Visa card cannot be swiped, you need to key-enter the card account data into your POS terminal. When you key-enter a transaction, you run the risk of accepting a counterfeit card because the magnetic stripe information is unavailable.
When the stripe won’t swipe:
- Check the terminal to make sure it is working properly. If the terminal is okay and the problem appears to be with the magnetic stripe, follow your company procedures for key-entered transactions. Be sure to check the card security features and match signatures as described here.
- Match the embossed account number on the front of the card to the number indent-printed on the back.
- Check the card’s “good thru” or “valid thru” date to be sure the card hasn’t expired. If the card has a “valid from” date, be sure the card isn’t being used before it is valid.
- Get a manual imprint of the card.
- Ask the customer to sign the imprinted sales draft.
- Compare the signature on the card with the signature on the sales draft to be sure they match. Do not accept an unsigned card!
- If you suspect fraud, make a Code 10 call to your voice authorization center.
Six Warning Signs of Fraud:
Certain customer behavior could point to bankcard fraud. But remember, it doesn’t necessarily indicate criminal activity—you know your customers, so let your instincts steer you in the right direction. Watch out for customers who:
- Purchase a lot of merchandise without regard to size, style, color, or price.
- Ask no questions on major purchases.
- Try to distract or rush you during the sale.
- Make purchases, leave the store, and return to make more purchases.
- Make large purchases right at opening or at the last minute when the store is closing.
- Refuse free delivery for large items
Unsigned Cards
What is the proper procedure for accepting unsigned cards?
Ask the customer to sign the card and request to see valid government identification such as a passport or driver’s license. Compare the signature on the government identification to the signature on the card and the sales draft. If permitted by local law, write the serial number and expiration of the identification on the sales draft.
What if the customer refuses to sign the back of the card?
The signature on a card protects the cardholder from a criminal signing their name on the back and using the card, and allows you to compare signatures to ensure the transaction is legitimate. If the customer refuses to sign the back of the card, the transaction must not be completed.
What if the signature panel instructs the merchant to “CHECK ID?”
A card where the customer has written “CHECK ID” in the signature panel is considered an unsigned card.
Note: The words “Not Valid Unless Signed” are printed near the signature panel on all Visa cards. This requirement provides merchants with an independent source to refer to when requesting that cardholders sign their cards, as well as justification for refusing to accept an unsigned card.
Scam Alerts
- Accepting an authorization number obtained by the cardholder and/or any outside source.
- An authorization number not obtained through proper procedures will result in loss of funds by the merchant
A legitimate authorization is only obtained through the terminal or if prompted by the terminal to call voice authorization line; the phone number on the side of the terminal is the only number registered to issue authorization numbers.
- Allowing unauthorized offers to upgrade or change your terminal
- When terminal is reprogrammed funds can be routed to third party bank account.
Merchant Concepts will obtain management approval prior to replacing or reprogramming equipment.
- Allowing unauthorized deliveries of paper
- There is always a string attached, either as a bill for overpriced paper, or an offer to upgrade your services, leading to signing up for a new merchant account.
Merchant Concepts employees always identify themselves, and paper is delivered upon request, not by schedule.
- Give out transaction or financial information via phone request
- Can result in Cardholder being contacted in an attempt to obtain full card data.Established merchant service providers have secured access to view a merchant’s transaction activity. Therefore no merchant service provider would contact a merchant to obtain cardholder data.
If you question any of the above, please contact management and Merchant Concepts.
Code 10
CODE 10 is a method to reduce fraud. Call your voice authorization center to alert the card Issuer when you are suspicious of the card, the cardholder, or the transaction. Indicate this is a CODE 10 call to get special assistance from your merchant authorization operator. They will connect you to the card Issuer. CODE 10 calls should always be made when you’re suspicious, even if you have already received an approval code.
When should a merchant use CODE 10?
In any of these instances:
- Whenever you’re suspicious of the card, the cardholder, or the transaction.
- When the four-digit number printed on the card does not match the first four embossed account numbers, or when the printed four-digit number is missing.
- When the embossing appears to have been altered or tampered with.
- When there’s no security character next to the expiration date.
- When the hologram appears to be fake.
- Whenever the signature panel appears altered or the signature on the sales slip does not match the signature on the back of the card.
Can a CODE 10 call be made if the customer is no longer present?
Yes. Your safety always comes first. If you are not comfortable making the call when the customer is present, or you don’t become suspicious until after the customer has left, call as soon after completing the sale as possible. This is just as effective in reducing fraud.
To initiate a code 10 call: 1-800-555-5707
Happy Holidays!