Forum Moderators: buckworks

Message Too Old, No Replies

Credit Card Fraud

I think I am on the way to being swindled.

         

breedersk8r

5:26 pm on Dec 28, 2004 (gmt 0)

10+ Year Member



I have a website selling electronic and camera equipment. Listed some items on eBay. Got an email from a woman "Opening a new store in Indonesia" and looking for inventory, wanting me to be her wholesale provider.
I started emailing her back and forth and several times she has changed cards to pay for a LARGE $ order. But never once did the card come up stolen or anything. Just that there were not funds to cover the transaction. I asked if she would use Paypal, said she had a bad run in with them and wouldn't. Asked for cashiers check/money order/wire transfer, she never responds with anything other than ANOTHER credit card...of which she claims to be a family members card.
This last card was a Discover card...
My merchant account does not accept Discover...
I contacted Discover, to open an account...
While waiting for reply, I did a search on the name and address (and phone) for the card holder (supposedly her sister, Lynn)
Found Lynn on the internet, turns out she is a doctor...
I called Lynn's number, got a generic answering machine, but left message anyhow...
Got a call last night after 10 PM, from a prepaid calling card number...
Lynn is not a woman, but rather a man.
I DO NOT GET IT!
Is this part of the lie too?
Wouldn't a doctor have long distance on his phone?
If he is worried about me getting his number on caller ID it is late for that I CALLED HIM FIRST...
Wouldn't he have a cell phone?
What should I think now?
Discover said that the card has not been reported stolen and shows no sign of misuse. Although the good doctor said that the card was reported stolen last week.
What gives? How do I report this character? Discover says that there is nothing to report.

old_expat

6:11 am on Jan 12, 2005 (gmt 0)

WebmasterWorld Senior Member 10+ Year Member



Just to play devil's advocate, no offense intended.

"Here is my checklist

2. Spelling and grammatical mistakes. (My English is also not very good ;))

Besides being old, clumsy, lazy and partially dyslexic, I have pfat pfingers and often hitt extrs ot the worng keu

5. Buyer provides a cell phone number

I don't even know my land line number (here in Thailand), and at numerous places where I have lived, I had to connect thriough a house line. Would you be suspicious if you were given a 6 digit number? Everywhere except Bangkok .. and cell phones.

6. Do a reverse phone number lookup to check the address and validity of the phone number.

I seriously doubt if you can do that for many foreign countries.

7. Generic sounding address [1515, Main Street]

Mine sounds even more obscure .. won't even bother to confuse the issue with it.

"For example, "billing address different from shipping address" is a sign of a fraudulent order."

Not necessarily. I often buy online and have the products shipped to a friend in Bangkok .. or the US when a friend brought back a digital camera for me.

All that being said, I realize that most online shops are looking for mainstream business from "developed" countries and from the local shipping area.

Also, you might be surprised to know that the requirements for merchant accounts in Thailand can be quite stringent.

Sunshyn

7:53 am on Jan 12, 2005 (gmt 0)

10+ Year Member



In the case of cardholders who order then do a chargeback claiming they didn't place it, we will call their local police department and file a report. We know it isn't going to do us any good, but in the case of those who make a habit of theft in this way, there's a chance that such reports will accumulate and eventually be noticed.

If nothing else, I feel that it enforces that this *is* theft because there are those who think it's more permissible than shoplifting because the laws don't even seem to apply.

Dynamoo

11:02 am on Jan 12, 2005 (gmt 0)

10+ Year Member



I have a technology news site and a partner affiliate site, so I mention a lot of high-value products that I don't even sell. It seems that any site that lists something of value, even if not a sales site is a target for fraud.

I take a rather different approach. My privacy statement specifically says that any email from Indonesia, Nigeria, Uganda, Ivory Coast and certain other countries will be treated as attempted fraud, and I reserve the right to publish details of all attempted fraudulent purchases. I have a special page for these, where I publish the email address, IP address and any other details (apart from CC numbers). Just yesterday I had a company in Canada send me a thank-you email because it helped them stop a fraudulent transaction. Those details are repeated on the contact information page with the email address too.

Don't forget that your privacy statement need not be 100% fluffy and nice, especially when it comes to fraudsters.

Another tip I've found while baiting these people is to ask for the issuing bank name for the card. Most fraudsters won't have that information. And secondly *always* check the originating IP address for mail claiming to be from "Singapore".

shilmy

11:32 pm on Jan 12, 2005 (gmt 0)

10+ Year Member



Hi,

I'm from Indonesia, and very sad that Indonesia has very bad reputation on ecommerce world.

Some merchants refuse my orders just because I'm from Indonesia.

I suggest, espescially for order from Indonesia, the billing address/creditcards holder address, should match the delivery address. Using this way, it is imposible for fraudster to use other people creditcards, while still allow legitimate orders from Indonesia.

Regards,
Sjarief

CritterNYC

4:51 am on Jan 13, 2005 (gmt 0)

10+ Year Member



I'm from Indonesia, and very sad that Indonesia has very bad reputation on ecommerce world.

Some merchants refuse my orders just because I'm from Indonesia.

I suggest, espescially for order from Indonesia, the billing address/creditcards holder address, should match the delivery address. Using this way, it is imposible for fraudster to use other people creditcards, while still allow legitimate orders from Indonesia.

It is unfortunate, but for many retailers, shipping anything to Indonesia simply isn't worth the risk. It doesn't even matter if the shipping and billing addresses match, because they could both be faked.

That said, the only country I've had to completely cut off for some of my clients is Nigeria (the world's largest hotbed of fraud).

Troppo

11:02 am on Jan 14, 2005 (gmt 0)

10+ Year Member



The Indonesia issue is a shame for both sides. There are many affluent and respectable communities in the country, including a lot of expatriates. Jakarta and Bali in particular have quite a number of high end product consumers.

You need to be a little more selective about who to deal with in the country and, if serious about overseas business, that doesn't just apply to Indonesia. Going back to some more old fashioned credit checking would be a good starting point. Ask for and check bank references. For Indonesia I would insist that they have an account with a well known international bank like Citibank or Hong Kong Bank.

If an offshore card is being offered that's not necessarily a danger sign and may in fact be the opposite. If the card is for Hong Kong, Singapore or Australia it can work to your advantage. As mentioned above ask for a bank reference to be sent directly to you and if that lines up as positive together with matching addresses for the account holder "in Indonesia" then it's really quite safe.

The reason why many of business people have their credit cards in other countries is because of widespread distrust of the countries banking system. This made their credit cards worthless internationally. There is also a problem at times with inbound money transfers which go missing for days and that's why for example a Singapore bank account is better ...it's safer for transfers. The Singapore and Hong Kong Banks are actually very strict with approvals of any transactions. Charges to their Visa card holders are pattern matched to normal behavior and buying locations and anything in the least out of order gets rejected pronto. Sometimes it's a bit overboard actually.

If the stuff you are shipping is really big dollars, talk to your bank about alternative payment proceedures like a sight draft or irrevocable letter of credit. These require the payer to deposit the money with your bank's counterpart in Indonesia, prior to shipment of the goods. Within the country most things are still paid for by cash and there are not many credit facilities available. Consequently, anybody running a bona fide business will be able to send you cash.

MrFishGuy

6:30 pm on Jan 15, 2005 (gmt 0)

10+ Year Member



I've been recently getting a lot of order and shipping inquiries from Brunei Darussalam. I've looked on a map and see it's right near Singapore and Malaysia. Is this also a location that forwards right to Indonesia?

Rugles

4:56 pm on Jan 17, 2005 (gmt 0)

WebmasterWorld Senior Member 10+ Year Member



Excellent, I have a Nigerian order here that I have been stringing along for fun. I inflated the price by a 1000 per cent but he still wants it. He just emailed 3 mastercard numbers (complete with CCV codes) with these notes:

<snip>

Ya, I will get right on that.

[edited by: lorax at 5:08 pm (utc) on Jan. 17, 2005]
[edit reason] Deleted notes [/edit]

Tonearm

5:08 pm on Jan 17, 2005 (gmt 0)

WebmasterWorld Senior Member 10+ Year Member



That's hilarious, but I hope you don't get added to some fraud-friendly list.

- Grant

Bali_Freak

5:00 am on Jan 18, 2005 (gmt 0)

10+ Year Member



Looks like you guys won't be getting any of my money in the near future, despite my being a (relatively) wealthy expat with money to spend and not much to buy on this little sandy island in Indonesia.

There are huge amounts of fraud here, but also huge pools of wealthy people, both locals and expats. My personal opinion is that you need to use some subtlety in your screenings of potential customers from this country. By simply refusing all orders from Indonesia (as a number of posters have suggested) you risk hurling out the baby with the bathwater.

That being said, credit card details (including security code) are sold here by bank staff for a few dollars a time, internet cafes are set up to openly allow fraud (daily rolling over of IP's), and there is basically no law enforcement here.

Am I fraudster or wealthy expat? You decide ...

Troppo

7:49 am on Jan 18, 2005 (gmt 0)

10+ Year Member



Brunei Darussalam - does it feed direct to Indonesia

No, it is a separate country. GDP per person about the same as Portugal and roughly 6 times that of Indonesia. With a population of 350,000, it's not a terribly exciting market opportunity.

Dynamoo

12:33 am on Jan 19, 2005 (gmt 0)

10+ Year Member



I had another one today that rang alarm bells. This time it was in perfect English with a request to ship to Singapore some high-priced goods with a note that the buyer wasn't too bothered about the prices and wanted to pay by Western Union or wire transfer.

The trick here was that the sender was using a well-known free email service that masks the originating IP. Even if I had the products (it's an affiliate site, so I don't) it's hard to prove that it *is* fraud, except that this particular trick I've seen before so my gut feeling is that it's definitely fraud.

I think the bottom line is that somewhere you need to have a real IP address that matches the stated location of the potential buyer. This particular free email service is notorious for masking it, which is of no help whatsoever.

breedersk8r

1:09 am on Jan 19, 2005 (gmt 0)

10+ Year Member



But if they offer to pay by way of wire transfer, and the money clears, shouldn't that be considered NON FRAUD? Even if it is coming from (going to) an Indonesia address?

PatrickDeese

2:47 am on Jan 19, 2005 (gmt 0)

WebmasterWorld Senior Member 10+ Year Member



Its funny, but one of my info sites just got an email from a frustrated Nigerian.

He asked if I could accept a credit card and ship to Nigeria - then listed several high end product categories that he was interested in purchasing, ie televisions, computers, etc.

The info site has nothing to do with consumer goods at all. I guess he's just emailing any site he can find, til he gets a willing participant.

CritterNYC

5:53 pm on Jan 19, 2005 (gmt 0)

10+ Year Member



Looks like you guys won't be getting any of my money in the near future, despite my being a (relatively) wealthy expat with money to spend and not much to buy on this little sandy island in Indonesia.

There are huge amounts of fraud here, but also huge pools of wealthy people, both locals and expats. My personal opinion is that you need to use some subtlety in your screenings of potential customers from this country. By simply refusing all orders from Indonesia (as a number of posters have suggested) you risk hurling out the baby with the bathwater.

That being said, credit card details (including security code) are sold here by bank staff for a few dollars a time, internet cafes are set up to openly allow fraud (daily rolling over of IP's), and there is basically no law enforcement here.

Am I fraudster or wealthy expat? You decide ...

Yeah, but what's the percentage of fraud orders vs legitimate ones from Indonesia? Let's conservatively say 1 in 1000 is legit (Nigeria would be about 1 in 10,000). Will the money you make from the 1 legit order offset the... conservatively, lets say 5 fraudulent ones... that make it through? I think not. Same reason why a pizza delivery place doesn't want to deliver to a high-crime neighborhood. The risks (and actual losses) far outweight the benefits.

jsinger

6:34 pm on Jan 19, 2005 (gmt 0)

WebmasterWorld Senior Member 10+ Year Member



Want to eliminate online fraud? Rule #1: don't take ANY orders from Nigeria or Indonesia. For most sites, that alone will stop 90% of fraud.

Online fraud prevention is really very simple for the average web retailer who sells low risk products.

Big deal if I lose two sales a year to wealthy, honest Indonesians. They should criticize their countrymen and government, not me for doing what I have to do.

---

Aren't there any commerce website inside Indonesia and Nigeria?

vincevincevince

12:00 am on Jan 20, 2005 (gmt 0)

WebmasterWorld Senior Member 10+ Year Member



I just wanted to say that this is the best thread I've read on WebmasterWorld this year so far. The checklists are invaluable - every merchant account and payment processor should come with them.

jsinger

1:14 pm on Jan 21, 2005 (gmt 0)

WebmasterWorld Senior Member 10+ Year Member



It's amazing that cart software lists Nigeria and Indonesia as valid ship/bill options. (actually most carts list several uninhabited islands as valid places!).

If, for some reason a savvy commerce site wants to add those places, the drop down form can be easily edited.

This 78 message thread spans 3 pages: 78