How to protect your card program from fraud

February 15, 2024 | 7 minute read

Key takeaways

  • The success of Chip and PIN has made counterfeit cards harder to create.
  • Card-not-present is now the fastest-growing type of card fraud.
  • There are actions that businesses and cardholders can take to prevent and detect fraud attempts.

Here are three leading fraud trends to be aware of:

  1. Card-not-present — This is where criminals are focusing most of their energy. Transactions occur via phone, mail, internet or other electronic means, and all that bad actors need is a card number, CVV, expiration date and address.
  2. Account takeover — Masquerading, phishing and smishing are used to get personal information and create new accounts. Criminals are increasingly targeting mobile wallets for in-person and card-not-present transactions.
  3. Card theft — With business travelers on the move again, the opportunity to physically steal cards has returned. Even though Chip and PIN adoption has taken off in the U.S., many terminals are set up to bypass PINs, meaning that fraudsters can often start to use a stolen card immediately.

 

Fraud threat losses infographic

Fraud prevention is a team effort

What can businesses do?

Review transactions and report suspicious activity

  • Gain full visibility into transactions by using all the applications and alerts at your disposal, and report anything suspicious immediately.
  • Make sure you’ve reconciled all transactions before you pay, requesting receipts for payments made via peer-to-peer money transfer apps.
  • Build an audit program where you review either a sample set or specific types of transactions to help spot misuse at an early stage.

 

Set up appropriate controls

  • Establish merchant category codes and define who gets a card in your organization, as well as what they can do with it.
  • Build in checks and balances by segregating card request and approval duties, with a minimum of two program administrators.
  • Cancel department cards every time a cardholder leaves the company.
  • Ensure credit limits are appropriate to each role.

 

Pay attention to prevention

  • Don’t give power to fraudsters by using the same passwords across everything. Criminals can take advantage by using automation to match compromised data with commonly used passwords.
  • ·Consider expanding your use of tools like mobile wallet — virtual payments are safer because they generate a one-use number for each transaction.
Fraud experienced companies infographic

What can cardholders do?

Be vigilant and proactive

  • Set up mobile alerts — what makes a business card different from a personal one is that you may only use it several times a year, so real-time visibility is key.
  • Look at statements and report any suspicious activity as soon as you spot it.

 

Make the most of Chip and PIN protections

  • Use Chip and PIN wherever you can — most merchants now have terminals with chip technology.
  • Know your PIN and minimize declined transactions by recovering forgotten PINs with tools available on our mobile application.

 

Aim for accuracy

  • Don’t let transactions get declined due to incorrect data.
  • Verify name, address and CVV (3-digit code) for online transactions to ensure that a purchase goes through.

 

Bank of America's three-step approach infographic
Current threats infographic
Know the flags infographic
Back to Homepage

Explore more

Imposter scams are on the rise: Here’s how to manage the risks

  

5-minute read

Cybersecurity while traveling

  

4-minute read

Important Disclosures and Information

Bank of America, Merrill, their affiliates and advisors do not provide legal, tax or accounting advice. Consult your own legal and/or tax advisors before making any financial decisions. Any informational materials provided are for your discussion or review purposes only. The content on the Center for Business Empowerment (including, without limitations, third party and any Bank of America content) is provided “as is” and carries no express or implied warranties, or promise or guaranty of success. Bank of America does not warrant or guarantee the accuracy, reliability, completeness, usefulness, non-infringement of intellectual property rights, or quality of any content, regardless of who originates that content, and disclaims the same to the extent allowable by law. All third party trademarks, service marks, trade names and logos referenced in this material are the property of their respective owners. Bank of America does not deliver and is not responsible for the products, services or performance of any third party.

 

Not all materials on the Center for Business Empowerment will be available in Spanish.

 

Certain links may direct you away from Bank of America to unaffiliated sites. Bank of America has not been involved in the preparation of the content supplied at unaffiliated sites and does not guarantee or assume any responsibility for their content. When you visit these sites, you are agreeing to all of their terms of use, including their privacy and security policies.

 

Credit cards, credit lines and loans are subject to credit approval and creditworthiness. Some restrictions may apply.

 

Merrill Lynch, Pierce, Fenner & Smith Incorporated (also referred to as “MLPF&S" or “Merrill") makes available certain investment products sponsored, managed, distributed or provided by companies that are affiliates of Bank of America Corporation (“BofA Corp."). MLPF&S is a registered broker-dealer, registered investment adviser, Member SIPC, and a wholly owned subsidiary of BofA Corp.

 

Banking products are provided by Bank of America, N.A., and affiliated banks, Members FDIC, and wholly owned subsidiaries of BofA Corp.

 

“Bank of America” and “BofA Securities” are the marketing names used by the Global Banking and Global Markets division of Bank of America Corporation. Lending, derivatives, other commercial banking activities, and trading in certain financial instruments are performed globally by banking affiliates of Bank of America Corporation, including Bank of America, N.A., Member FDIC. Trading in securities and financial instruments, and strategic advisory, and other investment banking activities, are performed globally by investment banking affiliates of Bank of America Corporation (“Investment Banking Affiliates”), including, in the United States, BofA Securities, Inc., which is a registered broker-dealer and Member of SIPC, and, in other jurisdictions, by locally registered entities. BofA Securities, Inc. is a registered futures commission merchant with the CFTC and a member of the NFA.

 

Investment products:

Are Not FDIC Insured Are Not Bank Guaranteed May Lose Value