METHOD AND SYSTEM FOR DETERMINING FRAUD IN A CARD-NOT-PRESENT TRANSACTION

• US 20120197802A1
• Filed: 01/27/2012
• Published: 08/02/2012
• Est. Priority Date: 01/28/2011
• Status: Abandoned Application

• Current Assignee: Mastercard International Incorporated (MasterCard Incorporated)
• Original Assignee: Mastercard International Incorporated (MasterCard Incorporated)
• Inventors: Smith, Janet, Chisholm, John D., Gerber, Johan, Salazar, Clara, Wickman, Matthew, Meyer, Susan, Cordero, Rachael Vahle, Merz, Christopher John
• Application Number:
  US13/360,537
• Publication Number:
  US 20120197802A1
• Time in Patent Office: Days
• US Class Current: 705/44
• CPC Class Codes: G06Q 20/12 specially adapted for electronic shopping systems
• CPC Class Codes: G06Q 20/388 using mutual authentication without cards, e.g. challenge-response
• CPC Class Codes: G06Q 20/40 Authorisation, e.g. identification of payer or payee, verification of customer or shop credentials; Review and approval of payers, e.g. check credit lines or negative lists
• CPC Class Codes: G06Q 20/4016 involving fraud or risk level assessment in transaction processing

Abstract

A computer system for fraud detection associated with a card-not-present payment card system is provided. The system includes a network host site and an interchange network including a processor communicatively coupled to a memory device for storing data and to the network host site wherein the processor is programmed to receive a card transaction authorization request message from a merchant, route the card transaction authorization request to the network host site to perform CNP fraud risk scoring, and based on the criteria of the card transaction authorization request, call at least one of a plurality of fraud scoring models defined for criteria of the transaction authorization request. The processor is further programmed to calculate the fraud risk score based on the current transaction authorization request data and an updated card account profile, and transmit the message to an issuer of the payment card for approval of the request.

Claims

1. A computer system for fraud detection associated with a card-not-present payment card system interchange network, the fraud detection computer system comprising:

a network host site;

an interchange network comprising a processor communicatively coupled to a memory device for storing data and to said network host site, said processor programmed to;

receive a card transaction authorization request message from a merchant through an acquirer for a card-not-present (CNP) transaction, the card transaction authorization request message including a fraud risk score request indicator;

route the card transaction authorization request to the network host site to perform CNP fraud risk scoring;

based on criteria of the card transaction authorization request, call by the network host site at least one of a plurality of fraud scoring models defined for criteria of the transaction authorization request;

calculate the fraud risk score based on the current transaction authorization request data and an updated card account profile using the defined fraud scoring model;

transmit the message to an issuer of the payment card for approval of the request; and

route the card transaction authorization request response message to the merchant through the acquirer, including the issuer authorization decision and the CNP fraud risk score.

2. A computer system in accordance with claim 1, wherein the computer system is programmed to receive the transaction authorization request message populated with the CNP fraud risk score request indicator.

3. A computer system in accordance with claim 1, wherein the computer system is programmed to identify the CNP fraud scoring service request indicator is present and that the service should be performed for the card transaction authorization request.

4. A computer system in accordance with claim 1, wherein the plurality of fraud scoring models are associated with respective geographical regions where at least one of the acquirer and the cardholder are located.

5. A computer system in accordance with claim 1, wherein the computer system is programmed to receive a card transaction authorization reversal request message generated by at least one of the merchant and the acquirer.

6. A computer system in accordance with claim 5, wherein the card transaction authorization reversal request message includes a reason code indicating the transaction was declined by merchant due to the transaction representing a relatively high fraud risk.

7. A computer system in accordance with claim 5, wherein the computer system is programmed to confirm the validity of the received reversal request message and reason code and to route the reversal message with a reason code to the issuer.

8. A computer system in accordance with claim 1, wherein said processor is further programmed to confirm a validity of the fraud risk score request.

9. A computer system in accordance with claim 1, wherein said processor is further programmed to in real-time, update a card account profile associated with the payment card account making the request with the current CNP transaction data.

10. A computer system in accordance with claim 1, wherein said payment card account profile includes long term variables, said long term variables used to collect the spending behavior for each individual card account for card present and card not present transactions over a predetermined and selectable time period.

11. A computer system in accordance with claim 1, wherein said processor is further programmed to populate the calculated CNP fraud risk score within the card authorization request message if the issuer is a subscriber to the fraud scoring service.

12. A computer system in accordance with claim 1, wherein said processor and said network host site are located remotely with respect to each other and operated by different business entities.

13. A computer-implemented method of performing a payment card transaction fraud risk scoring, said method comprising:

for a card-not-present (CNP) transaction, receiving a payment card transaction authorization request message from a merchant, the card transaction authorization request message including a fraud risk score request indicator;

requesting performance of a CNP fraud risk scoring;

receiving a CNP fraud risk score calculated based on the current transaction authorization request data and a payment card account profile, the payment card account profile updated with the current CNP transaction data in real time using a defined fraud scoring model;

receiving a response to the payment card authorization message from the issuer associated with the payment card account;

populating the calculated CNP fraud risk score within the card authorization request message; and

routing the card transaction authorization request response message to at least one of the acquirer and the merchant, including the card issuer authorization decision and the CNP fraud risk score.

14. A computer-implemented method in accordance with claim 13, further comprising:

identifying the CNP fraud scoring service request indicator is present and that the service should be performed for the card transaction authorization request; and

confirming the validity of the fraud scoring service request.

15. A computer-implemented method in accordance with claim 13, further comprising transmitting the card transaction authorization request to a network host site to perform CNP fraud risk scoring.

16. A computer-implemented method in accordance with claim 13, further comprising:

calling, based on the criteria of the card transaction authorization request, at least one of a plurality of fraud models defined for the criteria;

updating, in real-time, a payment card account profile associated with the payment card account making the request with the current CNP transaction data; and

calculating the fraud risk score based on the current transaction authorization request data and the updated card account profile using the defined fraud scoring model.

17. A computer-implemented method in accordance with claim 13, further comprising transmitting the message to the issuer associated with the payment card account.

18. One or more non-transitory computer-readable storage media having computer-executable instructions embodied thereon, wherein when executed by at least one processor, the computer-executable instructions cause the processor to:

for a card-not-present (CNP) transaction, receive a payment card transaction authorization request message from a merchant, the card transaction authorization request message including a fraud risk score request indicator;

request performance of a CNP fraud risk scoring;

receive a CNP fraud risk score calculated based on the current transaction authorization request data and a payment card account profile, the payment card account profile updated with the current CNP transaction data in real time using a defined fraud scoring model;

populate the calculated CNP fraud risk score within the card authorization request message;

receive a response to scored payment card authorization message from the issuer associated with the payment card account; and

route the card transaction authorization request response message to at least one of the acquirer and the merchant, including the card issuer authorization decision and the CNP fraud risk score.

19. The computer-readable storage media of claim 18, wherein the computer-executable instructions further cause the processor to:

identify the CNP fraud scoring service request indicator is present and that the service should be performed for the card transaction authorization request; and

confirm the validity of the fraud scoring service request.

20. The computer-readable storage media of claim 18, wherein the computer-executable instructions further cause the processor to transmit the card transaction authorization request to a network host site to perform CNP fraud risk scoring.

21. The computer-readable storage media of claim 18, wherein the computer-executable instructions further cause the processor to:

call, based on the criteria of the card transaction authorization request, at least one of a plurality of fraud models defined for the criteria;

update, in real-time, a payment card account profile associated with the payment card account making the request with the current CNP transaction data; and

calculate the fraud risk score based on the current transaction authorization request data and the updated card account profile using the defined fraud scoring model.

22. The computer-readable storage media of claim 18, wherein the computer-executable instructions further cause the processor to transmit the message to the issuer associated with the payment card account.

23. A computer-implemented method of providing a fraud risk score for a card-not-present (CNP) payment card transaction, said method comprising:

receiving, at web service interface from at least one of an acquirer, a merchant, and a fraud services provider, a service call including card-not-present (CNP) transaction information and a fraud risk score request;

requesting a fraud risk score associated with the CNP transaction information from data storage;

receiving a previously determined CNP fraud risk score calculated based on the CNP transaction information; and

routing, through the web service interface, the CNP fraud risk score to the acquirer, merchant, or fraud services provider that requested the fraud risk score.

24. A computer-implemented method in accordance with claim 23, wherein the fraud risk score fraud risk score is calculated based on current transaction authorization request data when the authorization request was made and a payment card account profile, the payment card account profile updated with the current CNP transaction data in real time using a defined fraud scoring model.