The dollar volume of online fraud rose last year, but actual incidents of fraud dropped, according to a report released Jan. 24 by CyberSource Corp., a unit of Visa Inc.
Total online fraud was up 1%, to $3.4 billion, but the number of fraudulent transactions was down 3 basis points to 0.6% in 2011 compared with a year earlier. The increase in fraud dollar volume, while small, was the first increase since 2008, the report said.
"The drop in the fraud rate is excellent news, but clearly we still have a long way to go in our war on fraud," says Andrew Naumann, CyberSource senior business leader for fraud management solutions.
Criminals have gotten a lot better at covering their tracks, Naumann says. And while merchants have become more sophisticated and more diligent about fighting fraud, it's more difficult to detect.
Criminals have become experts at disguising Internet Protocol addresses, and they are discovering ways to avoid device fingerprinting, Naumann says.
"Fraud orders are looking more and more like real orders for merchants, and to better identify them they need to add more tools to their stable," says Lauren Wang, CyberSource business leader for solutions marketing.
Fraudulent-order values average $250, compared with $150 for valid orders, according to the report.
Approximately 52% of merchant-fraud budgets goes toward manual review, which is more costly and time-consuming than automated review, Naumann says. Budgets should shift toward more automated processes that include more data analysis and sharing data across merchants, he says.
"An increasing trend in ecommerce fraud is the … tendency to leverage consortium data to alleviate fraud," Julie Conroy McNelley, a senior risk and fraud analyst at Aite Group LLC, wrote in an email.
"While slower to embrace this model than the banking world, shared fraud networks are increasingly common among online merchants and a great tool in their arsenal," McNelley wrote.
More than half of merchants surveyed in the report said automated review was their top priority in 2012.
"The fraud that is successfully going through is … perpetrated by the more sophisticated fraudsters. Those guys do their homework and know how to maximize the value of their crime," McNelley wrote.
CyberSource, which is based in Mountain View, Calif., conducted the survey of 325 merchants in September and October.