Reference material from 20+ years in the field.
Articles, white papers, and technique breakdowns covering every corner of eCommerce payments and fraud prevention — vendor-neutral, and free to read.
There Is No Silver Bullet: User Credentials Are Not Secured with 2FA Alone
Why two-factor authentication can't carry your fraud strategy alone — and the more nuanced, passive strategies to layer around it.
Download FreeSocial Security Numbers (SSN) — The Anatomy Of
How SSN randomization, introduced in 2011, changed identity verification — and the invalid SSN patterns that still flag fraud today.
Read more → Fraud ArticlesFundamentals — The Anatomy of a Fraud Strategy
A five-phase framework for designing a fraud prevention strategy — from pre-screen through accounting — matched to your merchant risk level.
Read more → Fraud ArticlesBank Routing Numbers — The Anatomy Of
How ABA routing numbers are structured, validated with a checksum, and how routing systems differ outside the U.S.
Read more → Fraud ArticlesFederal Reserve Guidelines on Authentication in an Internet Banking Environment
Why the Federal Reserve considers single-factor authentication insufficient for online banking, and the multi-factor techniques that meet its guidance.
Read more → Fraud ArticlesSEO Research & Fraud Prevention
How search engine and marketplace research can flag which products in your catalog are the most attractive targets for fraud.
Read more → ChargebacksChargeback Representment
How chargeback representment works, what evidence actually moves the needle, and when it's worth fighting a dispute at all.
Read more → ChargebacksChargebacks & Fraud Liability
Who actually eats the cost of a chargeback — card-present vs. card-not-present — and why one dispute can cost far more than the sale price.
Read more → Identity TheftIdentity Theft Statistics
How many Americans identity theft actually touches each year, what it costs them in money and time, and how often children are targeted.
Read more → Identity TheftIdentity Theft Protection
What third-party identity theft protection services actually cover, which vendors are worth comparing, and where their guarantees stop.
Read more → Identity TheftProtect Yourself From Identity Theft
The unglamorous, high-impact steps that actually prevent identity theft — from securing your mailbox to freezing your credit.
Read more → Identity Theft2nd Hand Mobile Phones Contain Original Owners Data
Why deleting files from a phone before reselling it isn't enough — and why SIM cards can't be wiped at all.
Read more → Identity TheftPress Release: Use Your ATM PIN Only At ATMs Or You'll Pay The Price
Why using your debit PIN anywhere but an ATM widens your fraud liability window — and how credit and debit protections actually differ.
Read more → Identity ToolsAddress Verification Service (AVS)
How AVS actually checks a billing address, what its six response codes mean, and why treating it as pass/fail rejects good orders.
Read more → Identity ToolsReturn Email
How email validation-loop checks work, why they're weak against real identity theft, and the velocity checks that make them worth using anyway.
Read more → Identity ToolsCheck Verification Services
What check verification actually screens for, when guarantee services are worth the extra cost, and typical per-transaction pricing.
Read more → Identity ToolsCard Security Schemes
How CVV/CVV2/CID codes actually prove card possession, and why most eCommerce merchants still don't check them.
Read more → Identity ToolsDelivery Address Verification
What delivery address verification (DAV) actually confirms — and the one thing it can't tell you.
Read more → Identity ToolsConsumer Authentication
How 3-D Secure consumer authentication shifts fraud liability to the issuer — and which transaction types it doesn't cover.
Read more → Identity ToolsCredit Check
How credit-bureau identity checks work, what they can and can't validate, and the compliance obligations they carry.
Read more → Identity ToolsAge Verification
How age verification services work for regulated goods, and the alternative approaches when a formal service isn't practical.
Read more → Identity ToolsIdentity Authentication
The difference between authentication and verification, and why relying on one without the other leaves a real gap.
Read more → Identity ToolsOut of Pocket Checks (KBAs)
How knowledge-based authentication questions work, why they're strong for credit decisions, and why they struggle internationally.
Read more → Identity ToolsMasterCard SecureCode
How MasterCard's consumer authentication program shifts chargeback liability, and exactly which reason codes it covers.
Read more → Identity ToolsDeposit Check
How micro-deposit account verification works, and why the month-long delay is its biggest limitation.
Read more → Identity ToolsAdvanced Address Verification (AAV)
How American Express's AAV+ extends standard AVS checks with shipping, email, and phone data — and why it's Amex-only.
Read more → Identity ToolsVerified by Visa (VbV)
How Visa's 3-D Secure consumer authentication works, and the exact chargeback reason codes it shifts liability for.
Read more → Identity ToolsTelephone Identification
How telephone number identification (TNI) reveals a number's geography and line type — and where it falls short.
Read more → Identity ToolsFreight Forwarders
How to spot when a delivery address is actually a freight forwarder redirecting goods overseas.
Read more → Identity ToolsTelephone Verification
How PIN-callback phone verification confirms a consumer controls the number they provided, and where it adds too much friction.
Read more → Identity ToolsReverse Lookups: Phone/Address/Email
How reverse lookup services confirm a name, address, and phone number are genuinely linked — and where the data runs stale.
Read more → Identity ToolsEmail Authentication
How email authentication services estimate an email's age and legitimacy — and why digital goods sellers rely on it most.
Read more → Identity ToolsIdentity Document Verification
How document verification confirms a passport, license, or ID is genuine — and the industries that lean on it most for KYC.
Read more → TechnologyBiometrics
Why biometric authentication is powerful in theory but expensive and hard to deploy at scale for eCommerce fraud prevention.
Read more → TechnologyDevice Identification
How device fingerprinting catches repeat fraudsters across accounts — and why it needs to work alongside other checks, not alone.
Read more → TechnologyIP Geolocation Services
What IP geolocation actually reveals about a customer's location, and why it can never be a standalone accept/reject signal.
Read more → TechnologyProxy Detection Services
Why proxy usage alone isn't fraud — and the specific patterns that turn a masked IP into a real risk signal.
Read more → TechnologySmart Cards
How chip-and-PIN (EMV) cards authenticate the card itself, and why the fraud-prevention benefit disappears when merchants skip the reader.
Read more → TechnologySecure Tokens
How hardware RSA tokens authenticate consumers with a rotating code — and why adoption stays low outside participating merchants.
Read more → TechnologyDigital Signatures
How digital signatures strengthen chargeback dispute evidence — and the one thing they can never actually prove.
Read more → TechnologyMobile Phone Geolocation
How mobile phone geolocation adds a second authentication factor by confirming a device's real-time physical location.
Read more → TechnologySpiders & Merchant Website Monitoring
How web crawlers get used on both sides of fraud — and what merchant website monitoring actually checks for card-brand compliance.
Read more → AnalyticsBehavioral Monitoring
How behavioral monitoring flags fraud by comparing user activity against a baseline of normal — before a bad order ever completes.
Read more → AnalyticsConfidence Indicator
How neuro-cognitive confidence scoring reads stress signals in an application to flag likely-deceptive answers.
Read more → AnalyticsCustom Modeling & Analytics
How custom fraud-scoring models get built — self-managed vs. fully managed — and why single-merchant models miss cross-merchant signal.
Read more → Data QualityReal Time Authorizations
Why real-time authorization beats batch processing, and the difference between a soft decline and a hard decline.
Read more → Data QualityDelivery Address Verification (DAV)
How USPS-grade address validation confirms a shipping address is deliverable — and why that's not the same as confirming who lives there.
Read more → Data QualityDenied Party Checks (OFAC)
Which six U.S. government watchlists a denied party check screens against, and what to do when a match halts an order.
Read more → Data QualityMOD 10 Check
The cheapest, easiest fraud check to deploy — and why it only catches format errors, not stolen or inactive cards.
Read more → CNP Fraud BasicsHistory of Fraud Online
How online fraud evolved from celebrity-name orders and card generators in the 1990s to organized fraud rings today.
Read more → CNP Fraud BasicsIdentifying the Fraudsters
The seven fraudster profiles behind CNP fraud — from script kiddies to organized criminal gangs — and what actually motivates each.
Read more → CNP Fraud BasicsCommon Online Fraud Schemes
Eight recurring CNP fraud schemes — from card generators to morphing attacks — and the prevention techniques that counter each.
Read more → CNP Fraud BasicsHow Fraudsters Steal from Merchants
The four categories every merchant-facing fraud attack falls into, and the specific defense that matches each one.
Read more → CNP Fraud BasicsReporting Fraud
Who to actually contact when fraud is suspected — from a Code 10 authorization call to the Postal Inspector and IC3.
Read more → CNP Fraud BasicsHow Do Merchants Get Paid In CNP?
Why a fraud manager has to understand the CNP payment process itself, and how finance, ops, and sales each see fraud differently.
Read more → CNP Fraud BasicsFraud Prevention: Strategies & Techniques
The difference between a fraud-prevention strategy and a fraud-prevention technique — and why conflating them undermines both.
Read more → CNP Fraud BasicsUnderstanding the Law & Fraud Prevention
How PCI-DSS, FCRA adverse-action rules, and international privacy law shape what a fraud team can and can't do.
Read more → CNP Fraud BasicsNew to Fraud & The Fraud Library?
What card-not-present fraud actually is, why it carries more risk than card-present fraud, and who's meant to use this library.
Read more → Operational TechniquesReal Time Operations
Why real-time authorization operations beat batch processing on cost, conversion, and customer experience alike.
Read more → Operational TechniquesCredit Card BIN Checks
What the first six digits of a card number reveal about its issuing bank — and how BIN checks flag mismatches, prepaid cards, and breach fallout.
Read more → Operational TechniquesCase Management (CSR Interface)
How case management platforms consolidate manual review, forensic analysis, and workflow queuing into one operational hub.
Read more → Operational TechniquesCharge Verification
How calling the issuing bank to verify a cardholder works — and why it adds at least 24 hours with no chargeback guarantee.
Read more → Operational TechniquesChargeback Recovery Services
What third-party chargeback recovery vendors actually charge, and the questions worth asking before signing with one.
Read more → Operational TechniquesChargeback Representment
The operational workflow behind chargeback representment — from reason code to evidence gathering to submission.
Read more → Operational TechniquesConsumer Alerts
How automated email/SMS alerts catch account fraud fast — and why cost drops to a fraction of a cent at volume.
Read more → Operational TechniquesHot Lists, Warm Lists, Positive Lists
Three list types every fraud operation should maintain — and why matching should never rely on a person's name.
Read more → Operational TechniquesInternal Rules
Why rules built only from past fraud need constant patching — and the three implementation styles that scale better.
Read more → Operational TechniquesManual Review
Why manual review scales worse the bigger you get, and the one place it's genuinely worth keeping.
Read more → Operational TechniquesMerchant Monitoring
How acquirers watch a merchant's own risk profile shift after onboarding — and the early warning signs that trigger action.
Read more → Operational TechniquesOn-Site Merchant Inspections
The difference between an exterior drive-by inspection and a full interior review — and what each is meant to catch.
Read more → Operational TechniquesOperational Providers
How operational-provider platforms consolidate rules management, manual review, and chargeback reconciliation into one hub.
Read more → Operational TechniquesPhishing Simulation Services
How simulated phishing campaigns train employees against the attack vector behind most ransomware and account takeovers.
Read more → Operational TechniquesRule Engines
The four implementation types behind a fraud rules engine, and why the technology started as order management, not fraud prevention.
Read more → Operational TechniquesSpider and Merchant Website Monitoring
The operational side of website monitoring — what a monitoring vendor actually checks for card-brand compliance.
Read more → Operational TechniquesVelocity of Use
How counting repeated data points across transactions catches fraud rings and identity morphing before a chargeback ever lands.
Read more → Operational TechniquesVelocity of Change
How tracking changes between transactions — not just repeats — catches identity morphing and stolen cards in motion.
Read more → Online Payments ResourcesThe Money Flow: Parties and Steps Involved
The seven parties and seven processing steps behind every credit card transaction — and why cash accepted is never quite as simple as it looks.
Read more → Online Payments ResourcesInvoice Payment Services
Why invoicing still has a place for B2B and government-facing merchants, even as automated recurring billing shrinks its market share.
Read more → Online Payments ResourcesMobile Phone Payments
The four types of mobile payment — from SMS billing to NFC tap-to-pay — and why nearly half of Americans already use one.
Read more → Online Payments ResourcesAdvertising Alternative Payment Services
How merchants get paid by advertisers instead of consumers — trading free products for marketing opt-ins.
Read more → Online Payments ResourcesCash Alternative Payment Services
Checks, escrow, money orders, and eWallets — the cash-based payment options that reach underbanked and privacy-conscious buyers.
Read more → Online Payments ResourcesCredit Terms Alternative Payments
How deferred-payment services approve buyers in seconds with minimal data, and why they lift average order value.
Read more → Online Payments ResourcesCredit Card Alternative Payment Types
The three real reasons consumers reach for alternative payments over cards — trust, cost, and checkout friction.
Read more → Online Payments ResourcesDirect Debit & Bank Services
How ACH push vs. pull payments actually work, and why they cost less but settle slower than a credit card.
Read more → Online Payments ResourcesPayment Aggregators
How PayPal-style aggregators let merchants accept cards without a merchant account — and what that convenience actually costs.
Read more → Sales ConversionHow Payments Impact Sales Conversion
The counterintuitive 2007 research showing top retailers without alternative payments actually converted better — and why that doesn't apply to everyone.
Read more → Sales Conversion7 Ways to Keep Customers Coming Back
Seven research-backed tactics for repeat business — from coupon strategy to publicly celebrating customer milestones.
Read more → Sales ConversionCould Requiring CSC Be Dropping Sales Conversion?
A 2007 report claimed skipping CSC verification lifts conversion 40% — here's why that number deserves real skepticism.
Read more → Sales ConversionInvoice Payment Service
Why B2B buyers still expect invoicing at checkout, and what dropping it actually costs you in conversion.
Read more → Sales ConversionMobile Phone Payments
Why nearly half of Americans expect a mobile payment option — and what leaving it out costs among 18-34 year old shoppers specifically.
Read more → Sales ConversionAdvertising Alternative Payments
How free-product-for-marketing-opt-in offers convert differently than a standard checkout — and where the friction actually lives.
Read more → Sales ConversionCash Alternative Payments
How offering checks, escrow, or money orders converts underbanked and privacy-conscious buyers a card checkout simply loses.
Read more → Sales ConversionCredit Card Alternative Payments
The three conversion levers alternative payments actually pull — trust, cost, and checkout speed — and which matters most for your buyers.
Read more → Sales ConversionPayment Aggregators
How PayPal, Google Checkout, and Amazon Payments each convert differently — and why brand recognition matters more than features here.
Read more → Sales ConversionDirect Debit & Bank Services
Why ACH's lower cost comes with a settlement-speed tradeoff that matters more at checkout than most merchants expect.
Read more → Sales ConversionCredit Card Payments Alternative Types
Today's shopper doesn't just carry a credit card — the conversion case for stocking a real alternative-payment menu.
Read more → Fraud ScoringModel-Based Fraud Scoring
What to actually evaluate in a fraud-scoring vendor, and why catch rates and false-positive rates always trade off against each other.
Read more → Fraud ScoringLogin Risk Scoring
Why a correct password alone isn't enough anymore, and the signals login risk scoring uses to catch account takeover in progress.
Read more → NewsData Sharing Bureaus
How data sharing bureaus pool transaction data across merchants to build fraud models no single company could build alone.
Read more → NewsIssuer Alerts
How issuer alerts warn merchants of a likely chargeback before it's ever filed — and why that head start matters most for digital goods.
Read more → NewsVelocity of Use
The three components of a velocity-of-use check, and real industry thresholds for when a repeat purchase turns suspicious.
Read more → NewsVelocity of Change
The eight data-element pairings velocity of change actually tracks, and why shipping address beats billing address for this check.
Read more →Managing Fraud Related to ePayments in a Business
A management perspective on best practices and methods to manage ePayments fraud.
Get training →