{"id":656006,"date":"2024-11-27T00:00:00","date_gmt":"2024-11-27T00:00:00","guid":{"rendered":"https:\/\/enterpriseam.com\/egypt\/hardhats\/visas-new-payment-threats-report-breaks-down-the-latest-in-fraudulent-activities\/"},"modified":"2024-11-27T00:00:00","modified_gmt":"2024-11-27T00:00:00","slug":"visas-new-payment-threats-report-breaks-down-the-latest-in-fraudulent-activities","status":"publish","type":"hardhat","link":"https:\/\/enterpriseam.com\/egypt\/hardhats\/visas-new-payment-threats-report-breaks-down-the-latest-in-fraudulent-activities\/","title":{"rendered":"Visa\u2019s new payment threats report breaks down the latest in fraudulent activities"},"content":{"rendered":"

New threats emerge as the digital payment infrastructure changes: <\/strong>As digital payments come to dominate our financial landscape, it\u2019s becoming more important than ever to protect our payments and digital financial footprint \u2014 particularly when businesses\u2019 bottom lines are at risk. Visa Payment Fraud Disruption\u2019s (PFD) most recent Biannual Threats Report (pdf)<\/a> takes a deep dive into how threat actors tried to target your business and your wallet in 1H 2024, with an eye on the increasingly sophisticated and targeted tactics being used in today\u2019s digital age.<\/p>\n

WHY IT MATTERS-<\/p>\n

A growing number of banked citizens provides more possible inroads for payments <\/strong>attacks: <\/strong>Egypt has been making serious strides in financial inclusion in recent years, with the Central Bank of Egypt announcing earlier this year that some 48.1 mn<\/a> Egyptians were banked as of June 2024. This brings the number of banked citizens \u2014 whether via bank, Egypt Post accounts, mobile wallets, or prepaid cards \u2014 to around 71.5% of eligible citizens, according to the CBE, with financial inclusion in June up 181% since 2016.<\/p>\n

Our large proportion of fintech startups is also a relevant part of the discussion<\/strong>, with a number of firms like Fawry, MNT-Halan, Dopay, Paysky, Paymob, OPay, Valu, Thndr, Contact Financial, Aman Holding, Masria Digital Payments, Money Fellows, and many others operating in and adjacent to the digital payments space.<\/p>\n

There\u2019s even more in the pipeline on the digital payments front, too: <\/strong>Visa is working with<\/a>the Central Bank of Egypt<\/a> on operational trials for payment card tokenization on mobile applications, allowing contactless payments via these apps. The company is also working with the CBE on new regulations to develop digital payments in foreign trade transactions.<\/p>\n

TL;DR: <\/strong>Digital payments safety is critical for safeguarding consumers and businesses alike, particularly as attackers come to exploit new areas of opportunity in the region and rapidly disseminating technologies, including AI.<\/p>\n

THE TRENDS-<\/p>\n

The first half of the year saw a big jump in fraudulent payment authorization cases: <\/strong>Visa PFD opened 81% more purchase return authorization cases during 1H 2024 compared to the preceding six-month period, with each successful attack resulting in potential losses of around USD 184k for the credit card company\u2019s issuing partners, the report writes. <\/p>\n

Third-party service providers and retailers\u2019 digital wallets are two points of attack for <\/strong>fraudsters: <\/strong>While ransomware and data breach incidents were down 12.3% from the previous half in 1H 2024, attackers continue to target third-party service providers, with Visa PFD noting a 24% uptick in third-party service investigations during the first half of this year. Scammers have also begun targeting retailers\u2019 digital wallets and using mobile point-of-sale devices to tap wallets and activate cards for a transaction.<\/p>\n

Ecommerce saw an uptick in skimming attacks:<\/strong> Ecommerce providers are increasingly being targeted by skimming attacks, in which threat actors target merchant websites with malicious code in order to gain access to payment data. While overall skimming has largely remained steady in 1H 2024, the report notes that fraud perpetrators are focusing their efforts on ecommerce merchants \u201cas they are more likely to have direct access to sensitive payment account data stored within cardholder data environments or provided via the victims\u2019 checkout webpages.\u201d<\/p>\n

Our region made up a much higher proportion of attacks at the gas pump:<\/strong> Automated fuel dispenser fraud \u2014 attacks targeting payments made while fueling up your vehicle \u2014 declined 19% compared to the previous half but increased 373% in terms of total value of fraud. The Central Europe, Middle East, and Africa (CEMEA) region fielded a growing proportion of these attacks, with issuers in the region making up 47% of all attacks in 1H 2024 compared to 4% in 2H 2023.<\/p>\n

Summer is the high season for fraud: <\/strong>With its sporting events, concerts, and festivals, summer is an ideal time for scammers to take advantage of online ticket purchases as you fill up your busy social calendar. Summer travel is another weak link, with a number of scams imitating major airlines and cheating you out of expensive airfares.<\/p>\n

AI is increasingly being used to perpetrate attacks<\/strong>, with the report noting more and more sophisticated attacks using the advanced technology. For instance, earlier this year an employee of a company in Hong Kong wired USD 25.6 mn to a number of bank accounts on the directions of his CFO \u2014 who actually turned out to be an AI-generated deepfake created by scammers, the report reads. AI is also being used for reconnaissance on individuals via data scraping, which helps threat actors construct more believable scams.<\/p>\n

But don\u2019t you fret, analog theft isn\u2019t dead:<\/strong> Physical theft of payment cards and phones has only increased in recent months, with the report noting a marked increase in longstanding ATM scams, mail theft, vehicle break-ins, and pickpocketing as thieves increasingly target consumers. \u201cThe recent increase in physical theft reflects a broader trend wherein actors are encountering more friction in conducting fraud due to increased secure acceptance and fraud controls,\u201d the report reads.<\/p>\n

The situation may sound dire, but Visa\u2019s fraud department is on the case: <\/strong>Major payment ecosystems players have a wealth of resources deployed toward monitoring and taking out threats to digital payments, many with great success. As a case in point, during the first six months of 2024, Visa\u2019s Risk Operations Center \u201cimplemented pre-emptive, targeted blocks in coordination with impacted organizations,\u201d resulting in over 51.8 mn declined transactions worth a total of USD 11.8 bn.<\/p>\n

\n

Your top infrastructure stories for the week:<\/strong><\/p>\n