Publisher's Synopsis
NIST SP 1800-17 Printed in COLOR
E-commerce fraud increased by 30 percent in 2017, compared to 2016. This is linked to the improvements in EMV credit card technology in the United States, which has shifted malicious actors away from using stolen credit card data in stores at the checkout counter to using stolen credit card data for fraudulent online shopping. This increase in e-commerce fraud mirrors a similar increase observed in Europe following the rollout of similar credit card technology enhancements. Because online retailers cannot utilize all of the benefits of improved credit card technology, they should consider implementing stronger authentication to reduce the risk of e-commerce fraud. This guide explores several risk-based scenarios that use MFA to increase assurance of the purchaser's identity and to reduce fraudulent online purchases.
Retailers can implement multifactor authentication (MFA) to reduce the opportunity for a customer's online account to be used for fraudulent purchases. MFA is a security enhancement that allows a user to present several pieces of evidence when logging into an account. This evidence falls into three categories: something you know (e.g., password), something you have (e.g., smart card), and something you are (e.g., fingerprint). The presented evidence must come from at least two different categories to enhance security.