Why credit card fraud alerts are rising, and how worried you should be about them
Rainstar | E+ | Getty Images
It’s a scenario most people have encountered: you try to make a big or unexpected purchase on your credit card, and, at the moment you need it the most, the card gets declined.
Sometimes, it’s as simple as confirming the purchase via text message, and you can quickly complete the transaction. Other times, it’s a days-long process that involves confirmation codes, mailed letters and waiting on hold with the card company to validate that it was indeed you who wanted to buy the product.
The rate of fraud alerts is “absolutely” going up, according to Deloitte U.S. risk & financial advisory principal Satish Lalchand.
It can’t be ignored, because many of the alerts are not false alarms.
About 60% of credit card holders in 2023 experienced some sort of attempted fraud, according to Experian.
“Fraud in general across all channels, whether it’s check fraud, credit card fraud payments, the peer-to-peer payments, everything, is significantly increasing at a very rapid pace,” Lalchand said.
Global card losses attributed to fraud reached $33 billion in 2022, according to payments industry research company Nilson Report, with the U.S. market representing roughly 40% of losses. It has forecast a persistent threat that could reach nearly $400 billion in card fraud in the decade to 2032.
AI is part of the problem, but it is also part of the solution at companies including Visa.
“What’s driving a lot of this type of fraud, is the fraudsters themselves are using AI in general,” Lalchand said. “So, they are able to now move much faster.”
In the past, cybercriminals could open five to ten accounts a day. Now, it’s hundreds, if not thousands of accounts, thanks to advancements in artificial intelligence.
But at the same time AI is helping to detect potentially problematic transactions, with the downside of many cases turning out to be false alarms.
“When we come down to credit cards, financial institutions are investing more in the concept of fraud and fraud modernization, replacing older technology and having better fraud detection capabilities, and retuning their alerts,” Lalchand said. “That’s also causing a lot more on the detection side to go up.”
More personal data is being stolen
Michael Bruemmer, Experian vice president and head of its global data breach resolution and consumer protection division, says a lot more fraud is being done in other ways than stealing your credit card number, using other portions of your financial background, identity background, social security number.
Just in the past five months, there have been four major data breaches including Ticketmaster, Change Healthcare, AT&T and National Public Data. More data breaches can lead to more scrutiny and more preemptive alert protocols, although they are often not the main reason for alerts, according to Experian.
There is some good news. Overall, the rate of false purchases on credit cards is actually decreasing, according to Experian. There have been 416,582 cases of credit card fraud that have been perpetrated in 2024. It’s down 5.4% versus 2023.
AI’s ability to detect patterns based on previous behavior has helped. While you may still get credit card blocks on purchases that seem out of the ordinary, technology has improved fraud alerts in other ways. MasterCard said it’s observed on average a 20% increase in its ability to detect fraud thanks to AI, and up to 300% increase in its ability to detect fraud without more false alerts. Mastercard declined to provide statistics on the absolute level of fraud and overall accuracy of fraud detection.
On Thursday, Mastercard announced the acquisition of payment fraud company Recorded Future, which it already partners with to help identify cards that have been compromised.
“We’ve come such a long way to actually reduce the friction out there,” said Johan Gerber, Mastercard executive vice president and head of security solutions.
Take for example, travel plans and making purchases in a foreign country. Before, people would have to call the credit card company. Now, card companies automatically note vacations and travel patterns based on past purchase behavior. Technology has also made it faster to identify and clear flagged fraud alerts if it is indeed a false alarm. Instead of having to call and wait on hold, in many cases verification can be done in a matter of minutes through authorized related accounts or through information only the individual cardholder would know.
Tips to cut down on unnecessary alerts
Today, some scenarios will raise concerns within current security parameters. Experian notes that while data breaches may turn up the dial on fraud alerts, it’s actually changes in shopping patterns that are guaranteed to set off red flags. If you’re buying something at a new store or purchasing a big ticket item that you don’t usually buy, that’s typically something that will be noted. MasterCard also said trying multiple transactions quickly in a row will always alert their systems. So, you can expect these will usually garner some sort of temporary block.
“It’s a balance,” Gerber said. “Do I want to be inconvenienced? Do you potentially want a transaction that [MasterCard] may get wrong because [we] declined you? Or do I want to sit on the other side of the loss of trust in that [we] actually did let a transaction through and you should have known it’s not me.”
Other things you can do to ensure that you get mostly accurate fraud alerts is to sign up for monitoring services and personally set limit alerts on your accounts. Most institutions will let you place monetary limits on when you can get notified about big transactions. Freezing your credit file, using a password manager and using two-factor authentication for your financial accounts with a biometric passcode can also be beneficial.
“Try to shop on regular, reputable shopping sites, and if you’re going to use a credit card, have a low-level limit credit card that’s only used for those shopping sites,” Bruemmer said. “I would also recommend using a tap-to-pay or a mobile app and then make sure you’re not shopping on a public Wi-Fi network.”
And, even if the alerts may be annoying, never ignore them. Even though it may seem like you get notice of a data breach every day, it doesn’t mean you won’t eventually be affected.
“Consumers should pay attention to all of this, because it’s just a matter of time … they will be impacted,” Lachland said.
Credit card fraud resources
Source: CNBC Select
Signage at 23andMe headquarters in Sunnyvale, California, U.S., on Wednesday, Jan. 27, 2021.
David Paul Morris | Bloomberg | Getty Images
The House Committee on Energy and Commerce is investigating 23andMe‘s decision to file for Chapter 11 bankruptcy protection and has expressed concern that its sensitive genetic data is “at risk of being compromised,” CNBC has learned.
Rep. Brett Guthrie, R-Ky., Rep. Gus Bilirakis, R-Fla., and Rep. Gary Palmer, R.-Ala., sent a letter to 23andMe’s interim CEO Joe Selsavage on Thursday requesting answers to a series of questions about its data and privacy practices by May 1.
The congressmen are the latest government officials to raise concerns about 23andMe’s commitment to data security, as the House Committee on Oversight and Government Reform and the Federal Trade Commission have sent the company similar letters in recent weeks.
23andMe exploded into the mainstream with its at-home DNA testing kits that gave customers insight into their family histories and genetic profiles. The company was once valued at a peak of $6 billion, but has since struggled to generate recurring revenue and establish a lucrative research and therapeutics businesses.
After filing for bankruptcy in in Missouri federal court in March, 23andMe’s assets, including its vast genetic database, are up for sale.
“With the lack of a federal comprehensive data privacy and security law, we write to express our great concern about the safety of Americans’ most sensitive personal information,” Guthrie, Bilirakis and Palmer wrote in the letter.
23andMe did not immediately respond to CNBC’s request for comment.
23andMe has been inundated with privacy concerns in recent years after hackers accessed the information of nearly 7 million customers in 2023.
DNA data is particularly sensitive because each person’s sequence is unique, meaning it can never be fully anonymized, according to the National Human Genome Research Institute. If genetic data falls into the hands of bad actors, it could be used to facilitate identity theft, insurance fraud and other crimes.
The House Committee on Energy and Commerce has jurisdiction over issues involving data privacy. Guthrie serves as the chairman of the committee, Palmer serves as the chairman of the Subcommittee on Oversight and Investigations and Bilirakis serves as the chairman of the Subcommittee on Commerce, Manufacturing and Trade.
The congressmen said that while Americans’ health information is protected under legislation like the Health Insurance Portability and Accountability Act, or HIPAA, direct-to-consumer companies like 23andMe are typically not covered under that law. They said they feel “great concern” about the safety of the company’s customer data, especially given the uncertainty around the sale process.
23andMe has repeatedly said it will not change how it manages or protects consumer data throughout the transaction. Similarly, in a March release, the company said all potential buyers must agree to comply with its privacy policy and applicable law.
“To constitute a qualified bid, potential buyers must, among other requirements, agree to comply with 23andMe’s consumer privacy policy and all applicable laws with respect to the treatment of customer data,” 23andMe said in the release.
23andMe customers can still delete their account and accompanying data through the company’s website. But Guthrie, Bilirakis and Palmer said there are reports that some users have had trouble doing so.
“Regardless of whether the company changes ownership, we want to ensure that customer access and deletion requests are being honored by 23andMe,” the congressmen wrote.
WATCH: The rise and fall of 23andMe
Technology
TSMC first-quarter profit tops estimates, rising 60%, but Trump trade policy threatens growth
-
Sports2 years ago‘Storybook stuff’: Inside the night Bryce Harper sent the Phillies to the World Series
-
Sports1 year agoStory injured on diving stop, exits Red Sox game
-
Sports1 year agoGame 1 of WS least-watched in recorded history
-
Sports2 years agoMLB Rank 2023: Ranking baseball’s top 100 players
-
Sports4 years ago
Team Europe easily wins 4th straight Laver Cup
-
Environment2 years agoJapan and South Korea have a lot at stake in a free and open South China Sea
-
Environment2 years agoGame-changing Lectric XPedition launched as affordable electric cargo bike
-
Business3 years agoBank of England’s extraordinary response to government policy is almost unthinkable | Ed Conway