Wednesday, April 25, 2007

Delayed Confirmation Fraud Strategy

Recently I've engaged in a number of discussions on the topic of delayed confirmation. I think this fraud strategy definitely has some merit in certain applications. The objective is to simply slow down a fraudster who is trying to game the site by circumventing any deployed fraud detection systems.

In theory, providing a fraudster with real-time "denied" confirmation tells them that what they're doing isn't working, thus, try something different. I have seen no statistical research on how effective this methodology is, but it makes sense around the lunch table. Frustrate the bad guys so they'll go someplace else.

1 comment:

bices said...

I really believe that slowing down the fraudsters on the internet does work. Fraudsters always like the internet channel because of 2 main things: anonimity and speed. If you take either of those two away - or better yet BOTH, then you can reduce fraud. Not only should you delay confirmation, you need to make it HARD for the fraudsters to know why you are delaying or how you made the decision to delay an activity.