Starting in 1973, B&H Photo and Video built a thriving business on a steadfast commitment to customer service, rapid order fulfillment, and prompt delivery. In the early days, it served mail-order customers across the United States. Later, in the 1990s, B&H was one of the first photography suppliers to adopt online-based orders.
"We've become a leading internet retailer, but have never forgotten the values that helped us succeed," says Barry, Fraud Manager for B&H. “Other large retailers would rather just cancel orders they suspect of fraud and ask honest customers to re-order. We put in the extra effort to verify every purchase. That allows us to accept and approve more orders."
B&H's success attracts fraudsters
With such an ambitious and accommodating policy, opportunistic fraudsters’ ploys are expected. For example, in 2014, one ‘customer’ placed 11 separate orders for merchandise worth tens of thousands of dollars.
"It turned out that this guy in Minneapolis had ‘business partners' in Russia,” recounts Barry. “They provided him with stolen credit card information – updated with his billing address – and promised to pay him $2,500 per month to reship our merchandise to Russia where it could be resold for a substantial profit.”
The orders started out slow to avoid suspicion: just a few thousand dollars. After each order’s approval, the fraudsters would make larger purchases.
Reshipping scheme uncovered
As a normal part of operations, Barry's fraud team called the re-shipper to confirm the orders. And yet, the calls left them with a bad feeling. They took a closer look.
The address checked out. The credit card on file hadn’t been reported stolen. The devices used to order the merchandise didn’t have evidence of fraud placed against them in iovation's Intelligence Center.
Then, they spotted the giveaway: iovation showed that the device’s declared IP address (Minneapolis, USA) mismatched the actual IP address (Moscow, Russia).
“As soon as we showed the customer that he was an accomplice in an international reshipping scheme and that the credit card used to place the orders was stolen, he became very cooperative,” Barry recalls. “We didn’t get all of our merchandise back, but it could have been a lot worse.”
Fraudsters outpace in-house detection system
Initially, B&H processed all online orders with its own internal fraud detection software. But as their online business continued to grow, the scale of attempted fraud outpaced their homegrown solution.
“It got to a point where we would have had to hire a full- time developer to keep up with the constant changes we needed to make to our system,” Barry recalls. “It wasn’t cost effective to maintain internally. So, we engaged ACI Worldwide and iovation for a merchant fraud solution.”
Fraud prevention services by ACI and iovation are enlisted
Working in tandem with the ACI Worldwide fraud prevention solution, iovation exposes subtle indicators of fraud, such as:
- Multiple orders originating from the same devices that use varying combinations of billing, shipping and credit card information.
- Details of how the consumer connected to B&H's website, whether by mobile phone, tablet or desktop, the browser type, proxy services, etc.
- Whether evidence of fraud was placed in iovation's Intelligence Center against the ordering device or associated devices.
“Throughout this transition to an external fraud detection platform, one thing never changed: We don’t deny any transactions automatically,” Barry emphasizes. “Our customers’ experience is the highest priority, even if it means maintaining a larger verification team than other companies our size. We'll challenge everything we have to.”
Mobile app fraud thwarted with iovation’s mobile SDK
In 2014, B&H introduced a mobile app for its customers. The app now accounts for a significant percentage of company revenue.
“They predict that more and more purchases will occur on mobile apps. If that’s where our customers want to shop, we’ll be there for them,” Barry asserts. “And if fraudsters want to try to exploit the channel, we’ll be there to stop them.
Why wouldn’t we implement iovation’s mobile SDK? To date, we’ve seen more fraud on our mobile website, but I believe that if you don't see a problem on the app, the SDK is serving its purpose.”
ACI Worldwide and iovation speed order fulfillment
B&H’s confidence in the iovation-ACI Worldwide combination has emboldened the retailer to streamline its fulfillment process.
For example, B&H has doubled the order size it automatically accepts from U.S.-based IP addresses. Even if some of these higher-value transactions show signs of risky behavior, the web’s largest photo, video, and audio retailer will tolerate them as long as they aren’t flagged by iovation’s fraud prevention service.