<?xml version="1.0" encoding="UTF-8"?>
<blog-post>
  <author-id type="integer">42244</author-id>
  <blog-comments-count type="integer">2</blog-comments-count>
  <blog-post-status-id type="integer">1</blog-post-status-id>
  <body-format>html</body-format>
  <body-formatted>&lt;p&gt;According to the Sagepay survey, just 39% of online retailers actually understand the definition
of PCI DSS compliance, while 65% don't believe
they are responsible for covering the implications of
payments fraud committed on their site.&lt;/p&gt;
&lt;p&gt;A recent Cybersource &lt;a href="http://econsultancy.com/blog/3286-cybersource-online-fraud-burdening-uk-merchants"&gt;online fraud report&lt;/a&gt; also looked at this problem, revealing that one in eight online retailers in the UK are now losing 5% or more of their online revenue to fraud. &lt;/p&gt;
&lt;p&gt;Perhaps smaller retailers need to be more aware, but the outlay required to implement anti-fraud measure can be a drain on resources. This means that payment fraud can affect smaller e-tailers disproportionately, as they can't afford to use all of the
tools that are available and typically rely on one or two third-party
tools to fight fraud.&lt;/p&gt;
&lt;p&gt;According to &lt;a href="http://www.cybersource.co.uk/resources/fraud_report_2009.php"&gt;Cybersource&lt;/a&gt;, More than 40% of the smallest businesses are yet to implement CVN (Card Verification Number) checking, which is one of the simplest&#160; ways to help check that the buyer is in possession of the card they are using.&#160; &lt;/p&gt;
&lt;p&gt;Also, while around 90% of larger businesses will have implemented &lt;a href="http://econsultancy.com/blog/3887-verified-by-visa-a-conversion-rate-killer"&gt;Verified by Visa&lt;/a&gt; or MasterCard SecureCode by the end of 2009, the figure will be closer to 60% for smaller retailers.&lt;/p&gt;
&lt;p&gt;Trevor Ginn of &lt;a href="http://www.hellobabydirect.co.uk/"&gt;Hello Baby&lt;/a&gt; thinks that payment providers could do more to help online retailers:&lt;/p&gt;
&lt;blockquote&gt;
&lt;p&gt;&lt;em&gt;In recent years it has become easier to accept payments online with companies like PayPal and Google checkout saying that setting up payments can be done in a matter of minutes. Where I think the payment providers fail is in making any attempt to educate their merchants in the risks to taking credit cards or recommend any best practice.&lt;/em&gt;&lt;/p&gt;
&lt;/blockquote&gt;
&lt;p&gt;According to Trevor, some of these payment solutions (PayPal, Google Checkout, Sagepay etc) are sent to merchants without all the security tools set to high levels:&lt;/p&gt;
&lt;blockquote&gt;
&lt;p&gt;&lt;em&gt;The reason that the payment gateways don&#8217;t set the security at a high level is that they want to give people the freedom to choose. What I think is really lacking is a step by step procedure which makes people aware of the settings they are choosing, even if it is by default.&#160; In my experience (PayPal, Google checkout, Sagepay), this does not happen, and the merchant is expected to be aware of the risks. &lt;/em&gt;&lt;/p&gt;
&lt;/blockquote&gt;
&lt;p&gt;There is also a lack of protection from the authorities, something &lt;a href="http://econsultancy.com/blog/2175-etailers-want-more-help-to-combat-fraud-report"&gt;retailers have complained about&lt;/a&gt; before, which is partly due to lack of resources allocated to police e-crime units. &lt;/p&gt;
&lt;p&gt;There seems to be &lt;a href="http://econsultancy.com/blog/892-police-limit-online-fraud-investigations"&gt;a reluctance to investigate cases of online fraud&lt;/a&gt;; Dominic Yacoubian of the &lt;a href="http://econsultancy.com/blog/3006-retailer-247-electrical-closes-online-store"&gt;now defunct&lt;/a&gt; 247Electrical &lt;a href="http://econsultancy.com/blog/2399-q-a-dominic-yacoubian-of-247electrical-on-online-fraud"&gt;told us last year &lt;/a&gt;that he stopped reporting fraud to the police as it wasn't worth the time and effort.&lt;em&gt;&#160; &lt;/em&gt;&lt;/p&gt;
&lt;blockquote&gt;

&lt;/blockquote&gt;</body-formatted>
  <body-unformatted>&lt;p&gt;According to the Sagepay survey, just 39% of online retailers actually understand the definition
of PCI DSS compliance, while 65% don't believe
they are responsible for covering the implications of
payments fraud committed on their site.&lt;/p&gt;
&lt;p&gt;A recent Cybersource &lt;a href="http://econsultancy.com/blog/3286-cybersource-online-fraud-burdening-uk-merchants"&gt;online fraud report&lt;/a&gt; also looked at this problem, revealing that one in eight online retailers in the UK are now losing 5% or more of their online revenue to fraud. &lt;/p&gt;
&lt;p&gt;Perhaps smaller retailers need to be more aware, but the outlay required to implement anti-fraud measure can be a drain on resources. This means that payment fraud can affect smaller e-tailers disproportionately, as they can't afford to use all of the
tools that are available and typically rely on one or two third-party
tools to fight fraud.&lt;/p&gt;
&lt;p&gt;According to &lt;a href="http://www.cybersource.co.uk/resources/fraud_report_2009.php"&gt;Cybersource&lt;/a&gt;, More than 40% of the smallest businesses are yet to implement CVN (Card Verification Number) checking, which is one of the simplest&amp;nbsp; ways to help check that the buyer is in possession of the card they are using.&amp;nbsp; &lt;/p&gt;
&lt;p&gt;Also, while around 90% of larger businesses will have implemented &lt;a href="http://econsultancy.com/blog/3887-verified-by-visa-a-conversion-rate-killer"&gt;Verified by Visa&lt;/a&gt; or MasterCard SecureCode by the end of 2009, the figure will be closer to 60% for smaller retailers.&lt;/p&gt;
&lt;p&gt;Trevor Ginn of &lt;a href="http://www.hellobabydirect.co.uk/"&gt;Hello Baby&lt;/a&gt; thinks that payment providers could do more to help online retailers:&lt;/p&gt;
&lt;blockquote&gt;
&lt;p&gt;&lt;em&gt;In recent years it has become easier to accept payments online with companies like PayPal and Google checkout saying that setting up payments can be done in a matter of minutes. Where I think the payment providers fail is in making any attempt to educate their merchants in the risks to taking credit cards or recommend any best practice.&lt;/em&gt;&lt;/p&gt;
&lt;/blockquote&gt;
&lt;p&gt;According to Trevor, some of these payment solutions (PayPal, Google Checkout, Sagepay etc) are sent to merchants without all the security tools set to high levels:&lt;/p&gt;
&lt;blockquote&gt;
&lt;p&gt;&lt;em&gt;The reason that the payment gateways don&amp;rsquo;t set the security at a high level is that they want to give people the freedom to choose. What I think is really lacking is a step by step procedure which makes people aware of the settings they are choosing, even if it is by default.&amp;nbsp; In my experience (PayPal, Google checkout, Sagepay), this does not happen, and the merchant is expected to be aware of the risks. &lt;/em&gt;&lt;/p&gt;
&lt;/blockquote&gt;
&lt;p&gt;There is also a lack of protection from the authorities, something &lt;a href="http://econsultancy.com/blog/2175-etailers-want-more-help-to-combat-fraud-report"&gt;retailers have complained about&lt;/a&gt; before, which is partly due to lack of resources allocated to police e-crime units. &lt;/p&gt;
&lt;p&gt;There seems to be &lt;a href="http://econsultancy.com/blog/892-police-limit-online-fraud-investigations"&gt;a reluctance to investigate cases of online fraud&lt;/a&gt;; Dominic Yacoubian of the &lt;a href="http://econsultancy.com/blog/3006-retailer-247-electrical-closes-online-store"&gt;now defunct&lt;/a&gt; 247Electrical &lt;a href="http://econsultancy.com/blog/2399-q-a-dominic-yacoubian-of-247electrical-on-online-fraud"&gt;told us last year &lt;/a&gt;that he stopped reporting fraud to the police as it wasn't worth the time and effort.&lt;em&gt;&amp;nbsp; &lt;/em&gt;&lt;/p&gt;
&lt;blockquote&gt;

&lt;/blockquote&gt;</body-unformatted>
  <created-at type="datetime">2009-06-04T10:54:13+01:00</created-at>
  <enabled-blog-comments-count type="integer">2</enabled-blog-comments-count>
  <expertise-level-id type="integer">1</expertise-level-id>
  <extract-format>html</extract-format>
  <extract-formatted>&lt;p&gt;&lt;strong&gt;Two-thirds of online retailers say they feel threatened by payment fraud, something which threatens to hold back e-commerce growth in the UK.&#160; &lt;br /&gt;&lt;/strong&gt;&lt;/p&gt;
&lt;p&gt;The stats come from payment provider Sagepay, which surveyed 1,000 retailers, also revealed a lack of awareness of what they need to do to meet the industry standards (&lt;a href="https://www.pcisecuritystandards.org/"&gt;PCI DSS&lt;/a&gt;)  on payment security.&#160;&lt;/p&gt;</extract-formatted>
  <extract-unformatted>&lt;p&gt;&lt;strong&gt;Two-thirds of online retailers say they feel threatened by payment fraud, something which threatens to hold back e-commerce growth in the UK.&amp;nbsp; &lt;br /&gt;&lt;/strong&gt;&lt;/p&gt;
&lt;p&gt;The stats come from payment provider Sagepay, which surveyed 1,000 retailers, also revealed a lack of awareness of what they need to do to meet the industry standards (&lt;a href="https://www.pcisecuritystandards.org/"&gt;PCI DSS&lt;/a&gt;)  on payment security.&amp;nbsp;&lt;/p&gt;</extract-unformatted>
  <featured type="boolean">false</featured>
  <id type="integer">3964</id>
  <learn-more-formatted>&lt;p&gt;Related Econsultancy reports include our &lt;strong&gt;&lt;a href="http://econsultancy.com/reports/e-commerce-platforms-buyer-s-guide-2009"&gt;E-commerce Platforms Buyer's Guide&lt;/a&gt;&lt;/strong&gt;, &lt;strong&gt;&lt;a href="http://econsultancy.com/reports/delivering-successful-e-commerce-projects"&gt;Delivering Successful E-commerce Projects&lt;/a&gt;&lt;/strong&gt; and &lt;strong&gt;&lt;a href="http://econsultancy.com/reports/online-retail-2007-checkout-special"&gt;Online Retail Checkout Special&lt;/a&gt;&lt;/strong&gt;. See also the &lt;strong&gt;&lt;a href="http://econsultancy.com/reports/e-commerce-statistics"&gt;E-commerce Statistics Compendium&lt;/a&gt;&lt;/strong&gt;.&lt;/p&gt;</learn-more-formatted>
  <learn-more-unformatted>&lt;p&gt;Related Econsultancy reports include our &lt;strong&gt;&lt;a href="http://econsultancy.com/reports/e-commerce-platforms-buyer-s-guide-2009"&gt;E-commerce Platforms Buyer's Guide&lt;/a&gt;&lt;/strong&gt;, &lt;strong&gt;&lt;a href="http://econsultancy.com/reports/delivering-successful-e-commerce-projects"&gt;Delivering Successful E-commerce Projects&lt;/a&gt;&lt;/strong&gt; and &lt;strong&gt;&lt;a href="http://econsultancy.com/reports/online-retail-2007-checkout-special"&gt;Online Retail Checkout Special&lt;/a&gt;&lt;/strong&gt;. See also the &lt;strong&gt;&lt;a href="http://econsultancy.com/reports/e-commerce-statistics"&gt;E-commerce Statistics Compendium&lt;/a&gt;&lt;/strong&gt;.&lt;/p&gt;</learn-more-unformatted>
  <legacy-article-id type="integer" nil="true"></legacy-article-id>
  <name>Online retailers afraid of payment fraud: survey</name>
  <private type="boolean">false</private>
  <published-at type="datetime">2009-06-04T11:42:52+01:00</published-at>
  <slug>online-retailers-afraid-of-payment-fraud-survey</slug>
  <tweetbacks-updated-at type="datetime" nil="true"></tweetbacks-updated-at>
  <unpublished-at type="datetime" nil="true"></unpublished-at>
  <updated-at type="datetime">2009-10-13T10:17:54+01:00</updated-at>
  <views-count type="integer">1332</views-count>
</blog-post>
