Worldpay & Card Fraud

Worldpay & Card Fraud

Author
Discussion

PetrolTed

Original Poster:

34,443 posts

310 months

Tuesday 31st May 2005
quotequote all
Had some muppet put through a purchase for £2500 over the weekend. Obviously just some prankster as the address was garbage.

I obviously have to refund the card as it's fraudulent and guess what - I have to foot a £112.96 transaction fee. :banghead:

Obviously I have to tighten up the restrictions at my end to stop someone placing really large orders but why the hell should I pay Worldpay for accepting what was obviously fraudulent (and why did the card issuer authorise it)?

They won't budge unfortunately saying that they are just the middlemen and that they provide a service which has to be paid for regardless of whether it's legitimate or not.

:banghead: Not happy :(

Podie

46,645 posts

282 months

Tuesday 31st May 2005
quotequote all
Don't refund it then... let the card people pick up the tab...

PetrolTed

Original Poster:

34,443 posts

310 months

Tuesday 31st May 2005
quotequote all
If I do that then the card company comes back to me to reclaim the monies in due course, I get charged an extra £10 admin fee and get a black mark on my account.

It sucks. Particularly when Worldpay's system gives you a fraud warning based on security code not matching, country of issue not matching etc, but they are there just for your information apparently - they aren't used to determine if the transaction should be allowed

Podie

46,645 posts

282 months

Tuesday 31st May 2005
quotequote all
Hmm... doesn't seem quite right to me.

Their page - www.worldpay.co.uk/enterprise/index.php?go=ent_antifraud - suggests that they have all the appropriate anti-fraud measures in place. By the sounds of what has happened, surely they have failed, not you... hence they should be liable..?

Any legal eagles out there..?

JonRB

76,123 posts

279 months

Tuesday 31st May 2005
quotequote all
My wife is in the process of signing up for WorldPay for her website.

For a start, I think it is disgusting that you have to pay extra for anti-fraud measures!

And even then, if they authorise a payment that turns out to be fraudulent then, as PetrolTed has pointed out, the merchant is responsible. I don't see how - you're paying them for a service (fraud protection) that they aren't delivering on because they failed to protect you from fraud.

I agree that you should put a limit on the value of an on-line order and I'll suggest to my wife that she does the same (if it is possible to do so).

>> Edited by JonRB on Tuesday 31st May 14:09

PetrolTed

Original Poster:

34,443 posts

310 months

Tuesday 31st May 2005
quotequote all
What they mean by fewer chargebacks is that their 'anti-fraud' system allows you to detect fraud after the event and refund the card before the card company initiates a chargeback.

It sucks

Podie

46,645 posts

282 months

Tuesday 31st May 2005
quotequote all
Time to find an alternative provider methinks...

JonRB

76,123 posts

279 months

Tuesday 31st May 2005
quotequote all
Podie said:
Time to find an alternative provider methinks...
Easier said than done. We did a lot of research before choosing WorldPay, I assure you. I'd imagine PetrolTed did likewise.

>> Edited by JonRB on Tuesday 31st May 14:19

Podie

46,645 posts

282 months

Tuesday 31st May 2005
quotequote all
JonRB said:

Podie said:
Time to find an alternative provider methinks...

Easier said than done. We did a lot of research before choosing WorldPay, I assure you. I'd imagine PetrolTed did likewise.

>> Edited by JonRB on Tuesday 31st May 14:19


Hmm... surely there must be some competition out there though...?

JonRB

76,123 posts

279 months

Tuesday 31st May 2005
quotequote all
Podie said:
Hmm... surely there must be some competition out there though...?
There is, but it is either
1. Difficult to get accepted (eg. must have been trading X years / been with your business bank Y years / whatever)
2. More expensive.
3. Dodgy and/or less secure.

Podie

46,645 posts

282 months

Tuesday 31st May 2005
quotequote all
Ted... does this count as a "name and shame"..?

davidd

6,531 posts

291 months

Tuesday 31st May 2005
quotequote all
Tell them to Fook off and go and talk to your bank. I would suspect now that PH is a huge cash machine that they'll bend over backwards to help you.

D

PetrolTed

Original Poster:

34,443 posts

310 months

Tuesday 31st May 2005
quotequote all
I've now discovered that the offender tried 3 times before getting one transaction authorised and then did the same again for another £1000. So much for clever systems to detect fraud

Transaction fees to the tune of £157.

I've put extra safeguards into my shop software to prevent a reoccurrence. Don't want to waste any more time by switching providers. Worldpay has been excellent up until now.

PetrolTed

Original Poster:

34,443 posts

310 months

Tuesday 31st May 2005
quotequote all
davidd said:
...PH is a huge cash machine...


In the scheme of things it's still a small business

Podie

46,645 posts

282 months

Tuesday 31st May 2005
quotequote all
PetrolTed said:
I've put extra safeguards into my shop software to prevent a reoccurrence. Don't want to waste any more time by switching providers. Worldpay has been excellent up until now.


You only ever find out how good a company is, when you experience a problem...

PetrolTed

Original Poster:

34,443 posts

310 months

Tuesday 31st May 2005
quotequote all
True, but I've not experienced any problems in the last few years of using the system so have been pleased until now.

schueymcfee

1,574 posts

272 months

Thursday 2nd June 2005
quotequote all
We use WorldPay (although trying to move away from it now, as they keep our money for 4 weeks - not good for a small web business!) and moving just to our own streamline machine.

We use the option "pre-auth", this stops Worldpay from automatically taking the money from their account. It allows you to analyse their delivery/billing address (do they match), telephone number (NOT MOBILE) is the area code the same as delivery address? I only do this for cautions (where the address/postcode may not match, because of spelling error) any warnings I decline and won't get charged.

At the mo we're taking about £17,000 per month but 50% of that is fraud - so automatic transactions would mean A LOT of chargebacks.

It's safer just maually approve the order (if time permits), I avoid all Nigerian, Malaysian, etc orders and any where the cardholders name is Mr. Smith, but the delivery name is Abu Al Makakaka!

PetrolTed

Original Poster:

34,443 posts

310 months

Thursday 2nd June 2005
quotequote all
Interesting. I removed Nigeria and some dodgy countries from my shipping list so that discouraged a lot of nonsense.

It would be a pain for me to pre-approve transactions though as I can get 50+ on busy days.

Luckily I'm not selling electronics and that sort of stuff so PH isn't a high profile target.

schueymcfee

1,574 posts

272 months

Thursday 2nd June 2005
quotequote all
Also, in the event that we declined a genuine order I put order tracking systems in place, where by the customer can log-on to the site and enter their order number, this will display the progress of their order (this cut down on phone calls too). This system is linked to our despatch system, so if an order is declined the customer can see straight away, and it allows them to phone if we've made a mistake - we also automatically send out emails when declined. Before this system was put in place we were declining £6000 of orders per month, just by closely researching each order and the order tracking/email system I've reduced that figure significantly.

I appreciate you may not have the time to do this though!

PetrolTed

Original Poster:

34,443 posts

310 months

Thursday 2nd June 2005
quotequote all
Would an IP to country match be useful to you too?