13 Jun 2008
Criminals targeting the web are taking advantage of a loophole in an online payment verification system used by retailers, according to research.
It is understood that a glitch was spotted in the address verification system (AVS), a popular identity verification system used by credit card companies and banks on behalf of retailers.
Under the system, identities are checked by matching the house number and postcode associated with the cardholder records, but e-criminals are now bypassing the verification standard by using alternative addresses with the same house number and digits in a different postcode, which is then accepted by AVS.
The loophole allows fraudsters to almost guarantee that retailers have no means of verifying the information, so transactions are successfully completed, according to the research, which follows the news that up to 38,000 customer records were stolen from the database of UK clothing retailer Cotton Traders.
The research was carried by out by fraud protection specialists The 3rd Man.
Have your say on this article
Newsletters
Latest stories from Hacking
Latest videos
You may also like
Hacking jobs
Technology Patent Wars
Case studies from large organisations across all sectors
... And rich media, and flexible working, and peaks in traffic ...
Upcoming Events
Join us for this Computing web seminar, in which the Head of BI at the Co-operative Group Nick Colebourn will be explaining just how he reigned in the Group’s sprawling database estate and how significant savings were realised and data quality improved as a result.
Date: 31 May 2012
Time: 11:00 AM
Live June 13th 11:00am: Register now. During this web seminar we will be looking at the sorts of incidents that can bring data centres grinding to a halt and what can be done about them.
Date: 13 Jun 2012
Time: 11:00 am
Receive the latest jobs direct to your inbox
Are you being paid what you are worth?
