December 6, 2017 By Derek Brink 2 min read

Heading into the holiday season, the National Retail Federation (NRF) predicted that retail sales would be up and that, for the first time, the internet would be the most popular consumer shopping destination.

For online merchants, this is good news. At the same time, it highlights the corresponding Santa Claus problem that online retailers have to deal with: figuring out whether a given online transaction is naughty or nice (i.e., fraudulent or legitimate) quickly and effectively.

Balancing Three Business Objectives

At a high level, the total cost of e-commerce fraud reflects how online merchants are currently deciding to balance three fundamental business objectives.

1. Maximize the Nice

Online merchants naturally want to accept all genuine online orders. Declines are transactions that they don’t accept due to suspicion of fraud, but some of these transactions may actually be legitimate. These are called false declines, which can result in lost revenues.

2. Minimize the Naughty

At the same time, online merchants want to minimize online orders that should not be accepted in the first place. Transactions that are initially accepted but subsequently disputed are known as chargebacks, which can result in reversal of revenue, fees from payment card processors and other costs.

3. Make Better, Faster, More Cost-Effective Decisions

Making better business decisions about e-commerce fraud involves both people and technology. The timeliness of making these decisions is also crucial because customers are typically intolerant of even a few seconds of delay in the online experience. Should this happen, they are likely to take their business to another, speedier retailer.

For online merchants, finding the optimal balance of these three objectives can be tricky. This is the corresponding Goldilocks problem of e-commerce: creating acceptance policies that are neither too strict (leading to false declines) nor too liberal (leading to chargebacks), but just right, while still making transaction-by-transaction decisions in a timely and cost-effective manner.

How Online Merchants Are Performing

Primary research from Aberdeen across eight market segments provided some interesting quantitative insights into how online merchants’ current performance may be out of balance.

  • Maximizing the nice: Declines ranged between 2.5 percent and 5.14 percent of annual online order dollars. However, online merchants are currently turning away between 11 and 100 times more order dollars due to concerns about potential fraud than they are actually losing on chargebacks.
  • Minimizing the naughty: Chargebacks ranged between just four and 46 basis points (a basis point is defined as 1 percent of 1 percent) of annual online order dollars. But online merchants are currently spending between 31 and 167 basis points (between 2.3 and 13.9 times more) on making decisions about fraud than they are actually losing on chargebacks.
  • Making better, faster, cost-effective decisions: For every dollar in overall industry profitability over the last five quarters, which ranged between 7.98 percent and 10.43 percent, the combined business impact of declines, chargebacks and decision-making was between 45 and 60 cents.

For merchants who focus primarily on minimizing chargebacks, this analysis shows why the total cost of e-commerce fraud is actually much worse than they think. The numbers suggest that retailers are missing out on too much of the nice by focusing too much on the naughty. Making better and faster decisions to minimize the impact of false declines represents a big opportunity to reduce the total cost of fraud and improve the bottom line. That’s why effective fraud protection tools should be at the top of every online merchant’s wish list this holiday season.

Download the complete IBM X-Force report: Security Trends in the Retail Industry

More from Fraud Protection

Virtual credit card fraud: An old scam reinvented

3 min read - In today's rapidly evolving financial landscape, as banks continue to broaden their range of services and embrace innovative technologies, they find themselves at the forefront of a dual-edged sword. While these advancements promise greater convenience and accessibility for customers, they also inadvertently expose the financial industry to an ever-shifting spectrum of emerging fraud trends. This delicate balance between new offerings and security controls is a key part of the modern banking challenges. In this blog, we explore such an example.…

Remote access detection in 2023: Unmasking invisible fraud

3 min read - In the ever-evolving fraud landscape, fraudsters have shifted their tactics from using third-party devices to on-device fraud. Now, users face the rising threat of fraud involving remote access tools (RATs), while banks and fraud detection vendors struggle with new challenges in detecting this invisible threat. Let’s examine the modus operandi of fraudsters, prevalence rates across different regions, classic detection methods and Trusteer’s innovative approach to RAT detection through behavioral analysis. A rising threat As Fraud detection methods become more and…

Gozi strikes again, targeting banks, cryptocurrency and more

3 min read - In the world of cybercrime, malware plays a prominent role. One such malware, Gozi, emerged in 2006 as Gozi CRM, also known as CRM or Papras. Initially offered as a crime-as-a-service (CaaS) platform called 76Service, Gozi quickly gained notoriety for its advanced capabilities. Over time, Gozi underwent a significant transformation and became associated with other malware strains, such as Ursnif (Snifula) and Vawtrak/Neverquest. Now, in a recent campaign, Gozi has set its sights on banks, financial services and cryptocurrency platforms,…

Topic updates

Get email updates and stay ahead of the latest threats to the security landscape, thought leadership and research.
Subscribe today