| I periodically deal with recurring fraud from what seems to be a pretty organized network. - Orders are placed with stolen credentials with correct billing info that matches AVS. - Shipto address are located near billing info, typically in the same state/metro area. - They are often rural addresses, trailer parks, what appear
to be rent houses that may be empty. - Phone number provided has correct area code and rings a call center that has stolen billing info available and will confirm billing address order details verbally. - Ip is geolocated at/near the billing info area via a proxy. - Email addresses are often setup on custom domains. We catch them, but only because they don't vary the pattern much and we know what to look for. I don't know how fraud tools would be able to effectively filter in these cases without a lot of false positives. |