Fraud management is of vital importance to companies trying to protect their digital assets. The impact of breaches can extend far beyond the immediate financial loss into crippling long-term privacy, intellectual property, company reputation, and customer losses. Customers are demanding anytime, anywhere access to products, services, and information through digital channels. With a proliferation of new devices, an increasingly mobile consumer and tighter omni-channel integration, disconnected approaches to securing a company’s assets and lack of visibility has created a fraud problem that is growing at an exponential pace. This new normal creates unprecedented challenges for organizations as they look to extend security to new channels while doing so without disrupting the customer experience. Extending the scope of security measures would appear to be a necessity. Yet, organizations are always faced with the task of the security vs. convenience balancing act, in a time where convenience will win out most of the time

RSA FraudAction offers a single external threat management service that provides proactive detection and mitigation of online threats such as phishing, Trojans and mobile rogue apps. Additionally, customers can gain deeper insight into emerging threats with intelligence reports and data feeds that provide deep visibility into the cybercrime underground. At the heart of FraudAction lies the Anti-Fraud Command Center (AFCC), RSA’s 24x7 operation that is staffed by over 140 analysts (in 2 global centers) that analyze tens of millions of potential threats every day and protect millions of end users around the world.

• Reduce fraud attacks targeting your organization up to 90%
• 24/7 end-to-end protection against phishing, Trojan and mobile rogue app attacks
• Access to detailed attack reports via an online dashboard and API
• Intelligence reports and feeds on latest online threats and fraud trends.
• Complete external threat mitigation
• ​Recover stolen credentials to reduce the fraud impact on your customers
• No integration required; simple and quick setup process
• Blocking access to malicious websites

3-D Secure is an anti-fraud protocol adopted by Mastercard, American Express, Visa, and JCB International that offers another layer of protection to online payments.

In the traditional 3-D Secure protocol, each time a cardholder uses a credit or debit card at a participating merchant, that cardholder is authenticated before the transaction can proceed. Authentication in a traditional 3-D Secure environment is based on a password that cardholders create when they enroll their credit cards, and every transaction is challenged.

The 100% challenge rate in traditional 3-D Secure negatively impacts issuers, merchants, and cardholders alike. Any activity that interrupts the purchase flow increases the likelihood of shopping cart abandonment, which reduces revenue for both issuers and merchants. The negative experience created when cardholders forget their passwords also increases the likelihood of cart abandonment, and reduces use of that particular card, further impacting issuer revenue.

The new EMV 3-D Secure 2.x protocol mitigates the negative shopping experience that came along with the legacy 3-D Secure protocol by giving merchants full control over the session. In addition, the new EMV 3-D Secure 2.x protocol suggests a risk-based approach.

RSA Adaptive Authentication for eCommerce has offered a risk-based approach for over a decade and provides high fraud detection rates through strong authentication while eliminating the poor cardholder experience that negatively impacts issuer revenues. With risk-based 3-D Secure, which utilizes machine-learning techniques and anti-fraud expertise, credit card issuers can reduce fraud while protecting revenues.

In order to meet end user demand for convenience, organizations continue to extend product and service offerings and account access into online and mobile channels.

At the same time, fraud continues to proliferate with cybercriminals leveraging phishing, man-in-the-middle, man-in-the-browser, and other advanced attacks to gain unauthorized access to personal and corporate accounts.

Achieving the right balance of security - while maintaining a positive user experience - is a challenge for organizations. RSA Adaptive Authentication solves this challenge by providing risk-based, multifactor authentication for organizations seeking to protect access to websites and online portals, mobile applications and browsers, SSL, VPN applications, web access management applications and application delivery solutions.

Adaptive Authentication is deployed at more than 8,000 organizations worldwide, protecting more than 500 million end users spanning multiple industries including financial services, healthcare, retail, and government.