Visa Introduces Suite of Security Capabilities to Help Prevent and Disrupt Payment Fraud
New payment security services to help defend against emerging and evolving threats targeting financial institutions and merchants
"Cybercriminals attempt to bypass traditional defenses by stealing credentials, harvesting data, obtaining privileged access, and attacking trusted third-party supply chains,” said RL Prasad, senior vice president, Payment System Risk, Visa. “Visa’s new payment security capabilities combine payment and cyber intelligence, insights and learnings from breach investigations, and law enforcement engagement to help financial institutions and merchants solve the most critical security challenges.”
According to a global report by
Protecting the Ecosystem from Threats
At the center of every Visa transaction is trust. As threats evolve, Visa’s payment security capabilities help to holistically protect the core components of the ecosystem—people, data and infrastructure—to maintain trust and connect the world through the most innovative, reliable and secure digital payment network. The new security capabilities add to existing protections and include:
Vital Signs– Actively monitors transactions and alerts financial institutions of potential fraudulent activity at ATMs and merchants that may indicate an ATM cashout attack. To limit financial losses for financial institutions, Visa can automatically or in coordination with clients, step in to suspend malicious activity.
- Visa Account Attack Intelligence – Applies deep learning to Visa's vast number of processed card-not-present transactions to identify financial institutions and merchants that hackers may be using to guess account numbers, expiration dates and security codes through automated testing. The machine learning technology detects sophisticated enumeration patterns, eliminates false positives, and alerts affected financial institutions and merchants before fraudulent transactions begin.
Visa Payment Threats Lab– Creates an environment to test a client’s processing, business logic and configuration settings to identify errors leading to potential vulnerabilities. For example, Visa can verify if a financial institution is effectively validating cryptograms—dynamically generated codes unique to each transaction—for EMV® chip transactions.
- Visa eCommerce Threat Disruption – A proprietary solution that uses sophisticated technology and investigative techniques to proactively scan the front-end of eCommerce websites for payment data skimming malware. Identifying potential website compromises limits the amount of time malware might be present on a merchant website and significantly reduces exposure of customer and payment data.
These capabilities complement Visa Payment Threat Intelligence, which provides actionable and informational cyber intelligence to clients and merchants worldwide. It offers timely intelligence reporting, technical delivery and educational materials. This includes alerts, analysis, technical indicators, and mitigations for potential cybercrime threats, account compromises and fraud.
To read about the key findings and recommendations from the
Forresterreport “Understanding the Evolving Payment Landscape,” download the full report.
- For more information about Visa’s Risk solution portfolio, visit Visa Security.
- See how the Visa eCommerce Threat Disruption service works to protect merchant websites in this video.
- Learn more about Visa security in the Visa newsroom and Visa Blog
Follow Visa security updates on LinkedIn, Twitter and
EMV® is a registered trademark in the U.S. and other countries and an unregistered trademark elsewhere.