mrsm wrote:George R., I'll chime in with the others to thank you for your insider's view. If you don't mind indulging us a bit further, what happens if it turns out that the customer was using a credit or debit card fraudulently?
If the car was used fraudulently, then the merchant will have to eat it.
Banks will generally protect credit card customers against fraudulent use of their cards. I think it's a Federal regulation that the customer isn't be liable for more than $50 for fraudulent use of a credit card if reported promptly. However, many banks protect customers 100% on this.
Please note the rules are different for debit cards. Protection is much more limited which means someone with your debit card and PIN can empty your entire bank account regardless of the amount involved. You should eventually get all your money back, but it's usually a long battle with the bank.
That's why I don't have a debit card; it's the keys to the kingdom. They're convenient, but I don't feel they're worth the risk.
When a customer reports an improper charge on either a credit card or debit card to a bank, then the bank starts what is known as a charge-back. This means the money is taken out of the merchant's account and the business is asked to prove the charge is legitimate.
The burden of proof is on the business. If they can't prove it then they lose the money. The gold standard of proof is a signed charge card slip. The bank will compare the signature on the slip to the signature they have on record for the customer.
If the signatures match the bank will probably reverse the charge-back and return the funds to the merchant while telling the customer "tough luck." If they don't match (or are not present) then the merchant is the loser.
As you see, the bank is the arbiter in these situations. Because you're dealing with a large bureaucracy, the results may not always be consistent or appear rational to outsiders.
About this time you are thinking what about telephone or internet orders? The answer is it gets tougher to prove. If a customer sends a signed fax that would work, but it's not the norm.
I've never had to deal with a charge-back, so I can't tell you much more. However, I can tell you some of the standard security measures.
One is that a merchant will ask you for the 3-digit security code on the back of the card. That number is not on the magnetic strip, so you need the card in hand to get it. Also, there is address and zip code verification. Many systems require that information when the card is not present. If the numbers don't match that's a warning.
Of course, people often ask that an item be shipped to an address different from their billing address, such as an office or to a gift recipient. Most of these are legitimate, but there is risk to the merchant. Address verification doesn't work as easily with foreign orders. It can be done. You have to call the processor and they may be able to do it but could take several days.
Again there is a cost. Charges processed when the card is not present are at a higher rate to cover the added risk. Similarly, when a card number is entered manually instead of swiped the rate is higher.
By the way, the overall loss rate on credit cards is about 0.1% or one dollar per thousand. The surcharges are higher than that. I suspect the banks make a profit on the surcharges. They probably are happy when the magnetic strip on your card stops working because it means more money for them.
By the way, the banks are phasing out magnetic strip cards with new cards containing an imbedded chip. The Europeans have been using this for years and it is considered more secure. Later this year merchants will need a new terminal with a chip reader in it. Either a signature or a PIN will still be required.
After October 1st, merchants who swipe a card rather than using the chip will be liable for any fraudulent charges they process. The magnetic stripes will be around for a while, but the move is definitely toward chips.
The US is the last major market to use magnetic strip cards. Fraud losses in the US were about $6 billion last year. That's about half of all fraud losses world wide, even though we are responsible for about one-fourth of all transactions.
Based on experience elsewhere, the card companies hope to cut that loss in half.
Where there’s smoke, there may be salmon.