The anti-virus companies such as
Symantec,
McAfee,
TrendMicro etc. have come a long way. With the ubiquitous network connectivity (wireless and wired) available PCs can be up to date with the latest anti-worm, anti-virus, and other security software and patches. Many times the updates are transparent to the PC owner. As the owner is working away on the PC or goes away for a break the PC stays updated with the latest security updates.
McAfee for instance has relatively new products such as
McAfee SiteAdvisor that not only rates websites according to their risk profile but also protects PCs from Instant Messaging threats and
Phishing treats. They claim to work with 19 search engines including the big ones such as Google, Bing, Yahoo etc. Obviously a database is maintained by them to constant update the risk profiles of the billions of websites out there. Value added services such as these reflect a highly innovative "product management" at
McAfee. Hope they and other security software companies continue to be customer centric and develop great products.
What does this have to do with e-commerce fraud detection, prevention, and management. In the former scenario, individual consumers are protected from the vast Internet juggernaut. The idea being not all emails, instant messages, websites, are to be trusted by the individual consumer! In the fraud management scenario not all site visitors can be trusted by the e-commerce site! The e-commerce company cannot blindly allow any individual consumer to transact on the website. The biggest contributor to the problem is, unless a lot of software and resources are put in place, distinguishing between malicious individual person and a bot or automatic script/program.
In the last few years many e-commerce fraud companies have poped up. Some of them are Accertify, Kount, Iovation, 41st Parameter, Actimize, Retail Decisions USA, CyberSource, and ClearCommerce etc. There are many more companies in the space.
Here are some pointers that I believe, the e-commerce fraud management companies can learn from the PC security software companies,
1. Continuously learn about the individual consumers and web bots. Aggregate the data among all their customers and keep the list of potential
fraudulent customers up to date.
2. Develop software that is able to adapt and self learn as new threats arise. May mean the use of artificial intelligence software.
3. Make the creation and implementation of new fraud business rules in the fraud processing engine very easy.
4. Try to stay constantly ahead of the fraud schemers, although it is next to impossible to be ahead of
Internet shysters all the time.
The e-commerce fraud management industry is poised for growth in the future and the true innovators will prosper. It will definitely be interesting to see which companies will will.