Professor
Professional
- Messages
- 903
- Reaction score
- 1,210
- Points
- 93
Based on the observation of articles, training manuals, forum discussions, and chat- services channels, we identified three main reasons for card enrollment:
Access to online banking allows for changing personal account holder information
Changing email address with redirect all the notifications on card purchases from the cardholder to the cybercriminal, and as a result, the victim will not be notified about suspicious transactions.
Changing the billing address will help to make fraudulent purchases. An online merchant usually verifies the billing address on the card and a shipping address used for purchase part of the address verification system (AVS) check. If the transaction is legitimate, the two addresses will usually be the same; however, if a transaction is fraudulent, the shipping address will be of a drop or also called a money mule. Access to online banking allows putting a drop address as the billing address.
Changing phone number also allows blocking of bank verification messages. Moreover, by putting their own phone number into online banking, criminals will be able to use this number as a legitimate verification tool. Criminals can call into the merchant’s support service, introducing themselves as a cardholder, and using the number listed in the account and notify the merchant about an expensive purchase which they plan to make from "their" card. These calls significantly decrease the possibilities of the transaction to be canceled.
Access to online banking allows for changing personal account holder information
Changing email address with redirect all the notifications on card purchases from the cardholder to the cybercriminal, and as a result, the victim will not be notified about suspicious transactions.
Changing the billing address will help to make fraudulent purchases. An online merchant usually verifies the billing address on the card and a shipping address used for purchase part of the address verification system (AVS) check. If the transaction is legitimate, the two addresses will usually be the same; however, if a transaction is fraudulent, the shipping address will be of a drop or also called a money mule. Access to online banking allows putting a drop address as the billing address.
Changing phone number also allows blocking of bank verification messages. Moreover, by putting their own phone number into online banking, criminals will be able to use this number as a legitimate verification tool. Criminals can call into the merchant’s support service, introducing themselves as a cardholder, and using the number listed in the account and notify the merchant about an expensive purchase which they plan to make from "their" card. These calls significantly decrease the possibilities of the transaction to be canceled.
