Abstract: Systems and methods for identifying potentially illicit purchases, especially in card-not-present transactions. In one implementation, a merchant transaction system comprises a processor and memory. The system receives a transaction request from a customer for a card-not-present sale transaction. The system transmits over an electronic network a transaction risk request message to a transaction risk evaluator, and receives over the electronic network a reply message from the transaction risk evaluator, indicating a level of risk associated with the sale transaction. The system can decide whether to proceed with the card-not-present sale transaction based at least in part on the content of the reply message.

Abstract: Systems and methods for identifying potentially illicit purchases, especially in card-not-present transactions. In one implementation, a merchant transaction system comprises a processor and memory. The system receives a transaction request from a customer for a card-not-present sale transaction. The system transmits over an electronic network a transaction risk request message to a transaction risk evaluator, and receives over the electronic network a reply message from the transaction risk evaluator, indicating a level of risk associated with the sale transaction. The system can decide whether to proceed with the card-not-present sale transaction based at least in part on the content of the reply message.

Abstract: Using common points-of-purchase revealed by back trace windows, a merchant risk system provides suspect merchants to a financial institution (such as a card issuer), identifying merchants who may have had account data (such as credit card numbers) compromised. In one embodiment, merchants are ranked based on spikes in fraudulent transactions on cards used at those merchants. Merchants may also be identified based on merchant risk scores that are calculated using data from the back trace windows.