Jeddah: Visa launched a suite of innovative security capabilities to help prevent and disrupt payment fraud, breaking new ground in cybersecurity and fraud prevention across Central & Eastern Europe, Middle East and Africa (CEMEA) at the Visa CEMEA Security Summit 2019 in Barcelona, Spain. The forum brings together payment industry experts from risk, business and operational departments of financial institutions, merchants, processors and other payment service providers.
The new payment security services and capabilities help protect the integrity of the payments ecosystem by detecting and disrupting fraud threats targeting financial institutions and merchants. The new capabilities are available to Visa clients at no additional cost or sign-up, but through Visa’s continued investments in intelligence and technology. These add to the long list of benefits financial institution and merchant clients enjoy as participants in the Visa global payment network.
"Cybercriminals attempt to bypass traditional defenses by stealing credentials, harvesting data, obtaining privileged access, and attacking trusted third-party supply chains,” said Hector Rodriguez, Regional Risk Officer, CEMEA, Visa. “Visa’s new payment security capabilities combine payment and cyber intelligence, insights and learnings from breach investigations, and law enforcement engagement to help financial institutions and merchants solve the most critical security challenges.”
Neil Fernandes, Visa’s Head of Risk for Middle East and North Africa: “Findings from our recent ’Stay Secure’ survey conducted across the UAE, Saudi Arabia, Kuwait and Pakistan reveal increased consumer confidence and trust in transacting digitally using payment credentials. It is critical we maintain that trust – among consumers, businesses, and governments – to ensure further digitalization of commerce. Collaboration with our partners is how we will be successful in our mission, and that is why platforms like our Security Summit are so important to translate our efforts into tangible outcomes and support the region’s commerce ambitions and digital transformation goals.”
According to a global report by Forrester Consulting commissioned by Visa, ATM cashout attacks that exploit vulnerabilities among financial institutions and processors to remove fraud controls to withdraw money from cash machines fraudulently, and automated testing of values and credentials to gain unauthorized access to information and functionality called “enumeration attacks” were among the most prevalent account-related fraud types identified by respondents. At the same time, card-not-present fraud that includes ecommerce, phone and mail orders was found to be less frequent but caused more damage to businesses—representing nearly 40% of fraud losses and operational costs. Managing payment fraud holistically is imperative to meet these challenges.
Protecting the Ecosystem from Threats
At the center of every Visa transaction is trust. As threats evolve, Visa’s payment security capabilities help to holistically protect the core components of the ecosystem—people, data and infrastructure—to maintain trust and connect the world through the most innovative, reliable and secure digital payment network. The new security capabilities add to existing protections and include:
- Visa Vital Signs – Actively monitors transactions and alerts financial institutions of potential fraudulent activity at ATMs and merchants that may indicate an ATM cashout attack. To limit financial losses for financial institutions, Visa can automatically or in coordination with clients, step in to suspend malicious activity.
- Visa Account Attack Intelligence – Applies deep learning to Visa's vast number of processed card-not-present transactions to identify financial institutions and merchants that hackers may be using to guess account numbers, expiration dates and security codes through automated testing. The machine learning technology detects sophisticated enumeration patterns, eliminates false positives, and alerts affected financial institutions and merchants before fraudulent transactions begin.
- Visa Payment Threats Lab – Creates an environment to test a client’s processing, business logic and configuration settings to identify errors leading to potential vulnerabilities. For example, Visa can verify if a financial institution is effectively validating cryptograms—dynamically generated codes unique to each transaction—for EMV® chip transactions.
- Visa eCommerce Threat Disruption – A proprietary solution that uses sophisticated technology and investigative techniques to proactively scan the front-end of eCommerce websites for payment data skimming malware. Identifying potential website compromises limits the amount of time malware might be present on a merchant website and significantly reduces exposure of customer and payment data.
These capabilities complement Visa Payment Threat Intelligence, which provides actionable and informational cyber intelligence to clients and merchants worldwide. It offers timely intelligence reporting, technical delivery and educational materials. This includes alerts, analysis, technical indicators, and mitigations for potential cybercrime threats, account compromises and fraud.
Additional Resources
- To read about the key findings and recommendations from the Forrester report “Understanding the Evolving Payment Landscape,” download the full report.
- For more information about Visa’s Risk solution portfolio, visit Visa Security.
- See how the Visa eCommerce Threat Disruption service works to protect merchant websites in this video.
- Learn more about Visa security in the Visa newsroom and Visa Blog
- Follow Visa security updates on LinkedIn, Twitter and YouTube
About Visa Inc.
Visa Inc. (NYSE: V) is the world’s leader in digital payments. Our mission is to connect the world through the most innovative, reliable and secure payment network - enabling individuals, businesses and economies to thrive. Our advanced global processing network, VisaNet, provides secure and reliable payments around the world, and is capable of handling more than 65,000 transaction messages a second. The company’s relentless focus on innovation is a catalyst for the rapid growth of digital commerce on any device for everyone, everywhere. As the world moves from analog to digital, Visa is applying our brand, products, people, network and scale to reshape the future of commerce. For more information, visit About Visa, visamiddleeast.com/blog and @VisaNews.
EMV® is a registered trademark in the U.S. and other countries and an unregistered trademark elsewhere.
-Ends-
Media Contact:
Visa Inc.
Inna Derkach, +971 4 567 1305, iderkach@visa.com
Erica Pettit, +971 (0)4 457 7265, epettit@visa.com
Disclaimer: The contents of this press release was provided from an external third party provider. This website is not responsible for, and does not control, such external content. This content is provided on an “as is” and “as available” basis and has not been edited in any way. Neither this website nor our affiliates guarantee the accuracy of or endorse the views or opinions expressed in this press release.
The press release is provided for informational purposes only. The content does not provide tax, legal or investment advice or opinion regarding the suitability, value or profitability of any particular security, portfolio or investment strategy. Neither this website nor our affiliates shall be liable for any errors or inaccuracies in the content, or for any actions taken by you in reliance thereon. You expressly agree that your use of the information within this article is at your sole risk.
To the fullest extent permitted by applicable law, this website, its parent company, its subsidiaries, its affiliates and the respective shareholders, directors, officers, employees, agents, advertisers, content providers and licensors will not be liable (jointly or severally) to you for any direct, indirect, consequential, special, incidental, punitive or exemplary damages, including without limitation, lost profits, lost savings and lost revenues, whether in negligence, tort, contract or any other theory of liability, even if the parties have been advised of the possibility or could have foreseen any such damages.
