c:\Program Files\IP2Location by default. You need to add a
HTTP/1.1 200 OK
Cache-Control: private
Date: Mon, 21 Mar 2011 01:51:57 GMT
Content-Type: text/html
Server: Microsoft-IIS/6.0
Content-Encoding:
Vary: Accept-Encoding
Transfer-Encoding: chunked
<HEAD>
<TITLE>Article - Credit Card Fraud Prevention Using .NET Framework in C# or VB.NET</TITLE></HEAD>
<link rel="stylesheet" href="location.css" type="text/css">
<style type="text/css"> <!-- .style1 {font-family: "Courier New", Courier, monospace}
--></style>
<p><b>
<CENTER>Credit Card Fraud Prevention Using .NET Framework in C# or VB.NET<BR>
</CENTER>
<CENTER><BR>
<BR>
Hexasoft Development Sdn. Bhd. (645996-K)</b><br>
1-2-15 Mayang Mall Complex,<br>
Jalan Mayang Pasir 1,<br>
11950 Bandar Bayan Baru,<br>
Penang, Malaysia.<br>
URL: <a class="black" href="http://www.ip2location.com">http://www.ip2location.com </a>
</A><br>
<br>
{ <a class="black" href="mailto:sales@ip2location.com">sales@ip2location.com</a>
}<br></CENTER>
<P></P>
<p align="left">
Credit card fraud has become pervasive on the Internet. According to MasterCard
International, account takeover fraud has increased by 369% since 1995. It has
become one of the fastest growing types of fraud, and one of the more difficult
to combat. More than $700 million in online sales were lost to fraud in 2001,
representing 1.14 percent of total annual online sales of $61.8 billion,
according to GartnerG2. Even if the credit card company has given the
authorization as to the validity of the card, there are several ways fraudulent
cards can be used on your site. The card may have been lost or stolen, but the
card owner is yet to report its loss. Or the number on the card (and not the
card itself) may have been lifted without the knowledge of the owner. There is
also a scam called identity theft, where the card has been issued under false
pretenses using someone else's identity and data.<br>
<br>
As an online merchant, you need to have a system to check the authenticity of
orders placed to safeguard your business. While the effort may require
additional time and money, it can save you the cost and stress caused by
charge-backs for fraudulent orders. You lost your physical products; you lose
the sale price; you lose another business opportunity; and you will be fined an
additional $15-$50 charge-back fee. If you have a high percentage of
charge-backs, your card services company can even blacklist you and cancel your
merchant account. You will also spend time looking up the order and provide the
requested information to your card services company. All of these hassles are
things you can surely do without.<br>
<br>
How can you protect your business from credit card frauds? Here are a few steps
that can be taken to ensure that the transaction is being requested by the real
cardholder.<br>
<br>
<b>Suspect shipping address.</b><br>
According to ClearCommerce Corporation, a provider of payment processing and
fraud protection software for e-commerce, orders from Ukraine, Indonesia,
Yugoslavia, Lithuania, Egypt, Romania, Bulgaria, Turkey, Russia and Pakistan
have a very high incidence of fraud, and often have unverifiable addresses.<br>
<br>
<b>Untraceable email address.</b><br>
In many fraudulent orders, the customer's email address is often at one of the
free email services, like hotmail.com and yahoo.com, which are relatively
untraceable.<br>
<br>
<b>Expensive items.</b><br>
Be wary of expensive orders, especially for expensive brand-name items.<br>
<br>
<b>Multiple items.</b><br>
It can be a bad sign, for example, if someone orders three X-Box or three DVD
players at once, especially where the items have a high resale value.<br>
<br>
<b>Express shipping.</b><br>
Most fraudulent orders specify overnight or 1-day shipping without hesitation.<br>
<br>
<b>Shipping address differs from billing address.</b><br>
Receiving point and billing address are different in fraud orders. If you are
selling valuable items, it can be a good policy only to ship to the billing
address of the card's holder.<br>
<br>
<b>Suspicious billing address.</b><br>
The address looks too simple or invalid. If the billing address is 123 Main St,
New York, the order is probably fraud. You can use or online location tool to
see if the address can be verified.<br>
<br>
<b>Leave at door or post office box.</b><br>
If the courier service cannot guarantee delivery of goods, the risk of fraud is
very high.<br>
<br>
The advancement of geo-targeting in the Internet allows us to pinpoint the
geographical region for an order. The information can be used to reduce the
fraud by verifying it with the billing address and delivery address. This
method can identify the scenario where someone from country X has stolen the
credit card data from country Y. The IP address lookup service will reveal the
real country instead of relying on the country filled in the order form.<br>
<br>
IP2Location� provides technology to translate IP address to country origin. The
lookup table is available in several formats such as database and COM. It is
the perfect solution to automate the fraud detection using client side
programming languages like C++ & Visual Basic; or service side programming
languages like ASP, PHP, JSP and CFML.<br>
<br>
For example, company XYZ received a credit-card order from IP address
161.139.12.3. The order details are as following:<br>
<b>Name:</b> John Ma<br>
<b>Address:</b> 123 Main St<br>
<b>City:</b> New York<br>
<b>ZIP Code:</b> 11111<br>
<b>Country:</b> United States<br>
<b>Tel:</b> (503) 111-1111<br>
<b>Credit Card No:</b> 1234 5678 9012 3456<br>
<b>Expired Date:</b> December 2010<br>
<br>
Credit card merchant processor will authorize this order if the billing address
matches the order details. Unluckily, the credit card data has been stolen
earlier by Mr. ABC from another country through the Internet. Later, he made a
purchase of digital products from company XYZ using the information. His order
approved by the merchant because all the details matched John's record in the
bank's database. IP2Location� technology can filter the difference between
order's country and record's country upfront to protect your business. You can
classify this kind of order for manual inspection before delivering the goods.
You will be surprise how much this method will help in identifying fraud
orders.<br>
<br>
In this example, we use a fully functional IP2Location� .NET component
available at <a class="black" href="http://www.ip2location.net/download/IP2LocationDotNetComponent.ZIP"
target="_blank">http://www.ip2location.net/download/IP2LocationDotNetComponent.ZIP
</a>to query country by visitor's IP address. Firstly, install the IP2Location�
.NET component. The IP2Location� .NET component will be installed in your local
drive. Next, get the IP2Location.DLL .NET component and sample database from
the directory, ie. c:\Program Files\IP2Location by default. You need to add a
reference to this component from your Visual Studio web project. A copy of this
component will be copied into /bin directory under the project. For
unregistered component, there is a random 5-second delay in one out of ten
queries.</p>
<p><b>Sample Codes in VB.NET Webform</b><br>
------------------------------</p>
<p align="left">
<span class="style1">Imports IP2Location<br>
Private Sub Query(ByVal strIPAddress As String, billingCountry As String)<br>
Dim oIPResult As New IP2Location.IPResult<br>
Try<br>
If strIPAddress <> ""
Then<br>
IP2Location.Component.IPDatabasePath
= "C:\\Program Files\\IP2Location\\Database\\IP-COUNTRY.SAMPLE.BIN"<br>
oIPResult =
IP2Location.Component.IPQuery(strIPAddress)<br>
Select Case
oIPResult.Status<br>
Case "OK"<br>
If
oIPResult.CountryShort = billingCountry Then<br>
'
buyer is from the same country by IP address<br>
Else<br>
'
buyer is from the different country by IP address<br>
End If
<br>
Case
"EMPTY_IP_ADDRESS"<br>
Response.Write("IP
Address cannot be blank.")<br>
Case
"INVALID_IP_ADDRESS"<br>
Response.Write("Invalid
IP Address.")<br>
Case
"MISSING_FILE"<br>
Response.Write("Invalid
Database Path.")<br>
End Select<br>
Else<br>
Response.Write("IP
Address cannot be blank.")<br>
End If<br>
Catch ex As Exception<br>
Response.Write(ex.Message)<br>
Finally<br>
oIPResult
= Nothing<br>
End Try<br>
End Sub</span>
</p>
<br>
<b>Sample Codes in C# Webform</b><br>
--------------------------<br>
<p align="left"><span class="style1">Using IP2Location;<br>
private void Query(string strIPAddress, string billingCountry)<br>
{<br>
IPResult oIPResult = new IP2Location.IPResult();<br>
try<br>
{<br>
if (strIPAddress != "")<br>
{<br>
IP2Location.Component.IPDatabasePath =
"C:\\Program Files\\IP2Location\\Database\\IP-COUNTRY.SAMPLE.BIN";<br>
oIPResult =
IP2Location.Component.IPQuery(strIPAddress);<br>
switch(oIPResult.Status.ToString())<br>
{<br>
case
"OK":<br>
if
(oIPResult.CountryShort == billingCountry) {<br>
//
buyer is from the same country by IP address<br>
}
else {<br>
//
buyer is from the different country by IP address<br>
}<br>
break;<br>
case
"EMPTY_IP_ADDRESS":<br>
Response.Write("IP
Address cannot be blank.");<br>
break;<br>
case
"INVALID_IP_ADDRESS":<br>
Response.Write("Invalid
IP Address.");<br>
break;<br>
case
"MISSING_FILE":<br>
Response.Write("Invalid
Database Path.");<br>
break;<br>
}<br>
}<br>
else<br>
{<br>
Response.Write("IP Address
cannot be blank.");<br>
}<br>
}<br>
catch(Exception ex)<br>
{<br>
Response.Write(ex.Message);<br>
}<br>
finally<br>
{<br>
oIPResult = null;<br>
}<br>
}</span></p>
<p>Compile and upload this project to the web site. All visitors will go through this
screening before redirect to an appropriate web page.<br>
</p>
<p><center>Hexa Software Development Center � 2001-2011
All Right Reserved</center>
<P></P>
<p><center>To obtain permission to reuse or republish this article, please write to <a class="black" href="mailto:sales@ip2location.com">
sales@ip2location.com</a>. Republication is welcome for no charge.</center>
<P></P>
