Mass attack blocking service

A credit master is a fraudulent act committed by a malicious third party in the following ways:

• ・Using a program that exploits the regularity of credit card number generation,
• ・ Determine a valid credit card number that will be issued legitimately,
• ・ Using the merchant's payment form as a stepping stone,
• ・ Repeat the attack mechanically until the expiration date and Security Code of the credit card are known.

Illegally obtained card information may be used for fraud on EC sites that handle high-value products.

There are various countermeasures on the merchant side, but the main countermeasures are the following five points.
* There is no completely safe measure. Continuous measures are required in accordance with changes in criminal methods.

• (1) Limit the number of times you enter a credit card

  Since Credit Master is a method of repeating mechanical attacks, it is effective to take measures to make it difficult to try by setting a limit on the number of times such as using a mass attack blocking service.

• (2) Take measures against bots

  Since it is common to use an automated tool called a bot in Credit Master, it is effective to introduce countermeasure tools such as "reCAPTCHA" provided by Google and play mechanical input.

• (3) Introduce a fraud detection system

  A fraud detection system is a service that monitors and reviews orders and detects suspicious orders.
  Unlike anti-bot tools, it is possible to detect manual fraud by humans.

• (4) Suspension of function in the area under attack

  It is effective to stop repeatedly accessed parts of the site, such as membership registration, card information change, and payment functions.
  In case a form request is sent directly to the server side, we recommend that you stop functioning on the server side as much as possible.

• (5) Confirmation of fraudulent account orders

  Check out the large number of new registered users, accounts, and payment data.
  Since there is a high possibility that it will be chargeback (cancellation of sales due to fraud of a third party's card), we recommend that you take measures such as deleting transactions or canceling shipping.
  If damage is confirmed, please consider reporting it to the police.

「大量アタック遮断サービス」は、5つのアタック遮断方式を提供します。

• ・This service is a paid option. To use it, you need to apply from the management screen.
  Mass Attack Blocking Service Option application Please check the operation manual on the management screen.
  * You will be redirected to the page for member stores. If you are asked for authentication, please enter the ID/PASS described on the "Documents" page in the upper right corner of the site/shop management screen.
• ・ Merchants can set blocking conditions on the shop management screen or site management screen themselves.
  * The management screen used differs depending on the attack blocking method.