Ecommerce Fraud Explained

Why sellers need a map

Fraud in online selling is not one problem. It is a group of different schemes with different victims, different costs and different defenses. A stolen credit card used to buy goods hurts the seller in a way that a fake invoice sent to the seller’s inbox does not, and the fix for one rarely helps with the other. Sorting the threats into a few families makes it easier to decide which ones deserve attention in a small shop.

Nobody can promise that a store will avoid all of these. Criminals adapt, and legitimate customers sometimes look odd. The goal is to notice patterns early, keep records, and avoid putting the business in a position where one bad order or one stolen password can be fatal.

Payment fraud with stolen cards

The most familiar type is a purchase made with a card that does not belong to the buyer. The real cardholder later notices the charge and disputes it with their bank. The seller usually loses the goods and the payment, and may pay extra fees on top. The mechanics of that process are covered under chargeback disputes, but the warning signs belong here.

Typical signs include:

• Billing and shipping addresses that are far apart, especially when the shipping address is unusual for the product.
• Several different cards tried in quick succession on one order.
• A rush for the fastest shipping on a high-value item, with little interest in price or details.
• Email addresses that look randomly generated, or that do not match the name on the card.
• Several orders from one device or network under different names.

None of these proves anything by itself. A gift sent to a relative in another city produces mismatched addresses for perfectly honest reasons. That tension is explored further in the discussion of order screening.

Card testing

Before using stolen card numbers for big purchases, criminals often check which ones still work. They do this with many small transactions, sometimes on low-priced items or donation-style pages. The signs are a burst of tiny orders, many declines, and odd names or addresses. Because the goal is to probe the cards rather than receive goods, the seller can be hit with processing fees and a damaged standing with the payment provider even though nothing ships.

Account takeover

Here the attacker does not use their own account at all. They log in to a real customer’s account, often with a password that was leaked elsewhere, and use saved details to place orders or collect stored value. Warning signs include login attempts from unfamiliar places, many failed logins in a row, sudden changes to an email address or shipping address, and customers reporting orders they did not place.

Friendly fraud and refund abuse

Not all fraud comes from strangers. Sometimes a real customer receives an order and then tells their bank that it never arrived, or that they did not authorize it. Others claim an item was empty, broken or never delivered when it was not, in order to get a refund and keep the goods. Because the buyer is genuine, the usual identity checks do not help. What helps is evidence: delivery confirmation, clear order records, communication history and a readable returns policy.

It is worth saying that many disputes are honest mistakes. A customer may not recognize the name on a card statement, or a family member may have placed the order. Treating every dispute as dishonest tends to damage good relationships.

Scams aimed at the seller

Sellers are also direct targets. Common versions include:

• Fake invoices or renewal notices for services the shop never ordered.
• Overpayment tricks, where a buyer sends too much and asks for the difference back before the original payment turns out to be invalid.
• Messages that imitate a payment provider, a carrier or the platform, asking the owner to log in through a link.
• Requests to ship to an unusual freight forwarder, paired with unusually urgent buying.

The telltale features are urgency, a request to move money or credentials, and a message that does not quite match what the real company normally does. These schemes are covered in more detail in the article on phishing scams.

Other categories worth knowing

A few more types appear often enough to mention briefly.

• Policy abuse. Customers who repeatedly use promotions, return items worn or used, or exploit a generous returns policy. Clear terms and conditions and reasonable limits on discount codes reduce this.
• Reseller and promotion fraud. Fake accounts created in bulk to grab limited stock or sign-up offers.
• Store compromise. An attacker who gains access to the admin area can change payment details, redirect customers or steal data. Strong logins, covered under two-factor authentication, and sound cybersecurity basics reduce the risk.
• Supplier-side fraud. A supplier who takes payment and does not deliver. Good supplier vetting is the main protection.

How to think about the risk

A few principles hold up across most of these.

1. Match effort to exposure. A shop selling low-priced, easily replaced items faces a different mix of problems than one selling high-value electronics or gift cards.
2. Remember the cost of false alarms. Turning away honest customers is also a loss. Stricter rules catch more bad orders and also more good ones.
3. Keep records. Order details, delivery proof and customer messages are the raw material for any dispute or investigation.
4. Lean on the payment setup. Most providers offer some screening tools, and the specifics vary by provider and by country.
5. Plan for recovery. If something goes wrong, working store backups and a calm response plan limit the damage.

Fraud levels, rules and available protections vary by place and by provider, so treat this as general information rather than advice for any specific business. Where the amounts at stake are large, speaking with the payment provider or a qualified professional is sensible.