The Clearsale Blog

5 Strategies for Better Identity Proofing

5 Strategies for Better Identity Proofing

The Need for Identity Proofing

Online, people can pretend to be whomever they want. And thanks to data breaches, phishing attacks and more, fraudsters can quickly and easily find personally identifiable information (PII) on unsuspecting consumers and use it to circumvent the simple techniques many e-commerce merchants rely on for identity verification.

As a result, it’s no longer enough for merchants to ask a customer to enter a user name and password; instead, to weed out legitimate customers from fraudsters, merchants must get creative and adopt a combination of advanced authentication factors, such as:

  1. Something customers know (e.g., user names, passwords, challenge questions, dynamic knowledge-based authentication, PINs)
  2. Something customers have (smart cards, tokens, etc.)
  3. Something customers are (e.g., retinal scans, fingerprints, voice recognition)

This process of analyzing several pieces of confidential information to authenticate an individual is called identity proofing.

How Merchants Can Confidently Authenticate Customers

To establish the right approach to identity proofing, merchants can consider adding a mix of techniques such as the ones below.

1. Upgrade to Dynamic Knowledge-Based Authentication

Traditional static knowledge-based authentication (KBA) methods — like “Where did you go to high school?” or “What was your first pet’s name?” — are traditionally the weakest, because it’s easy for fraudsters to guess or find the answers to these questions online.

Dynamic KBA improves on this method by creating on-the-fly, time-sensitive questions that are harder for a fraudster to quickly answer but easy for the legitimate customer. These questions might look like, “On what street have you lived in the past 10 years?” or “What was the amount of your mortgage payment last month?” and offer several possible answers. Data for these questions is gathered from public records or third-party agencies and is delivered to, but not stored on, an e-commerce merchant’s authentication system.

2. Layer Identity Proofing Strategies

Layering identity assessment strategies — ideally, using at least two of the factors from something you know, are and have — increases confidence that the customer is who they claim to be and makes it harder for fraudsters to compromise sensitive data. Each new layer backstops the one before it, protecting against current threats and legitimizing a customer’s identity claim.

3. Implement Out-of-Band Identity Proofing

With this approach, if a customer locks themselves out of their account because they’ve mistyped their password too many times, the system will call or text the phone number on file and deliver a temporary password or a verification code that unlocks the account. This type of identity proofing is one of the most secure, because it removes verification from being online-only.

4. Add Risk-Based Authentication

Instead of applying the same identity proofing strategy to each customer, consider implementing a risk-based solution that modifies authentication methods based on transaction risk. Transactions deemed to be more secure might require only simple device recognition for approvals, while those considered at-risk might also require one-time passwords or dynamic KBA responses.

5. Choose a Robust Fraud Management Provider

Fraud is a pressing issue for merchants, and those without adequate defenses may find themselves the target of cunning fraudsters. When merchants can flag suspect transactions early using a comprehensive fraud protection program, they can stop fraud before it occurs, saving time and money and protecting their reputation and customers.

Although a customer’s identity can’t always be proven with 100% certainty, ClearSale’s outsourced fraud protection solution helps give you the confidence you need to grow and protect your business. Contact one of our fraud specialists today to learn why companies around the world trust our solution to increase approvals, reduce false declines and eliminate chargebacks.

Is a Fraud Managed Services Solution Right for Your Business?

You may also like

[Industry Focus] Fraud Risk Profile for Nutraceutical and Drug Retailers

[Industry Focus] Fraud Risk Profile for Nutraceutical and Drug Retailers

As people become more conscious of what they’re putting into their bodies, there’s been an increased demand for high-quality supplements and healthful food and beverages. The result has been a..

3 Ways Tech Can Benefit Remote Teams

3 Ways Tech Can Benefit Remote Teams

Ecommerce businesses are used to an ever-evolving digital connection between them and their customers. But 2020’s COVID-19 pandemic has resulted in that digital connection making its way into the..

Shopping Habits by Gender: What’s Changed in 2020

Shopping Habits by Gender: What’s Changed in 2020

Do men hate shopping online? Are women more worried about fraud?

How Management Should Contribute to Fraud Protection

How Management Should Contribute to Fraud Protection

As companies grow, management often delegates business-critical tasks—marketing, technology, fraud prevention—to different departments. While it might seem to be an efficient way to get things..

“I Don’t Need Fraud Protection — My Business Isn’t at Risk!”

“I Don’t Need Fraud Protection — My Business Isn’t at Risk!”

As an e-commerce merchant, you know the risk of fraud, false declines and chargebacks. But maybe you think it won’t happen to you because you’re a relatively new — or small — e-commerce merchant,..

How Backtesting Can Improve Fraud Prevention

How Backtesting Can Improve Fraud Prevention

They say hindsight is 20/20, and that’s especially true for e-commerce merchants looking to increase their approval rates and decrease fraudulent transactions. It’s easy to look back at..

Is Fraud Risk Scaring You Away From International Shipping?

Is Fraud Risk Scaring You Away From International Shipping?

With cross-border shopping estimated to make up 20% of e-commerce in 2022, many merchants are right to consider expanding into other countries. So what’s stopping them from pulling the trigger?

Preparing Your E-Commerce Store for the Holiday Season

Preparing Your E-Commerce Store for the Holiday Season

It might still be summer on the calendar, but the holiday shopping season is just around the corner.  Are you ready?

Impact Analysis: Declined Transactions vs. Fraudulent Transactions

Impact Analysis: Declined Transactions vs. Fraudulent Transactions

Selling products and services online offers great opportunities for merchants, but it’s not without risk. Savvy cybercriminals use stolen personal data to defraud merchants, and sometimes, a..

Want to write
for our blog?

Please review our writers' guidelines
https://www2.clear.sale/press/clearsale-guest-blog-guidelines
and then email guestwriter@clear.sale with your pitch!

Subscribe to our blog