Rich Stuppy: Did you know a simple online search can reveal thousands of sites that sell credit cards online? One of the big changes that has happened is we used to deal with the dark web. The dark web were hidden dark corners of the internet where the bad guys got together and exchanged best practices. They built their business by exchanging these best practices on the dark web.
Now it's out in the open. A regular person can go out and google several terms, and they will find hundreds of pages of content designed to help them become a professional fraudster. Go out and google terms like fullz. That's a complete identity record. Dumps, that's a complete credit card record. Anti-detect, that's a tool to defeat device fingerprinting. Fraudfox, that's a tool to defeat device fingerprinting. If you went out and googled these terms, you would find hundreds or thousands of pages of professional quality content that teaches you what to do with stolen credit cards, who to use stolen credit cards on, and how not to get caught.
Given the current state of the industry, the thing you have to remember is as a merchant, as a person holding the money, or on the hook for the money, you've got to recognize that these aren't people that are just onesy twosy trying to commit fraud on your site. These are organized criminals that are making a professional grade living out of committing fraud. They're playing by two rules. The only rules they have is don't get caught and take your money. That's how they play. Now you have to understand that you're fighting thoughtful, sentient opponents. These people are working hard to defeat your system, so you have to have multiple layers of protection. You've got to bring the best of people, you've got to bring the best of process, and you got to bring the best technology together to protect yourself or it can get very expensive very quickly.