Roll Out the VIP Path to Play
•Download as PPTX, PDF•
0 likes•98 views
Online sports betting in the U.S. is heating up! As new players are attracted to your betting site and platform, how do you expedite onboarding to optimize their experience? How do you comply with new regulations and combat fraud while not adding more friction? Join iovation, a TransUnion Company, to understand the challenges facing operators launching in the newly legalized U.S. sports betting market, including: Expedite onboarding: An onboarding process that is too long or difficult will drive up abandonments, but it’s crucial to balance compliance with player experience. Age verification: Depending on the state, the legal online gambling age is between 18 and 21. Much like anything elsewhere, if there is an age limit, underage people are going to try and participate. Bonus abuse: Many operators provide incentives like money or betting to attract players. But often, fraudsters exploit these programs which result in real losses. iovation has seen bonus abuse rise 287% from 2015 to 2018. Credit card fraud: iovation found credit card fraud increased in online gambling by 155% globally from 2014 to 2018, with an average annual growth of 39%. Managing play by boundaries: Online gambling may be legal in one state and then illegal within a neighboring state, operators will need to pinpoint a gamblers’ location and limit play where required. Self-exclusion: It can be difficult to manage legitimate problem gamblers who try to access different sites within a gambling operator’s system, set up new accounts using falsified account details and even change payment methods.
Recommended
Recommended
More Related Content
What's hot
What's hot (19)
Similar to Roll Out the VIP Path to Play
Similar to Roll Out the VIP Path to Play (20)
More from TransUnion
More from TransUnion (20)
Recently uploaded
Recently uploaded (20)
Roll Out the VIP Path to Play
- 1. 1© iovation. All RightsReserved Angie White, Product Marketing Manager Roll Out the VIP Path to Play
- 2. How do you protect your business and consumers even when bad actors haveperfect data?
- 3. © iovation. All RightsReserved 3 Gambling Last 12 months Transactionscoming frommobile 72% Volumeof gambling transactions 589 million Numberof risky transactionsstopped 48 million Reputationreports submittedby analysts 1.2 million 100-plus ActiveGamblingOperators andPlatformProvidersUseiovation © iovation. All Rights Reserved 3
- 4. © iovation. All RightsReserved 4 TransUnion and iovation The largest combined personal and digital identity platform 1 billion worldwide consumer records 650 million consumer credit history records 50+ petabytes of data 30+ countries 4.8 billion monthly data updates 5.9 billion devices seen by network 42 billion total transactions protected 26 million transactions protected per day 66 million fraud reports placed by network 35,000 websites and apps protected
- 5. © iovation. All RightsReserved 5 • Verify identity against a broad set of personal and digital data • Utilize when an account is originated or provisioned • Form a basis for greater identity confidence • Validate the claimed identity is who they say they are • Utilize authentication at specific touchpoints • Employ methods that match the risk level • Assess fraud risk of online transactions or identities • Identify potentially fraudulent actions or behaviors • Investigate suspiciousbehavior and inconsistencies Prevent Fraud AuthenticateConsumers EstablishIdentity
- 6. 6© iovation. All RightsReserved Preventing Fraud and Abuse Complying with Regulations Defending the Business Providing An Engaging and Rewarding Experience
- 7. © iovation. All RightsReserved 7 Recognize a Consumer’s Online Devices Associate devices to an anonymous consumer
- 8. © iovation. All RightsReserved 8 Connect Personal and Digital Identity Gain greater identity confidence and clarity
- 9. © iovation. All RightsReserved 9 Offer Seamless and Safe Transactions Secure every step of your customer’s journey Account Login Account Management Cash Out Play Deposit Account Registration
- 10. © iovation. All Rights Reserved 10 Personal Identity Solutions Digital Identity Solutions Gambling Player’s Journey Stop Bonus Abuse Prevent Fraudulent Accounts Manage Player Self-exclusion Stop Repeat Offenders Ensure Geographic Compliance Verified Pre-fill to Expedite Onboarding Identity Verification (OTP, KBA) Age Verification Address Validation Email and Phone Verification Account Registration 1
- 11. © iovation. All RightsReserved 11 Preventing Fraud and Abuse
- 12. © iovation. All RightsReserved 12 Preventing Fraud and Abuse Cheating and Abuse Payment Fraud Account Takeover Bonus Abuse Insider Threat
- 13. © iovation. All RightsReserved 13 Preventing Fraud and Abuse Cheating and Abuse Payment Fraud Account Takeover Bonus Abuse Insider Threat
- 14. 14 Attract New Players, Not Fraud R i s i n g b o n u s a b u s e 250K 6% 2015 2016 2017 2018 200K 150K 100K 50K 0K 287% Increase in the Past 3 Years
- 15. © iovation. All RightsReserved 15 Bonus Abuse Protection APPLY High Velocities Device Associations Identify Good Players Device Reputation ACCOUNT BONUS First Deposit Bonus up to 100% $100
- 16. 16 Streamlineplayeronboarding Rewardgood players Build brandloyalty Growrevenue Growmarket share
- 17. © iovation. All RightsReserved 17 Preventing Fraud and Abuse Cheating and Abuse Payment Fraud Account Takeover Bonus Abuse Insider Threat
- 18. © iovation. All RightsReserved 18 Fraud Insights From the iovation Database CreditCardFraud- 5 Year Trend 600K 500K 400K 300K 200K 100K 2014 2015 2016 2017 2018 *Source: iovation stats on reported fraud 155% Increase in the Past 5 Years
- 19. © iovation. All RightsReserved 19 Payment Fraud Protection Check device for risk factors such as geolocation mismatches, high velocities and detection evasion Push authorization for step-up or for authorization of high value or risky transactions Check if the device been associated with past fraud either directly or with another business? Improve customer experience by eliminating challenges
- 20. © iovation. All RightsReserved 20 Preventing Fraud and Abuse Cheating and Abuse Payment Fraud Account Takeover Bonus Abuse Insider Threat
- 21. © iovation. All RightsReserved 21 Account Takeover Common Attack Methods Consumer victims of ATO pay average of $290 and spend 16 hours to resolve Credential stuffing Social engineering Phishing attacks Source: Javelin 2018 Identity Fraud Study
- 22. © iovation. All RightsReserved 22 Gambling Player’s Journey Account Registration Login Play Deposit Cash Out Account Management RISK RISK Contact Center RISK
- 23. © iovation. All RightsReserved 23 Account Takeover Protection Improve login experience for good players, stop fraudsters Pair known devices with accounts for transparent effortless access Strong MFA for step up and authorization of account changes Check risk on new, unpaired devices or assess the risk of a new email or phone number Contact agent pushes an authentication request before proceeding with call Account Management Login Login Contact Center
- 24. © iovation. All RightsReserved 24 Complying with Regulations
- 25. © iovation. All RightsReserved 25 Complying with Regulations Affordability Checks Geo Compliance Age Verification Identity Verification Responsible Gambling AML
- 26. © iovation. All RightsReserved 26 Geo Compliance Protect against detectionevasion IP or ISP Mismatch Anonymizing Proxies Geolocation Mismatch Is there a mismatch between the real and stated IP? With the ISP? Is there a mismatch between the time zone and geolocation of the device? Is the device evading detection? Perhaps using a VM, proxy or Tor? 119% higher in the U.S.
- 27. © iovation. All RightsReserved 27 TX VT ME NH IDWA WI AK MT MAND MN IL MI NY WY NV SD RI IA IN OH PA NJ CTOR CO UT NE MO KY WV VA MD DECA AZ NM KS AR TN NC SC DC HI OK LA MS AL GA FL Native Applications Enable Accurate Geo Compliance
- 28. © iovation. All RightsReserved 28 TX VT ME NH IDWA WI AK MT MAND MN IL MI NY WY NV SD RI IA IN OH PA NJ CTOR CO UT NE MO KY WV VA MD DECA AZ NM KS AR TN NC SC DC HI OK LA MS AL GA FL Native Applications Enable Accurate Geo Compliance
- 29. © iovation. All RightsReserved 29 965K Accounts 795K Devices 223K Reports Associated with player self-exclusion Self-exclusion placed By operators Associated with player self-exclusion Take Control of Problem Gambling
- 30. © iovation. All RightsReserved 30 AbnormalNormal FraudRing Unmask Criminal Behavior GOOD ACCOUNTSBAD ACCOUNTS DEVICESREVIEW
- 31. © iovation. All RightsReserved 31 Defending the Business
- 32. © iovation. All RightsReserved 32 Defending the Business Roll Out the VIP Path to Play Improved Login Reduced Friction Expedited Onboarding Added Risk Insights Increased Assurance
- 33. © iovation. All RightsReserved 33 Improve Login Experience Ease access for good players, stop fraudsters Pair known devices with accounts for transparent effortless access Strong MFA for step up and transaction authorization of risky transactions Check risk on new, unpaired devices and risky transactions Improve customer experience by eliminating challenges
- 34. 34© iovation. All RightsReserved Improve login experience, reduce password resets that cause customer friction at the contact center Cost for each manual password reset Of calls to contact center are for password resets 10 Min. For an agent to manually reset a password $8 35% - http://www.sparkhound.com/blog/does-one-password-reset-cost-your-company-7-or-70-every-time-the-password-is - iovation
- 35. © iovation. All RightsReserved 35 Device-Based Authentication Device-Based Reputation Mobile Multifactor Authentication Optimize the Player Experience Online and offline, risk-appropriate, layered authentication solutions
- 36. © iovation. All RightsReserved 36 Device-Based Authentication Device-Based Reputation Mobile Multifactor Authentication Optimize the Player Experience Online and offline, risk-appropriate, layered authentication solutions
- 37. © iovation. All RightsReserved 37 Device-Based Authentication Device-Based Reputation Mobile Multifactor Authentication Optimize the Player Experience Online and offline, risk-appropriate, layered authentication solutions
- 38. 38© iovation. All RightsReserved Preventing Fraud and Abuse Complying with Regulations Defending the Business Providing An Engaging and Rewarding Experience
- 39. 39© iovation. All RightsReserved Q&A
- 40. © iovation. All RightsReserved 40
- 41. © iovation. All RightsReserved 41
- 42. 42© iovation. All RightsReserved Thank You
Editor's Notes
- Not a new concept 6 years ago TU talked about cookies… Tony Guitar spoke last year about synthetic modeling Continues to evolve… NOT to
- 12 months from July 8, 2019
- This requires a wholistic approach that considers both terrestrial identity and digital identity.
- Functional Areas of Responsibility and Risk There are a number of things that the
- Over time, using multiple devices as a single user, relationships are built on that anonymous online user or “device ID” When a transaction arrives, you’re not just looking at a single device and whether it’s a new or existing one, but you’re looking at the usage of all related devices it’s associated with Is this user doing business in the consortium network? Total devices seen at more than one subscriber – 84 Million Transactions from crossover devices – 2.5 Billion Transactions from crossover devices associated to fraud – 211 Million (8% of transactions from crossover devices) Through these kinds of relationships, even before you have personal information you can get a good sense of whether someone is here to do business with you or not.
- What might be possible if online data, offline data, behavioral data, telephony, reputational and credit histories could be united and carry your transaction beyond an anonymized device? Rather than relying on customers repeating information over and over, rather than increasing the degree of difficulty of online security question tests, what could you do if you could see more – About the device they take everywhere with them to do business with everyone in the world About their payment history About their public records, their registrations and licenses About the address they live at, the SSN they’re claiming as their own, the mobile number you’re SMSing them????
- Bonus abuse was again the number one reported fraud by our gambling clients in 2018. We saw a 68% increase from 2017 to 2018 And In the past 3 years, we’ve seen a rise 287% Many operators are augmenting KYC solutions with predictive analytics.
- We provide a layered approach to managing bonus abuse. Identify potential good customers – our machine learning solution allows you to predict the likelihood that a transaction will become fraudulent. This is very helpful in on boarding because you can decrease barriers for low risk customers and only challenge those where risk is predicted. Known customers – with our device-based authentication you can confidently identify devices associated with known, good customers, and target your promotions to only those accounts Stop repeat offenders – our consortium allows you to report promo abuse and share that with our network of customers. Get alerted to devices that have a history of promo abuse or that are associated with other devices linked to promo abuse Velocities – another way we fight promo abuse is by looking at velocities. If you have a single device that has setup 100 new accounts in an hour, that’s not a normal consumer behavior and likely requires further investigation
- Financial Fraud Over the past 5 years, we’ve seen credit card reports increase 155%, an average annual growth of 39%. Operators are met with the challenge of reducing credit card fraud without increasing false declines, reviews and unnecessary step-ups.
- (ALL GEOS)
- At least 16 separate security breaches occurred at retailers from January 2017 until now. Many of them were caused by flaws in payment systems, either online or in stores. - https://www.businessinsider.com/data-breaches-2018-4 Data breaches were up 45% in 2017, with the flood of stolen credentials and personal data available on the dark web fraudsters are using that data to perpetrate ATO through a variety of tactics. Credential Stuffing - According to Verizon’s 2017 Data Breach Investigations report the number of data breaches involving stolen or weak passwords has gone from 50 per cent to 66 per cent to 81 per cent during the past three years. This alarming trend clearly illustrates that today’s security isn’t working. Source: https://www.cso.com.au/mediareleases/29642/hacked-passwords-cause-81-of-data-breaches/ Social Engineering - Case study on ATO: https://drive.google.com/file/d/1G4C0IqUSTUsIm4oYLk0plsqPbMy7SB7P/view?ts=5b906058 SIM Swapping – Recent
- These solutions go hand in hand
- iovation recently analyzed over half a billion online transactions from our global gambling customers from March 2018 to March 2019 and found that U.S. consumers are trying to bypass system controls to gamble online at a much higher rate than those outside of the use. In our analysis, we saw that 4.13% of online gambling transactions from the U.S., predominantly to European gambling operators, used evasion techniques such as trying to hide their location -- 119% higher than the 1.89% of online gambling transactions from outside of the U.S. which used evasion techniques.
- iovation recently analyzed over half a billion online transactions from our global gambling customers from March 2018 to March 2019 and found that U.S. consumers are trying to bypass system controls to gamble online at a much higher rate than those outside of the use. In our analysis, we saw that 4.13% of online gambling transactions from the U.S., predominantly to European gambling operators, used evasion techniques such as trying to hide their location -- 119% higher than the 1.89% of online gambling transactions from outside of the U.S. which used evasion techniques. Geo Compliance For operators launching apps or online betting in new markets, one of the key regulatory constraints is controlling play based on geographical boundaries without degrading the player experience. Emerging technologies are making these processes much more seamless to manage, right in your native application. Geofencing can be enabled as an authentication constraint directly through your mobile app so that players can place bets in Nevada, for example, but are restricted from betting as soon as they cross the border into Utah.
- Geo Compliance For operators launching apps or online betting in new markets, one of the key regulatory constraints is controlling play based on geographical boundaries without degrading the player experience. Emerging technologies are making these processes much more seamless to manage, right in your native application. Geofencing can be enabled as an authentication constraint directly through your mobile app so that players can place bets in Nevada, for example, but are restricted from betting as soon as they cross the border into Utah.
- Problem gambling In 2018 we saw the U.K. Gambling Commission impose numerous multi-million pound fines on operators for ‘fair gaming’ violations. Of particular concern is managing player self-exclusion (PSE). When players self-exclude on a gambling site that uses iovation, that operator submits a self-exclusion report on that account. We have seen a marked increase in the number of reports from operators in the last 2 years, increasing 73% since 2016. Managing and preventing self-excluded players from creating new accounts and attempting to use your service requires collaboration across the industry. During 2018, over 795,000 devices and nearly a million accounts associated with a self exclusion report attempted to access one or more of the digital properties in our network of iGaming clients — more than four times the number of self-exclusion reports placed in 2018. Even with national databases such as GamStop, being able to associate self-exclusion with multiple devices and accounts, across operators, is a key tool in managing this problem.
- AML These device associations reveal a lot about both good and bad consumers Device intelligence is crucial in preventing money laundering. By looking at device and account associations, you can uncover otherwise hidden connections. Associate groups of devices that are related to one another by looking at common account access.
- Functional Areas of Responsibility and Risk Sources: http://www.sparkhound.com/blog/does-one-password-reset-cost-your-company-7-or-70-every-time-the-password-is iovation
- By implementing ClearKey, you can reduce the overall volume of calls to your call center. Good customers with no risk indicators are automatically authenticated when we recognize their paired device. Allowing them seamless access to low risk transactions such as making a payment, or viewing their statement.
- When customers do need to contact the call center, your agents can push an authentication request straight to their phone. This allows you to quickly sort the fraudsters out from good customers. If the user is authenticated, the agent can proceed with the call and help with higher risk activities such as changing account details. A common ATO target.
- For the highest risk interaction points , such as adding new lines or large purchases of phones, your agent can push an authorization request straight to the users phone. This feature can be used by individual customers or groups. For example for a large corporate account, you could set it up so that any purchase over $500 requires 2 of 3 approvers to proceed. Effectively shutting down ATO attacks on commercial accounts.
- Functional Areas of Responsibility and Risk There are a number of things that the