Falcon 012009


Published on

Published in: Technology, Business

Falcon 012009

  1. 1. Fair Isaac, Falcon Fraud Manager and Debit Card Fraud Ryan Ganji Falcon Product Management Global Fraud Solutions [email_address]
  2. 2. <ul><li>Fair Isaac Overview </li></ul><ul><li>Falcon’s Contribution to Combating Fraud </li></ul><ul><li>Evolving Fraud, Multiple Channels and Sophisticated Fraudsters </li></ul><ul><li>Falcon Fraud Manager Overview </li></ul><ul><li>Protecting Debit with Falcon Fraud Manager </li></ul>© 2008 Fair Isaac Corporation. Confidential. Agenda
  3. 3. We make decisions smarter Fair Isaac is the leader in Enterprise Decision Management powered by advanced analytics #1 in Worldwide Analytic Applications Software Revenue
  4. 4. Among our clients 4000
  5. 5. <ul><li>Fair Isaac Overview </li></ul><ul><li>Falcon’s Contribution to Combating Fraud </li></ul><ul><li>Evolving Fraud, Multiple Channels and Sophisticated Fraudsters </li></ul><ul><li>Falcon Fraud Manager Overview </li></ul><ul><li>Protecting Debit with Falcon Fraud Manager </li></ul>© 2008 Fair Isaac Corporation. Confidential. Agenda
  6. 6. Fair Isaac Fraud Solutions <ul><li>IP and analytic innovation: </li></ul><ul><ul><li>25 fraud patents (including dynamic profiling) - additional 50 patents pending </li></ul></ul><ul><ul><li>New breakthroughs such as adaptive analytics </li></ul></ul><ul><li>Industry collaboration </li></ul><ul><ul><li>Consortium that helps whole industry identify fraud schemes </li></ul></ul><ul><ul><li>Fraud Alert Network to share best practices </li></ul></ul><ul><li>Domain expertise </li></ul><ul><ul><li>16 years helping 4,000+ fraud clients all over the world </li></ul></ul><ul><ul><li>Professional Fraud Consulting Services - more than 20 countries, 6 continents </li></ul></ul><ul><ul><li>Over 100 neural net models distributed in 20 countries </li></ul></ul><ul><ul><li>Proven strength: Reduced card fraud losses by 66% in US from 1992 to 2005 (measured in basis points) </li></ul></ul>
  7. 7. Fair Isaac Card Fraud Solutions <ul><li>Falcon™ Fraud Manager </li></ul><ul><ul><li>Protects over 1.8 billion active accounts worldwide </li></ul></ul><ul><ul><li>Processes approximately 65% of credit card transactions worldwide, 90% in US </li></ul></ul><ul><ul><li>20 of the top 25 financial Institutions worldwide – 9 of the top 10 card issuers in the US </li></ul></ul><ul><ul><li>Provides fraud detection on credit cards, debit cards, deposits, on line activity, application fraud and merchant acquiring </li></ul></ul><ul><li>Card Alert : </li></ul><ul><ul><li>Card Alert analyzes traffic for over 11,000 financial institutions – 400,000 ATMs </li></ul></ul><ul><ul><li>Card Alert monitors 60% of US ATM and PIN POS transactions.  ATM coverage is over 70% and PIN POS is 50%        </li></ul></ul>
  8. 8. Fair Isaac’s Falcon Software Has Contributed To The Industry’s Success Combating Fraud U.S. fraud losses, as a percentage of sales, have declined from a peak level of over 18 basis points in 1992, to 6.25 basis point in 2005 Falcon Introduced Credit Card Fraud Source: Nilson data
  9. 9. <ul><li>Fair Isaac Overview </li></ul><ul><li>Falcon’s Contribution to Combating Fraud </li></ul><ul><li>Evolving Fraud, Multiple Channels and Sophisticated Fraudsters </li></ul><ul><li>Falcon Fraud Manager Overview </li></ul><ul><li>Protecting Debit with Falcon Fraud Manager </li></ul>© 2008 Fair Isaac Corporation. Confidential. Agenda
  10. 10. Fraud’s Four Key Dimensions Deposit Account Securities Loans Criminal Employee Criminal Outsider ATM POS Teller Window Telebanking and Call Center PC Account File Changes Info Gathering Account Debit Account Credit Mail Account Opening Mobile Credit Card Criminals Products Access Methods Activity Customer
  11. 11. Growing Complexity, Changing Risks <ul><li>New sophisticated fraud across channels and lines </li></ul><ul><li>Regulatory mandates for better risk management </li></ul><ul><li>Criminals evolve and organize </li></ul><ul><ul><li>Sophisticated, worldwide criminal organizations </li></ul></ul><ul><ul><li>Frequent pattern changes </li></ul></ul><ul><li>New criminal tools and new channels </li></ul><ul><ul><li>New compromise methods </li></ul></ul><ul><ul><li>New payment types </li></ul></ul><ul><ul><li>Social Engineering </li></ul></ul><ul><ul><li>Internet Attack Bots </li></ul></ul><ul><li>Data breaches / mass compromise a recurring risk </li></ul><ul><li>Lost, stolen, counterfeit cards remain concern </li></ul><ul><li>Check fraud still high </li></ul><ul><ul><li>First-party (deposit) </li></ul></ul><ul><ul><li>Third-party (forgery) </li></ul></ul><ul><li>Insider fraud top of mind </li></ul><ul><li>The next unknown risk </li></ul><ul><li>More Channels </li></ul><ul><li>More Lines of Business </li></ul><ul><li>More Regulations </li></ul><ul><li>More Technology </li></ul><ul><li>More Change </li></ul>
  12. 12. Fair Isaac Protects the Whole Lifecycle Account Opening Account Access Real-time Monitor and Response Suspect Case Management Investigations Recovery Fair Isaac Fraud Solutions Lost and Stolen First Party Identity Theft Flash Fraud Cross-Channel Cross-Line Phishing Employee Collusion Hacking Fraud in New Markets Counterfeit Mass Compromise Premeditated Credit Abuse
  13. 13. <ul><li>Fair Isaac Overview </li></ul><ul><li>Falcon’s Contribution to Combating Fraud </li></ul><ul><li>Evolving Fraud, Multiple Channels and Sophisticated Fraudsters </li></ul><ul><li>Falcon Fraud Manager Overview </li></ul><ul><li>Protecting Debit with Falcon Fraud Manager </li></ul>© 2008 Fair Isaac Corporation. Confidential. Agenda
  14. 14. Fair Isaac Falcon Fraud Manager Solution
  15. 15. Protecting Against Payment Card Losses Sophisticated Analytics Case Management Patented Profiles Rules Management <ul><li>Review, action and document suspicious transactions </li></ul><ul><li>Customizable, user-friendly interface </li></ul><ul><li>Improves operational efficiency </li></ul><ul><li>Establish work queues </li></ul><ul><li>Reporting </li></ul><ul><li>Regional and industry-specific Neural Network models </li></ul><ul><li>Consortium-based models utilize data from billions of transactions </li></ul><ul><li>Adaptive Analytics. Neural Network and Outlier Models </li></ul><ul><li>Trained by specialized fraud scientists with hundreds of man years experience </li></ul><ul><li>Provides customization of solution </li></ul><ul><li>Establish case creation and authorization strategies </li></ul><ul><li>Create real-time without IT involvement through user-friendly interface </li></ul><ul><li>Combat ‘flash fraud’ </li></ul>Falcon ® Fraud Manager <ul><li>Compares historical behavior with recent patterns </li></ul><ul><li>Developed at the cardholder level </li></ul><ul><li>New Profiling: Intelligent and Calibration </li></ul><ul><li>Provides lower false positive rates to minimize impact on good customers </li></ul><ul><li>Multiple profiles provide significant lift: ATM, POS, merchant </li></ul>
  16. 16. Account Holder Profile <ul><li>Falcon Fraud Manager today creates Account Profiles to detect unusual cardholder behavior </li></ul><ul><li>A cardholder profile includes: </li></ul><ul><li>First stage application model output </li></ul><ul><li>Time-based variables illustrating user behaviour over time (e.g. average number of transactions per week) </li></ul><ul><li>Numeric variables indicating volumes. (e.g total spend last day) </li></ul><ul><li>Purchase data (type of goods purchased) </li></ul><ul><li>Ratios and Rates (combinations of inputs to optimise information value, e.g. fraction of cash transactions) </li></ul>
  17. 17. What Makes a Good Fraud Management Solution? <ul><li>Statistical representation of likelihood of fraud </li></ul><ul><ul><li>Rank order risk systematically </li></ul></ul><ul><ul><li>Finely-tuned to your specific operating objectives </li></ul></ul><ul><li>Precise fraud detection, minimizing false-positives </li></ul><ul><li>Flexibility to manage various organizational strategies, constraints, and objectives </li></ul><ul><li>Ability to evaluate fraud risk in relevant time </li></ul><ul><li>Effective fraud management solutions provide: </li></ul><ul><ul><li>Reduced losses </li></ul></ul><ul><ul><li>Increased profitability </li></ul></ul><ul><ul><li>Improved automation </li></ul></ul><ul><ul><li>Enhanced customer service </li></ul></ul><ul><ul><li>Appropriate resource allocation </li></ul></ul>
  18. 18. Benefits of Analytics Focus effort on transactions with highest likelihood of fraud Good transactions Fraud transactions No protection – fraud/good transactions mixed and difficult to identify Rules-based solution - some fraud captured, but much is missed and still lot of good transactions captured as well Analytics-based solution – most of fraud captured, with minimal good transactions
  19. 19. Fraud Accounts Score Higher Score Range Illustrative Score Distribution and Detection Rates Fraud Accounts Non-Fraud Accounts
  20. 20. Falcon Fraud Manager 6.0 The Next Generation Enables Multiple Profiles Per Transaction <ul><li>Falcon 6 will expand Fair Isaac’s patented profiling technology to capture a broader view of debit transactions across lines of business and multiple channels, impacting a customer or their account. </li></ul><ul><li>Intelligent Global Profiling provides substantial performance improvement by profiling not only cardholders, but a wide range of other entities. </li></ul><ul><li>Multiple profiles help detect unusual behavior of other entities in the financial services environment such as ATMs, traditional swipe, POS devices, mobile phones and telecom switches </li></ul>
  21. 21. Multiple Profiles and Fraud Detection – Cont’d <ul><li>Intelligent profiles are “global” because while they are involved in cardholder transactions, they are NOT specific to any cardholder </li></ul><ul><li>Intelligent Profiles enable FFM to detect fraudulent activity that may not look suspicious from the point of cardholder behavior patterns alone. </li></ul><ul><li>These advancements in profiling improve Falcon performance by providing additional transactional views that provide a more complete picture of fraudulent activity. </li></ul>
  22. 22. Profiling Advancements <ul><li>Multiple Profile/UDV Capability </li></ul><ul><ul><li>Falcon 6 will enable the ability to create, read and update multiple profiles per transaction </li></ul></ul><ul><ul><ul><li>Cardholder Profiles </li></ul></ul></ul><ul><ul><ul><li>Customer Profiles </li></ul></ul></ul><ul><ul><ul><li>Global Profiles </li></ul></ul></ul><ul><li>Calibration Profiles </li></ul><ul><ul><li>Tuning parameters for score calibration </li></ul></ul><ul><li>Intelligent Profiles </li></ul><ul><ul><li>Real time concise profiling will allow only high interest entities to be profiled to improve fraud detection </li></ul></ul><ul><ul><li>Scoring on a “global” entity, such as device profiling for debit. </li></ul></ul><ul><li>Shared memory profile support </li></ul><ul><ul><li>Profiles for high interest items (i.e., device profiling) can be held in shared memory to maximize performance </li></ul></ul><ul><ul><li>Provides fast response times to solutions using concise profiles </li></ul></ul>
  23. 23. Patented Profiling System $ $ $ $ * $ $ # $ Falcon Profiling System Deposits Non-monetary Transactions ATM & POS Authorizations Customer Master Changes # Updated Profile To models
  24. 24. Analytic Advancements <ul><li>Adaptive Analytics </li></ul><ul><ul><li>Feedback score that will be powered by fraud and non-fraud decisions. </li></ul></ul><ul><ul><li>Second score that will provide a view of the current transaction risk relative to recent fraud and non-fraud dispositions. </li></ul></ul><ul><ul><li>Secondary score will enable fall back to original Falcon score </li></ul></ul><ul><li>Outlier Models </li></ul><ul><ul><li>Deployment capability </li></ul></ul><ul><ul><li>Outlier models may be useful where sufficient data doesn’t exist for neural network model training </li></ul></ul>
  25. 25. Enterprise Fraud Open Platform Bank Data Warehouse Online Banking & Telephony Access Branch ACH & Wire Transfers Application Originations Credit Card Transactions Channel Models, Rules, Profiles Scoring Module Source Systems Bill Pay Checks On us & Deposits Customer Model, Merchant Model, Rules, Profiles Research Module Modules Control APIs, rules, queues, hotlists Management Module Mobile Payments Fraud Risk Research Analysis & Investigations Debit Card Transactions Third-Party Case Intervention Case Database Case Module Intervention Case Database 3 rd Party Data Third-Party Detection Engine Consortium Outlier Bank Third-Party … Acquirer
  26. 26. <ul><li>Fair Isaac Overview </li></ul><ul><li>Falcon’s Contribution to Combating Fraud </li></ul><ul><li>Evolving Fraud, Multiple Channels and Sophisticated Fraudsters </li></ul><ul><li>Falcon Fraud Manager Overview </li></ul><ul><li>Protecting Debit with Falcon Fraud Manager </li></ul>© 2008 Fair Isaac Corporation. Confidential. Agenda
  27. 27. Falcon Fraud Manager for Debit
  28. 28. Incidence of Debit Fraud Growing INCIDENCE RATES FOR EXISTING CARD FRAUD BY TYPE Source: Javelin Strategy & Research, 2008 Identity Fraud Report
  29. 29. Amount of Debit Fraud Increasing TOTAL ANNUAL FRAUD AMOUNTS FOR EXISTING CARD FRAUD BY TYPE $ Billion Source: Javelin Strategy & Research, 2008 Identity Fraud Report
  30. 30. Today’s Fraud – A Convergence of Threats <ul><li>In today’s challenging risk environment, debit card portfolios are under siege </li></ul><ul><li>Debit cards being used for other fraud scenarios such as Deposit Fraud </li></ul><ul><ul><li>Typically not recognized as a debit card loss (often managed elsewhere in an organization) </li></ul></ul><ul><li>Data security issues </li></ul><ul><li>Consumer behavior – easy to guess PIN #’s, enter PIN into anything mentality </li></ul>Signature- Based POS Fraud PIN-Based POS Fraud ATM Fraud Deposit Fraud VIA Debit Card
  31. 31. Debit PIN Fraud Trends <ul><li>Debit card usage continues to grow and outpace credit card usage </li></ul><ul><li>Increased usage translates to larger opportunities for criminals, resulting in… </li></ul><ul><li>An extremely challenging fraud environment for debit cards and deposit accounts </li></ul><ul><ul><li>Rapid evolution in criminal focus </li></ul></ul><ul><ul><ul><li>Shift in targeted segments: PIN-BASED FRAUD </li></ul></ul></ul><ul><ul><ul><li>Gives criminals opportunity for cash </li></ul></ul></ul><ul><ul><li>Criminals have evolved their methodology </li></ul></ul><ul><ul><ul><li>Increased sophistication resulting in more data acquisition and aggregation </li></ul></ul></ul><ul><ul><ul><ul><li>VoIP phishing, pharming, man in the middle attacks </li></ul></ul></ul></ul><ul><ul><ul><li>Obtaining multiple pieces of customer data from various sources and creating their own data warehouses of stolen identities and information </li></ul></ul></ul><ul><ul><ul><li>Using stolen data faster </li></ul></ul></ul>
  32. 32. Why Debit Fraud? <ul><li>Criminals are targeting DDA accounts via ATM </li></ul><ul><ul><li>No ID or embossing </li></ul></ul><ul><ul><li>No fencing - A $500 ATM withdrawal is less risk than purchasing and fencing a big screen TV for the same reward </li></ul></ul><ul><ul><li>More difficult to identify transactions as fraud </li></ul></ul><ul><ul><li>Credit card fraud less lucrative than in the past </li></ul></ul><ul><ul><li>Bank defenses are not as hardened on DDA </li></ul></ul><ul><ul><li>More channels to target the accounts, and those channels are not as secure </li></ul></ul><ul><ul><li>Few banks have the ability to tie fraud that crosses channels </li></ul></ul><ul><ul><li>“ That’s where the money is.” – Willie Sutton </li></ul></ul>
  33. 33. Debit PIN Fraud Types <ul><li>Compromise fraud </li></ul><ul><li>Family/Friendly fraud </li></ul><ul><li>Lost/Stolen </li></ul><ul><li>Counterfeit </li></ul><ul><li>Bad check deposits </li></ul><ul><li>Electronic Funds ATM Transfer fraud </li></ul><ul><li>PIN-less Bill Pay fraud </li></ul>
  34. 34. PIN Points of Compromise Source: Fair Isaac CardAlert Fraud Manager PIN Points of Compromise 2001-2007 0% 10% 20% 30% 40% 50% 60% 70% 80% 90% 100% 2001 2002 2003 2004 2005 2006 2007 ATM-Bank ATM -NonBank POS
  35. 35. POS Compromises <ul><li>PIN POS terminals and pay at the pump </li></ul><ul><li>Skimmer wired inside the POS terminal, attack is 5 years old, some wireless transmitters and video cameras </li></ul><ul><li>PIN compromised prior to encryption </li></ul><ul><li>Transaction goes through the system </li></ul><ul><li>Takes about a minute to swap out terminal </li></ul><ul><li>Los Angeles criminal group sending tiger teams out to PA, DE, NC, NV, CA, RI, WA, FL, OR </li></ul><ul><li>Recent EPP and PED POS standards limit this type attack, however these devices will remain with us for several more years </li></ul>
  36. 36. 2007 POS Points of Compromise
  37. 37. ATM Compromises <ul><li>EPP is forcing criminals to capture PINS on the other side of the PIN pad </li></ul><ul><li>Euro criminals have always had to deal with FI ATMs </li></ul><ul><li>Chip & PIN = cross border fraud + card not present </li></ul><ul><li>ATMs compromised for unencrypted card track information only </li></ul><ul><li>Combining card track breaches with alternative PIN capture </li></ul><ul><ul><li>Phishing </li></ul></ul><ul><ul><li>Online banking </li></ul></ul><ul><ul><li>IVR </li></ul></ul><ul><li>Hardware solutions </li></ul>
  38. 38. ATM Points of Compromise Source: Fair Isaac CardAlert Fraud Manager
  39. 39. 2007 FI ATM Points of Compromise
  40. 40. ATM/POS Profiling <ul><li>Profiling cardholder and device provides complete profile picture for a transaction </li></ul><ul><li>Looks for unusual device behavior </li></ul><ul><ul><li>Large amounts </li></ul></ul><ul><ul><li>Rapid transactions </li></ul></ul><ul><ul><li>Suspicious patterns of transaction types </li></ul></ul><ul><li>Many patterns involve multiple cards that are best detected by device profiling </li></ul><ul><li>Strongly predictive variables can be created </li></ul><ul><li>Device score can be combined with an account score to improve fraud detection </li></ul>
  41. 41. Predictive Lift from Device Profiling 80% relative performance lift in real-time value detection at a 10-to-1 false positive rate for Debit Cash Transactions Cardholder + ATM Profiles Cardholder Profiles
  42. 42. Predictive Lift from Merchant Profiles 40% relative performance lift in real-time value detection at a 10-to-1 false positive rate Cardholder + Merchant Profiles Cardholder Profiles
  43. 43. Conclusions
  44. 44. Falcon ® Fraud Manager Reduces Fraud Losses <ul><li>Fraud is a major problem worldwide </li></ul><ul><li>Increased variety and use of cards is accompanied by more sophisticated fraud methodologies </li></ul><ul><li>Financial institutions must deploy an effective fraud management system to stay competitive </li></ul>
  45. 45. Falcon ® Fraud Manager Reduces Fraud Losses <ul><li>A neural network-based fraud management system provides maximum protection against fraud losses. </li></ul><ul><li>Falcon Fraud Manager from Fair Isaac has helped the leading financial institutions minimize fraud losses through sophisticated profiles , advanced modeling , and comprehensive case management capabilities </li></ul>
  46. 46. Working Together <ul><li>Fair Isaac is committed to working with our clients in new and innovative ways </li></ul><ul><li>Our commitment to you: </li></ul><ul><ul><li>We will innovate and collaborate with you </li></ul></ul><ul><ul><li>We will execute with integrity in all of our dealings with you </li></ul></ul><ul><ul><li>We will deliver high performance, delivering on our promises </li></ul></ul><ul><li>Our requests of you: </li></ul><ul><ul><li>We ask that you join us in our efforts to innovate and collaborate with you: </li></ul></ul><ul><ul><ul><li>Participate with us in crafting solutions and contributing data to better meet your needs </li></ul></ul></ul><ul><ul><ul><li>Participate as early adopters of our new and innovative solutions – in software and analytics </li></ul></ul></ul>
  47. 47. THANK YOU