Identity & Fraud
Ways Experian is helping reduce fraud and protect consumers
To combat a growing threat that’s expected to drive $48 billion in annual online payment fraud losses by 20231, Experian® has announced the launch of Sure Profile™. Experian is the first company with an offering to combat synthetic identity fraud that is integrated into the credit profile with market-leading assurance. We are proud to be the first in our industry to actually put “skin-in-the-game” by sharing in fraud losses with our clients if the losses occur on assured profiles. Experian’s new offering validates consumer identities, detects profiles that have an increased risk for synthetic identity fraud and helps cover losses resulting from synthetic identity fraud for assured profiles. Leveraging the capabilities of the Experian Ascend Identity Platform™, Sure Profile utilizes Experian’s industry-leading data assets and data quality to drive advanced analytics that set a higher level of protection for lenders. Powered by newly developed machine learning and AI models, Sure Profile offers lenders a streamlined approach to define and detect synthetic identities early in the originations process. Experian’s Sure Profile differentiates between real people and potentially risky applicants, so lenders can confidently increase application approvals with less risk. We expect to authenticate most credit applications through Sure Profile. In the cases where the identity can’t be assured, the company will deliver additional fraud risk indicators, so that lenders can take the right next steps to verify the potential borrower’s identity and prevent fraud. To date, detecting synthetic identities has been a significant challenge for lenders because there’s not an industry standard or a single definition that can be used to establish the legitimacy of an identity. In addition, understanding the financial impact of synthetics has been difficult for lenders as losses tied to synthetic identity fraud are typically categorized as defaults or “bad debt.” With Sure Profile, we are reinforcing our position as a leader by creating a standard set of criteria to define a synthetic identity. Experian has always been a leader in combatting fraud, and with Sure Profile, we’re proud to deliver an industry-first fraud offering integrated into the credit profile that mitigates lender losses while protecting millions of consumers’ identities. Our investments in innovation, AI and machine learning and our data quality are enabling us to lead the way in identity protection and help protect consumers and lenders alike.
As the COVID-19 pandemic continues to disrupt lives across the globe, fraudsters continue to take advantage of the vulnerable situation. The opportunistic nature of fraudsters means that times of crisis and pandemics open up additional breeding grounds for fraud and identity theft. Our latest CrossCore® release has never been more relevant for businesses than right now. Confidently recognizing consumers and safeguarding digital transactions is always a difficult balance – but now more critical than ever. With CrossCore, businesses can limit fraud losses and reduce unnecessary customer friction, at a time when safe and convenient access to financial services is essential. This new version of CrossCore, our integrated digital identity and fraud risk platform, combines risk-based authentication, identity proofing, and fraud detection into a single, cloud-based platform. This means that businesses have the capabilities and technology they need to rapidly respond to an ever-changing environment. With flexible decisioning orchestration, advanced analytics, and pre-integrated identity and fraud services, businesses can make real-time risk decisions throughout the customer lifecycle. And they can do all of this through simple self-service. We know there’s no silver bullet when it comes to fighting fraud, which is why we continue to develop our curated partner ecosystem. This gives companies access to all the technology and capabilities they need, in one place – whether it be Experian’s, our partners’, or their own. We combine this with advanced analytics and our own rich data assets plus a built-in strategy design and enhanced workflow giving fraud and compliance teams more control to adjust strategies based on evolving threats. This helps improve efficiency and reduce operational costs. Updates to the new version include the ability for clients to submit dynamic API request payloads, apply progressive risk assessments, apply parallel logic, enable self-service workflow configurations, and provide an online business intelligence (BI) module to view transactional volume reports. These updates will give CrossCore users a simpler way to manage complex orchestration; faster more scalable performance; and key performance indicators in near real-time, all while enabling a personalized and seamless experience for their true customers. More than 250 clients worldwide use CrossCore today, including capabilities from our third-party partners. To start leveraging best-in-class, pre-integrated identity and fraud services through simple self-service learn more about the Experian CrossCore platform.
Explore Experian’s insights for customer identity and its interrelationship with security, convenience, and personalization, from consumers and businesses Businesses often talk about creating the ultimate digital experience for customers but far less about the interrelationship between security, convenience, and personalization. This results in siloed security measures at major decision points across the customer journey. And, it’s a disconnect that’s perpetuated through equally siloed CRM systems that strive to identify customer preferences but fail to do so in a consistent and appealing way. The impact on consumers is that they are dragged through a maze of security and risk protocols while at the same time being targeted or re-targeted products and services that are not always relevant. We challenged senior executives at 650 companies to think about whether they can accurately identify their customers and meet their customers’ needs for a relevant experience to not only help them create a more trusted relationship with a consumer but also to reduce fraud losses. We also surveyed over 6,500 consumers who had a lot to say about what constitutes best-in-class digital customer experience. Perception versus reality Our study found that 95% of businesses worldwide believe they are accurately identifying their customers yet 55% of consumers don’t feel recognized. In our survey last year, 84% of businesses said that if they could better identify their customers, then they could easily spot fraud. However, 57% of business reported having significantly higher fraud losses this year versus last year. How can this be true if businesses are in fact as strong as they believe they are at recognizing their customers and thus, presumably by extension, fraudsters? This then begs the question: how are businesses defining “recognition” and is it really working? Are they recognizing a customer to a person or are they able to categorize a customer into prescriptive buckets such as broad demographic delineations? Expectations for customer engagement Our study also found that 74% of consumers say security is still the most important factor when deciding to engage with a business online. This has been a consistent finding over the past two years. In fact, consumers are even willing to give more personal information for greater security and easier access to their accounts later, once they are comfortable. Despite this, over half of businesses are prioritizing personalization over security when making improvements to their customer experience. Consumers acknowledged experiencing and appreciating the changes businesses are making to their digital experience however security remained to be their most important criteria for engaging or continuing to engage with a business. What now? Desires for ultimate experience and concerns for security are still shaping the digital relationship between consumers and businesses where identity is at the heart of every customer decision and interaction. We believe businesses will need to invest further in data, infrastructure, and advanced analytics in order to get to a point of truly recognizing a consumer digitally as opposed to categorizing for broad brush pseudo personalization purposes. Only then will businesses start to make a dent in fulfilling the high consumer expectations for recognition as well as in mitigating rising fraud. Download our report (15 min read) and find out more about: Challenges standing in the way of businesses trying to identify their customers What different businesses and countries are doing to improve identity authentication The new type of customer journey that executives believe will improve the digital experience
Today (Nov. 11) Americans celebrate Veterans Day to honor all of the men and women who have served our country in uniform and to thank those who are currently serving around the world. We also take time to welcome a new generation of veterans home from war. We remember our Gold Star families who have endured the loss of a family member making the ultimate sacrifice in service to their country. More than 25 million veterans are now home in America. They are our friends, our families, and our loved ones. Far too many have endured the shock and pain of a combat deployment, some have become disabled, and many have made the ultimate sacrifice. All who have served have given up some of themselves as well as some of the best years of their lives. Experian is proud to embrace our veteran community and allow the flexibility for our coworkers who continue to serve. Our Military, Veterans And Patriots Employee Resource Group continues to be involved in many opportunities across our local communities from building wheelchair ramps for disabled veterans to participating in endurance challenges such as Carry the Load National Relay road march and the Murph Challenge. We recently launched Experian IDnotify, a credit and identity protection service, at no cost for those who are on active duty. We are committed to serving those who are serving us. If you have a family member or friend serving on active duty, please share the link. This Veterans Day let us take a moment to remember the sacrifices of the courageous men and women who heroically fought for the freedom and honor of America to make it the greatest nation on earth!
Eva lets out a deeply frustrated exhale as she navigates moving boxes in her new apartment towards a nearby chair. She was just trying to update her address online and take care of some online banking money transfers. Now her accounts are frozen, and she has received a message to call the bank\'s fraud department. How could she be a fraudster? She was only guilty of taking a job and moving to Chicago. Maybe it\'s time to start thinking about changing banks... Meanwhile, in the bank\'s Texas-based fraud department, Robert spots Eva\'s case in his fraud investigations list. He noticed some suspicious activities and leaves Eva a voicemail, wanting to ask her a few questions to verify her identity or otherwise confirm this is in fact a fraudster infiltrating Eva\'s account. To prevent this potential risk of fraud from escalating, Robert decides it is better to freeze Eva\'s accounts while he confirms that it\'s actually Eva who is trying to change her address and not a fraudster using a stolen password. As both Robert and Eva work to connect and clear up this mix-up, Robert isn\'t getting to spend his time finding actual fraud and protecting his bank from any potential losses. Fraud hubs bring together advanced authentication technology and risk mitigation systems into a single platform As fraud attacks grow more frequent and complex, new technologies have sprung up to help meet the challenge, using a variety of tactics and tools to detect fraud. This is the case of device recognition, malware detection, identity verification, behavioural biometrics, and document verification, just to name a few. Regardless of their choice of tools and techniques, businesses across banking, retail, telecommunications, healthcare, and services industries need to know that the person interacting with them online is who they say they are. Combating fraud with layered tools strengthens businesses\' defenses. But without an intelligent approach to connecting those tools, businesses catch too many good customers (like Eva) in their fraud-mitigation nets. By bringing together different types of fraud mitigation and risk management systems on a single technology platform, fraud hubs provide a solid solution to this challenge. How do fraud hubs like CrossCore help both businesses and consumers? CrossCore brings together into a single platform best-in-class tools and services such as advanced analytics, data consortium, device recognition, endpoint malware, and bot detection, behavioural biometrics, and document verification. Experian has also been named by Gartner as a representative vendor in online fraud detection in their April 2019 Market Guide for Online Fraud Detection, for its CrossCore solution.* Our flagship identity and fraud hub connects various functionalities together in a smart, orchestrated way, leveraging machine learning-driven decisioning to deliver a single fraud decision across multiple tools and enabling businesses worldwide to improve their fraud detection capabilities. CrossCore equips businesses with the most applicable tools to combat the specific fraud threats they face in their organisation. The 100 million cumulative transactions we have run on CrossCore to date show us that while one client may need additional protection against synthetic identity fraud, another may face frequent bot attacks in their account opening application, therefore requiring different approaches. It also means that if one tool can\'t validate a user\'s identity, another system can provide evidence that this is, in fact, a real customer. It\'s precisely the advanced analytics underpinning data modeling what gives our clients greater confidence in their identity and fraud decisions. But let\'s go back to Eva. In her case, CrossCore\'s fraud risk engine would have fired rules when she was making a change of address, as this action elevates the potential for fraud. But CrossCore\'s device intelligence would have shown that Eva was logging in from a known mobile phone. She was also using her phone to type information in a way that a normal user (non-fraudster) would do. In that case, CrossCore would have asked for a step-up authentication where Eva is prompted to take a selfie for biometric authentication. Now, Eva can continue to do her banking and access her accounts as she would normally do. This is a relief as Eva checks off more moving-related tasks and can enjoy her new life in a new city. Back in the bank\'s fraud investigation office, Robert and his colleagues would have never seen a case for their customer, Eva. Instead, they would have been able to focus their energies on high-risk cases, mitigating any emerging fraud threats. They would have also treated Eva as the good, valued customer she is and helped ensure her business in the long run. Whether it\'s an automotive client in South Africa, a healthcare organisation in the U.S., an insurance company in the UK, a fintech in Australia or a bank in Brazil, CrossCore is helping to solve one of the greatest challenges in decision analytics today: identifying good customers, while reducing fraud. Download the 2019 Global Identity & Fraud Report. *Gartner does not endorse any vendor, product or service depicted in its research publications, and does not advise technology users to select only those vendors with the highest ratings or other designation. Gartner research publications consist of the opinions of Gartner\'s research organization and should not be construed as statements of fact. Gartner disclaims all warranties, express or implied, with respect to this research, including any warranties of merchantability or fitness for a particular purpose.
Phishing attacks have become more sophisticated and personal. We are all busy with life – work, family, commute, and dinner plans, along with keeping up on the latest news cycle. Virtually anyone could be inclined to quickly click on a link stating there is an issue with their recent order. But there\'s more to phishing attacks than just baiting businesses and consumers. During a recent #ExperianLive event, Mike Gross, Head of Global Identity and Fraud Product Innovation, discussed what businesses can do to protect themselves and their customers. Q: You say that phishers would make good digital marketers. What do you mean by that? Mike: Like a great marketer, a good phisher understands people and their tendencies; they know how to get people to take action on their message. Take my most recent “almost phishing\" incident. During the holidays, I received an email from a top online retailer stating there was a “problem with my recent order.\" I knew that any delay would jeopardize my holiday gift delivery. I was just about to click the “Login\" button and then stopped. Thankfully, I double-checked the sender and it wasn\'t my favorite shopping site after all – just a really good fake email from a \"phishy\" sender. Like a digital marketer, phishers understand how to specifically target the things that people care about. This is why phishing attempts focused around the holidays, tax season, natural disasters, and hot news topics are often so successful. Q: Are phishers counting on the relationship and roles people have in an organization? Mike: Yes. That\'s the whole nature behind one of the biggest phishing attacks over the past several years – business email compromises. As a phisher, I\'m sending you an email that looks like I work with you, say a vendor with a message that reads, “I changed the account that you use to pay me; please update your payment to this new account.\" If there is urgency behind it, it is taken seriously - for example, to avoid being late on paying a vendor. Human nature is being helpful and reacting, especially in this fast-paced, hyper-connected world – and that\'s why these scams continue to work. Q: What other phishing trends are you seeing? Mike: They\'ve evolved over time. Take the simple phishing email; it\'s not so simple anymore. Nowadays, attacks are personalized to both the business and specific person – and phishers are taking advantage of automation and targeting tools so they can get the most reward for their effort. “Smishing\" is variant of phishing focused on the phone channel, where attackers target victims with an SMS-based attack; you\'ve probably seen them. You get a text and link from what you think is your friend saying something like “Check out this funny video!\" But it isn\'t legitimate; it\'s a fraudster that is spoofing your friend\'s phone number. Then there is “vishing\" which is a voice-based attack. This is where a fraudster pretends to be someone they\'re not (like a consumer\'s financial institution) and tries to obtain personal information or take over an existing account. Q: Wow! Phishing fraud is sophisticated. What has led to that? Mike: We\'ve seen a tremendous leap in technology used. There is a great example of that last year with a U.K. bank. Their customers expect that if there is an out-of-place transaction, the bank will call them. In this particular vishing scheme, vishers used compromised accountholder usernames and passwords to log into customer accounts and set up money transfers. Knowing that this would alert accountholders to the attempted transfer using the SMS one-time passcode, phishers called legitimate customers, impersonated the bank, and stated that since the customer was a recent fraud attack victim, the bank needed confirmation that they were the accountholder. The vishers told customers they would receive a passcode. While the customer confirmed the code, the vishers submitted the fraudulent transfer. Q: What trends and techniques are you seeing? Mike: Two of the big trends we\'re seeing is around Artificial Intelligence (AI), machine learning, and SMS to find victims. A big part of phishing is what we call “spear phishing.\" This targets individuals with access to an organization\'s financial accounts or internal systems. Another term is “whaling\" which targets a specific high-profile individual. The phishers are no longer just sending out blanket lottery scam and Nigerian prince emails with misspellings to millions of people. It\'s very focused – and phishers can easily do this using machine learning and AI. Q: Do you notice any seasonality, or spikes in phishing based on a certain time of year? Mike: The holidays are one because so many people go to their favorite shopping sites and buy items that are completely out of pattern based on what they usually do online. Another good example is tax season. We saw phishers impersonate top tax and financial management software providers, allowing consumers to “quickly and easily submit their tax forms online.\" What\'s worse is that phishers use the knowledge you have about phishing against you. Things like “How do you protect yourself? Click on this link to learn more\" or “Click this link to download software and protect your devices.\" Also, fraudsters pay attention to the news, so whether it\'s a natural disaster or the cathedral fire that happened in Paris last April, phishers see those as opportunities to prey on victims simply trying to donate to a worthy cause. Q: What advice do you have for businesses and consumers to protect themselves against phishing attacks? Mike: My advice for businesses is to focus on technology and training. Strong technology solutions must be in place at all businesses to block phishing emails that are coming from suspicious sites – and for the most part, large organizations do a great job of that. Smaller businesses can also take advantage of technology solutions from their internet providers. Businesses can implement web blocking software for less secure Internet sites and filter what types of content employees can have access to on business devices. A lot of companies hire outside consultants to talk about the different types of phishing attacks with employees. These are helpful, but the key is to not allow training to become static because attackers evolve so quickly. Both businesses and consumers can use the email filtering option that is available through nearly every email provider. Don\'t click on any attachments that even remotely look suspicious - especially if they\'ve been texted to you from someone you either don\'t know or the message appears out of character for someone you know. Q: What activities is your group taking on that will help businesses and their customers fight phishing attacks? Mike: There are several things we\'re doing that impact businesses and consumers offline and digitally. We help businesses recognize their customers and authenticate them, whether that\'s helping customers with a new bank account, enabling easy checkout at a favorite retailer app, or protecting account logins. 99% of people trying to access accounts are the legitimate account holder; it\'s that 1% though that causes a lot of friction for good customers. So, we\'re trying to make it easier for those consumers to quickly pass through all of the controls so authentication is easier. That translates into consumer loyalty for brands. Q: And that\'s what it\'s really all about? Mike: It is. We help businesses recognize their customers and also ensure that they are catching fraudsters on the back end. But we also strive to make that recognition or user experience as seamless as possible, with the right scrutiny for the risk level of that business. Mike Gross leads product innovation strategy for Global Identity and Fraud at Experian. Check out the entire podcast and video on how to protect your business from phishing here.
Across the globe, fraud risks continue to grow and businesses continue to invest more to combat potential threats. According to Experian\'s 2019 Global Fraud and Identity Report, which was published this past January, more than half of businesses across the world have increased their fraud management budget in the past twelve months. I recently had the opportunity to discuss this very topic with Forbes.com. In the article I raised the issue of whether businesses are investing in the right places. Our research shows that businesses may sometimes be investing in the wrong capabilities or point solutions that are materially less effective than if they were to take a layered approach to fraud detection. To provide consumers with both security and convenient online experiences, companies must have a complete understanding by looking at the problem holistically. By layering multiple approaches such as digital risk assessments leveraging device intelligence, behavioural biometrics together with more traditional measures – businesses can focus their resources where it matters most – providing a safe yet convenient online environment for their customers. The Forbes article also looked at the issue of trust. The anonymous nature of digital interactions makes creating trusted and meaningful relationships with digital consumers difficult. Unlike face-to-face interactions where people rely on visual cues, and relationships developed over time, businesses must find other ways to quickly recognize their customers online and deliver personalized experiences. At Experian, we believe trust is extremely important. In fact, the report found that nearly eighty percent of consumers say the more transparent a business is about the use of their information, the greater trust they have in that business. And fifty-six percent of businesses plan to invest more in transparency-inspired programs such as educating consumers, communicating terms more concisely and helping consumers be in control of their data. There is no doubt about it, businesses who want to continue to thrive and lead in the digital economy will find ways to offer their customers both security and convenience whilst building trust with their audience. Learn more the state of fraud and how trust plays a role by downloading our 2019 report: Consumer trust: Building meaningful relationships online.
Fraud attacks continue to increase, and businesses and consumers alike are recognizing the need for more effective preventative measures. In June 2016, we launched the industry’s first open platform designed to catch fraud faster, improve compliance, and enhance the customer experience. Experian CrossCoreTM has put more control in the hands of fraud teams and it continues to receive global recognition for its impact in the industry. We are proud to announce that CrossCoreTM has been named a market leader for fraud prevention by Cyber Defense Magazine’s 7th Annual InfoSec Awards. Judged by an independent panel of certified security professionals, the InfoSec Awards recognize the best ideas, products and services in the information technology industry. In the past year, the platform was also named best fraud prevention innovation by Cybersecurity Breakthrough and as best cybersecurity initiative of the year by CIR Magazine. Since 2016, Experian has been proud to serve organizations looking for better ways to get more out of their existing fraud and identity systems and to more effectively deploy new products and offers, while improving the customer experience and minimizing risk. According to Experian’s 2019 Global Identity & Fraud Report, 55% of businesses reported an increase in online fraud-related losses over the past 12 months, predominantly around account origination and account takeover attacks. Our study shows that consumers value security and convenience. They also expect to be recognized and met with a personalized experience. Businesses can deliver both security and convenience, but to do so, they need to apply the right tools and relevant information. CrossCoreTM is helping fraud teams around the world accomplish this by adapting and deploying strategies that keep up with the pace of fraud while reducing burdens on IT and data science teams. Learn more about CrossCore.
Digital commerce has changed the way consumers interact with businesses. More people are transacting online versus going into retail stores, and more than half of banking is done via mobile channels. Yet both businesses and consumers still want convenience and security, without increased fraud risk. And as interactions have become more anonymous in an online space, trust is based on businesses protecting consumers from fraud while still providing a great customer experience. So, what does it take to build trusted relationships online? New research from our 2019 Global Identity and Fraud Report shows that 74% of consumers see security as the most important element of their online experience, followed by convenience. In the past, businesses have often invested in one at the expense of the other, and our research suggests that consumers can expect both security and convenience without the trade-off. The availability of information consumers share with businesses make this possible, and consumers are willing to share more personal information if they believe it means greater online security and convenience. In fact, our research found that 70 percent of consumers are willing to share more personal data, particularly when they see a benefit. However, this value exchange of more personal information for a better online experience is the same information that puts consumers at a greater risk for fraud. Instead, businesses need to demand more from the information they already have access to and use more sophisticated authentication strategies and advanced technologies to better identify their customers and deliver tailored, streamlined experiences without increasing their risk exposure. Findings from the study reveal that consumers and business leaders agree that security methods enabled by new technologies and advanced authentication methods instill online trust. In fact, consumer confidence grew from 43 percent to 74 percent when physical biometrics was used to protect their accounts. The report also found that businesses are beginning to embrace the changing technology, while half of organizations globally reported an increase in their fraud management budget over the past twelve months. And lastly, the report looked at transparency and how that impacts consumer trust. In order to create even more trust online, many businesses are proactively sharing with customers how they use their personal information. The report found that nearly 80 percent of consumers say the more transparent a business is about the use of their information, the greater trust they have in that business. And the good news is that 56 percent of businesses plan to invest more in transparency-inspired programs such as – consumer education, communicating terms more concisely, and helping consumers feel in control of their personal data. Fraud remains a constant threat and it should come as no surprise that nearly 60 percent of consumers worldwide have experienced online fraud at some point. However, both business and consumers are getting smarter about how they manage fraud and it comes down to the important theme of trust. In order for consumers to trust businesses, they need to feel secure. And by adopting better security measures, businesses can embrace the important role of protecting customers and giving them the experience they want and deserve. Download the new Experian 2019 Fraud & Identity report here.