APRP Emerging Payment Risks 4

Question 1

Which emerging risk does 'ghost broking' represent in embedded insurance products bundled with payment cards?

Accepted Answer

Fraudulent intermediaries sell fake insurance policies funded by cardholder interchange

Answer

Ghost broking involves fraudulent intermediaries who collect premiums for insurance policies that are either fake or quickly cancelled after issuance, leaving victims uninsured.

Question 2

In the context of AI-driven payment fraud detection, what is 'model drift' and why is it a risk?

Accepted Answer

Gradual degradation of model accuracy as fraudster behavior evolves away from training data patterns

Answer

Model drift occurs when fraud patterns in production diverge from the patterns the model was trained on, reducing detection accuracy as fraudsters adapt their tactics.

Question 3

A gig economy platform processes instant earnings disbursements to workers via debit card push-to-card. Which risk framework most directly applies to this activity?

Accepted Answer

Mastercard Send and Visa Direct program rules governing push-to-card disbursements

Answer

Push-to-card disbursements via Visa Direct or Mastercard Send are governed by those networks' specific program rules, which set requirements for eligible card types, transaction limits, and originator obligations.

Question 4

What is the primary compliance risk when a payment facilitator (PayFac) onboards sub-merchants without adequate underwriting?

Accepted Answer

The PayFac assumes liability for sub-merchant fraud and chargeback losses exceeding thresholds

Answer

PayFacs are contractually liable to their acquirer for all fraud, chargebacks, and compliance violations of their sub-merchants, making inadequate onboarding underwriting a direct financial and regulatory risk.

Question 5

Which risk does 'SIM swapping' pose to multi-factor authentication used in mobile payment authorization?

Accepted Answer

Attackers gain control of the victim's phone number, intercepting SMS-based OTPs to authorize payments

Answer

SIM swapping transfers a victim's phone number to an attacker-controlled SIM, allowing interception of SMS one-time passwords used as a second authentication factor for payment apps.

APRP - Accredited Payments Risk Professional Practice Test

APRP - Accredited Payments Risk Professional Practice Test

APRP Emerging Payment Risks 4