APRP Fraud Prevention & Detection 4 — Questions and Answers
Question 1: Device fingerprinting in online fraud prevention works by:
- Scanning the physical fingerprint of the cardholder
- Collecting attributes of the browser and device to create a unique identifier (Correct answer)
- Verifying the physical card chip matches issuer records
- Cross-referencing the shipping address with device GPS
Correct answer: Collecting attributes of the browser and device to create a unique identifier
Device fingerprinting aggregates attributes like browser type, OS, screen resolution, and installed fonts to create a unique profile that can be compared across sessions.
Question 2: Which of the following best describes the '3-D Secure 2.0' (3DS2) protocol's improvement over the original 3DS?
- It adds a static password step to all transactions regardless of risk
- It enables risk-based authentication, allowing frictionless flow for low-risk transactions (Correct answer)
- It replaces EMV chip technology for card-present environments
- It eliminates the need for PCI DSS compliance for merchants
Correct answer: It enables risk-based authentication, allowing frictionless flow for low-risk transactions
3DS2 introduces a rich data exchange between merchant and issuer to support risk-based decisioning, enabling frictionless authentication for low-risk transactions.
Question 3: An issuer receives an unusually high number of decline reversals and resubmissions on a single merchant's transactions. This may indicate:
- The merchant is using excessive retry logic, possibly to force through fraud (Correct answer)
- The acquirer's settlement system has a processing error
- The cardholder has opted into a payment installment program
- The interchange category was recently reclassified by the network
Correct answer: The merchant is using excessive retry logic, possibly to force through fraud
Excessive retry patterns on declined transactions can indicate attempts to force fraudulent transactions through or exploit authorization system weaknesses.
Question 4: Which fraud prevention control is specifically designed to verify the physical presence of a card during a transaction?
- Card Verification Value 2 (CVV2)
- EMV chip cryptogram (Correct answer)
- Address Verification Service (AVS)
- Behavioral biometrics
Correct answer: EMV chip cryptogram
The EMV chip generates a dynamic cryptogram per transaction that requires physical chip interaction, confirming the card was present at the terminal.
Question 5: In fraud risk management, 'link analysis' is primarily used to:
- Measure the speed of transaction approvals across networks
- Identify relationships between entities such as accounts, devices, and IP addresses to uncover fraud rings (Correct answer)
- Calculate the probability that a single transaction is fraudulent in isolation
- Audit the compliance of fraud rules against regulatory requirements
Correct answer: Identify relationships between entities such as accounts, devices, and IP addresses to uncover fraud rings
Link analysis maps connections between seemingly unrelated entities, which is critical for discovering organized fraud rings that individual transaction scoring would miss.
Question 6: What is 'authorized push payment' (APP) fraud?
- A fraudster clones an EMV chip to make card-present purchases
- A victim is socially engineered into voluntarily sending a payment to a fraudster's account (Correct answer)
- An acquirer pushes unauthorized refunds to a mule account
- A fraudster exploits stored credentials for recurring billing without authorization
Correct answer: A victim is socially engineered into voluntarily sending a payment to a fraudster's account
APP fraud manipulates victims—often through impersonation or romance scams—into authorizing real-time payments themselves, making recovery very difficult.
Question 7: Which of the following metrics best measures the effectiveness of a fraud detection model in minimizing losses while preserving revenue?
- Total transaction volume processed
- Net fraud loss rate adjusted for false positive impact on approval rate (Correct answer)
- Number of fraud rules in the rule engine
- Average transaction response time in milliseconds
Correct answer: Net fraud loss rate adjusted for false positive impact on approval rate
Effective fraud management balances detected fraud losses against false positive-driven decline losses, making the combined net impact the most meaningful metric.
APRP Fraud Prevention & Detection 4
Device fingerprinting in online fraud prevention works by: