Protecting Your Business From Loyalty Fraud

Today, businesses are realising that a top-notch customer experience is the key to staying one step ahead in a highly competitive market. Enterprises are investing in loyalty schemes to elevate the online shopping experience for their most valued customers.

Unfortunately, fraud rings have shifted towards account-based vulnerabilities and target loyalty schemes through sophisticated fraudulent techniques. Not only that, but individual customers and internal staff can also exploit loyalty schemes and commit fraud, according to Signifyd’s ecommerce data report. We explore how to protect your business from loyalty fraud to reduce both brand reputation and customer relationship damage.

What is loyalty fraud?

Businesses all over the world are investing in schemes intended to reward their valued customers and increase brand loyalty. Merchants, airlines, and hotel chains are the organisations that are employing this technique the most. American Airlines’ loyalty program, for example, can be valued “anywhere from$18 billion to $30 billion,” says CFO Derek Kerr.

Loyalty points are equivalent to currency, as they can be used to make financial transactions, and that’s what makes them appealing to fraudsters. They engage in excessive or fraudulent reward points redemption for unfair gain, which is considered loyalty fraud.

Nevertheless, loyalty fraud often remains overlooked by retailers. Loyalty points can easily be exchanged on the dark web, as there is minimal communication between the seller and the buyer, or they can be exchanged for gift cards, which can easily be converted to cash on many marketplaces. Another reason why there is an increase in loyalty fraud is that loyalty programs are far less scrutinised by their account holders because they don’t see them as high risk.

The pandemic gave even more rise to loyalty fraud as neglected loyalty program accounts are an easy target for fraudsters. People were using their miles significantly less to travel by air. The flight market revenue reduced from around £18 billion to around £5.1 billion between 2019 and 2020 in the UK. Although it’s slowly recovering, it will take a while until it reaches pre-pandemic levels, and loyalty fraud will still be an issue. Similarly, consumer spending on hotels and restaurants in the UK decreased by 42% between 2019 and 2020.

Types of loyalty fraud

The three most common types of loyalty fraud include account takeover, internal fraud, and customer fraud.

Account takeover

Account takeover or ATO as it’s more commonly known as a type of fraud that both retailers and customers have been battling for years. It involves stealing account holder credentials through a data breach, malware, or phishing, and using them to make unauthorised transactions or loyalty points redemptions.

During the pandemic, fraudsters became even more innovative in terms of their social engineering tactics, and they have come up with new methods to directly target consumers with the aim of stealing their personally identifiable information, according to a study by Javelin Strategy & Research.

Internal fraud

Employees can also commit loyalty fraud by exploiting their ‘insider’ privileges against the terms and conditions or the IT Systems of the loyalty program. They may manipulate customers’ details steal unclaimed points, add extra points to their balances, or encourage customers to sign up for the program.

Customer fraud

This type of fraud occurs when a customer finds a loophole or a hack to exploit the system for personal gain. For example, they can sell or transfer points illegally, claim air miles twice for a shared-revenue ticket, or create multiple accounts to earn more points.

How to protect your business from loyalty fraud

The risk from loyalty fraud is real for both businesses and customers. Thankfully, there are preventative measures that can be taken to stop loyalty fraud in its tracks before negative consequences occur, such as hard costs or damaged reputation and relationships.

· Keep informed about the latest loyalty fraud methods to be able to mitigate the action quickly.

· Regularly examine your loyalty program for potential loopholes.

· Always notify account holders if a data breach occurs and instruct them to carefully check their accounts.

· Limit employee access to the loyalty program data as much as you can.

· Strengthen account access security by implementing multi-factor authentication.

· Invest in a fraud-protection solution that uses machine learning and automation to prevent account fraud while providing a frictionless customer experience.

With the rise of loyalty programs comes the rise of loyalty fraud that aims to exploit customer details for personal gain. Thankfully, with awareness about the various preventative measures, loyalty fraud can be minimised, and businesses can continue rewarding their valued customers.

Sources

https://www.forbes.com/sites/willhorton1/2020/05/20/aadvantage-miles-will-soon-be-government-collateral-as-american-airlines-pledges-frequent-flyer-program-for-coronavirus-loan/?sh=66f08b8678f8

https://thewisemarketer.com/data-and-privacy/48-trillion-reasons-loyalty-fraud-is-on-the-rise/

https://www.statista.com/forecasts/518759/revenue-in-the-flights-market-in-the-united-kingdom

https://www.statista.com/statistics/476625/restaurant-and-hotels-consumer-spending-uk/

https://www.javelinstrategy.com/press-release/total-identity-fraud-losses-soar-56-billion-2020

Homepage – DC360 Promo – November 2023

Ed Whitehead

managing director of EMEA for Signifyd

How Predictive AI is Helping the Energy Sector

Colin Gault head of product at POWWR • 29th April 2024

In the past year or so, we have seen the emergence of many new and exciting applications for predictive AI in the energy industry to better maintain and optimise energy assets. In fact, the advances in the technology have been nothing short of rapid. The challenge, though, has been in supplying the ‘right’ data to...

How Predictive AI is Helping the Energy Sector

Colin Gault head of product at POWWR • 29th April 2024

In the past year or so, we have seen the emergence of many new and exciting applications for predictive AI in the energy industry to better maintain and optimise energy assets. In fact, the advances in the technology have been nothing short of rapid. The challenge, though, has been in supplying the ‘right’ data to...

Cheltenham MSP is first official local cyber advisor

Neil Smith Managing Director of ReformIT • 23rd April 2024

ReformIT, a Managed IT Service and Security provider (MSP) based in the UK’s cyber-capital, Cheltenham, has become the first MSP in the local area to be accredited as both a Cyber Advisor and a Cyber Essentials Certification Body. The Cyber Advisor scheme was launched by the Government’s official National Cyber Security Centre (NCSC) and the...

How we’re modernising BT’s UK Portfolio Businesses

Faisal Mahomed • 23rd April 2024

Nowhere is the move to a digitised society more pronounced than the evolution from the traditional phone box to our innovative digital street units. Payphone usage has dropped massively since the late 1990s/2000s, with devices and smart phones replacing not only communication access, but the central community points that the payphones once stood for. Our...

How we’re modernising BT’s UK Portfolio Businesses

Faisal Mahomed • 23rd April 2024

Nowhere is the move to a digitised society more pronounced than the evolution from the traditional phone box to our innovative digital street units. Payphone usage has dropped massively since the late 1990s/2000s, with devices and smart phones replacing not only communication access, but the central community points that the payphones once stood for. Our...

What is a User Journey

Erin Lanahan • 19th April 2024

User journey mapping is the compass guiding businesses to customer-centric success. By meticulously tracing the steps users take when interacting with products or services, businesses gain profound insights into user needs and behaviors. Understanding users’ emotions and preferences at each touchpoint enables the creation of tailored experiences that resonate deeply. Through strategic segmentation, persona-driven design,...

From Shadow IT to Shadow AI

Mark Molyneux • 16th April 2024

Mark Molyneux, EMEA CTO from Cohesity, explains the challenges this development brings with it and why, despite all the enthusiasm, companies should not repeat old mistakes from the early cloud era.

Fixing the Public Sector IT Debacle

Mark Grindey • 11th April 2024

Public sector IT services are no longer fit for purpose. Constant security breaches. Unacceptable downtime. Endemic over-spending. Delays in vital service innovation that would reduce costs and improve citizen experience.