Fraud prevention for transactions

摘要

Methods, systems, and apparatus include computer programs encoded on a computer-readable storage medium, and include a method for fraud prevention. A method includes receiving registration information for a user, including identities of the user and an authenticating device and a payment source identifier, and storing the registration information. A payment authorization request relating to a transaction purported to be by the user and including the payment source identifier is received. Using the payment source identifier, the identity of the user and the authenticating device is retrieved. A communication is provided to the user including transaction information. The message is delivered to the user at the authenticating device. The method also includes receiving (and subsequently forwarding) either a payment authorization or a payment repudiation responsive to the communication from the user by way of the authenticating device.

主权项

1. A computer-implemented method comprising:
receiving, during registering with a central service, registration information for a user, including receiving an identity of the user, an identifier for an authenticating device, and a payment source identifier; storing the registration information; determining a default notification limit associated with the user wherein the default notification limit is based on either or both of the information received during registration and historical transactions associated with the user that have been processed by the central service; after the registering, receiving from a third party and at the central service a payment authorization request relating to a transaction purported to be by the user, the payment authorization request including the payment source identifier and transaction details including a transaction amount and information describing one or more details of the transaction; evaluating, by one or more processors, the stored registration information including using the received payment source identifier to locate a corresponding user and identifier for the authenticating device associated with the corresponding user in the registration information; and comparing the transaction amount included in the transaction details to the default notification limit and when the transaction amount exceeds the default transaction limit then
providing directly, by the central service, a communication to the corresponding user including creating a message including transaction information and delivering the message to the corresponding user at the identified authenticating device;receiving directly, at the central service, a communication from the authenticating device including either a payment authorization or a payment repudiation responsive to the communication from the corresponding user by way of the authenticating device; andprocessing, by the one or more processors, the received payment authorization or repudiation including providing either a payment authorization or a payment repudiation responsive to the payment authorization request to the third party; and when the transaction amount does not exceed the default transaction then automatically approving the payment authorization request.