Case Study

Card Testing Detection for Leading Merchant Services Provider

Automated, real-time card testing detection replaced tedious manual review, reducing time-to-detection and shielding hundreds of merchants from active attacks.

Company Profile

Modern Payments, Built for Every Business

This merchant services provider gives businesses of every size the tools to accept payments and run their operations from one dashboard, supporting both in-person and online transactions through TSYS.

  • 30,000 businesses supported nationwide.
  • 1M+ transactions processed weekly.
  • Backed by four sponsor bank relationships.
The Challenge

Card Testing Outpacing Manual Review

The merchant services provider's existing approach to card testing detection was tedious and manual, looking for indicators like velocity spikes, repeated prefixes, and odd transaction amounts across their portfolio by eye. As a result, incidents could go undetected until charges had already been settled. They needed a way to catch these patterns automatically, at scale, or risk missing even more attacks than before.

The Solution

Automated Card-Testing Detection, Built to Outlast AI-Generated Fraud

The client adopted the card-testing detection capability within FraudNet’s Merchant Risk Monitoring solution, replacing manual review with continuous, automated monitoring across the entire merchant portfolio.

Traceable Decision-Making

Investigators get the full picture behind every flag, backed by a complete, auditable history of how each decision was made.

Automated Action Orchestration

Every flagged signal rolls up to the merchant’s entity record and triggers an alert, so investigators work from a consolidated view instead of swiveling chairs.

Configurable Detection Rules

Fraud ops can adjust the rules themselves, right in the portal, so keeping pace with new attack patterns takes minutes instead of a chunk of someone's day.

Continuous Range-Level Monitoring

The platform autonomously tracks patterns across ranges of related card numbers instead of point reviewing single transactions, so the full portfolio stays covered around the clock.

Results at a Glance

Real-Time Detection at Portfolio Scale

The full merchant portfolio can now be scanned in minutes to identify potential card testing incidents, keeping pace even as AI accelerates the scale and speed of these attacks industry-wide.

136,000
card-testing transactions identified in minutes.
300+
merchants shielded from active card-testing attacks.
97%
reduction in time to detection vs. the chargeback cycle.
Testimonials

Card testing used to mean poring over transaction lists by hand, hoping to catch a pattern before it cost us. Now detection runs automatically, every day, and gives our team their time back, all while staying fully compliant with how we handle card data.

Head of Fraud and Risk

Why FraudNet

Faster Detection, Backed by PCI Level 1 Compliance

FraudNet's configurable platform with automated detection keeps pace with new threats, and PCI Level 1 certification establishes trust that it doesn't come at the cost of compliance.

Reduces compliance exposure by catching fraud earlier.
Fraud ops own the controls, no specialty engineering required.
Catches attacks in real time, not after chargebacks post.
Adapts to attackers using behavioral signals, not static rules.
Real-Time Detection at Portfolio Scale
Real-Time Detection at Portfolio Scale

Real-Time Detection at Portfolio Scale

Real-Time Detection at Portfolio Scale

The full merchant portfolio can now be scanned in minutes to identify potential card testing incidents, keeping pace even as AI accelerates the scale and speed of these attacks industry-wide.

The full merchant portfolio can now be scanned in minutes to identify potential card testing incidents, keeping pace even as AI accelerates the scale and speed of these attacks industry-wide.

97%

reduction in time to detection vs. the chargeback cycle.

300+

merchants shielded from active card-testing attacks.

136,000

card-testing transactions identified in minutes.

Why FraudNet

Faster Detection, Backed by PCI Level 1 Compliance

FraudNet's configurable platform with automated detection keeps pace with new threats, and PCI Level 1 certification establishes trust that it doesn't come at the cost of compliance.

Reduces compliance exposure by catching fraud earlier.
Fraud ops own the controls, no specialty engineering required.
Catches attacks in real time, not after chargebacks post.
Adapts to attackers using behavioral signals, not static rules.

Ready to Transform Your Fraud Prevention Strategy? 

Contact FraudNet to explore custom, adaptive fraud and risk solutions tailored to your organization's unique needs.