58 min
Fraudologyへようこそ。
シカゴで開催された第1回Merchant Fraud Allianceカンファレンスから数日が経ち、ようやく疲れも取れてきました。私はこのイベントの立ち上げに携わりました。加盟店同士が2日間にわたって意見を交わすという構想が、実際に多くの人々が集う場として実現するのを目の当たりにできたことは、私にとって本当に印象深い出来事でした。
Merchant Fraud Alliance 2026カンファレンスは、私が何年も前から耳にしてきた課題を埋めるために企画されました。加盟店は、営業を売り込まれていると感じることなく、同業者と情報交換できる場を求めていました。そこで、ソリューションプロバイダー1社に対して加盟店がおよそ3社となる比率を維持し、顧客からの評判を基準にスポンサーを招待するとともに、加盟店限定の掘り下げセッションも設けました。ここでは、こうした選択をした理由を説明したうえで、AIブートキャンプ、掘り下げセッション、メインステージの各セッションを振り返ります。テーマには、サービスとしての不正、アプリのクローン、不正なアカウント乗っ取りの動向、経営層向けスコアカード、自社開発か外部調達かの判断、そして加盟店が繰り返し直面しているPSPの課題などが含まれます。
今回のエピソードは、会場に来られなかった皆さんのためのものです。2日間にわたるセッションのすべてを1回のエピソードに収めることはできないので、特に印象に残った場面をお届けします。
このエピソードでお届けする内容：
- Merchant Fraud Allianceを、加盟店を第一に考える不正対策の実務者向けイベントとして立ち上げた理由と、招待制のスポンサーシップが会場の雰囲気をどのように形作ったか
- 加盟店限定の掘り下げセッションがどのように進められたか。不正対策センター・オブ・エクセレンスに関するディスカッション、フードデリバリー事業者や小売業者を対象としたECにおける返金詐欺のセッション、小売業者やマーケットプレイス向けのウォールーム形式のラウンドテーブルなど
- 加盟店向けAI不正対策ブートキャンプから得られた成果――Slackアラートやチャージバック調査から、ガバナンス上の課題、AIトークンのコスト上昇まで
- 「サービスとしての不正対策」に関するセッションで、Telegram、Discord、ダークウェブから得られる不正脅威インテリジェンスを、購入時の意思決定に活用する情報として扱うよう参加者に促した理由
- あるベンダーのデータから明らかになった、アプリのクローンを悪用した不正の検知に関する実態――クローンアプリが関与した場合、チャージバックは約4倍に増加
- 2026年のEコマース詐欺の傾向。2四半期でアカウント乗っ取りが3倍に増加したことや、あるベンダーの調査でAIエージェントによるトラフィックは人間によるトラフィックよりもリスクが9倍高いことが判明した点など
- 不正行為が決済の前後へと広がっている理由と、決済代行業者のツールだけに依存した場合に生じる加盟店とPSP間の不正対策の盲点
- 部門横断で不正対策に取り組むための教訓と、経営陣が本当に求める指標を盛り込んだ不正対策エグゼクティブ・スコアカードの作成方法
- 不正対策スタックを自社構築するか購入するかを議論するパネル、ロイヤルティ不正やプロモーション悪用を取り上げる非決済不正に関するディスカッション、そしてサイバーシグナルが決済不正の判定精度をどのように向上させるかについての調査を紹介します
次のような方は、ぜひこのエピソードをお聴きください：
- 参加できなかったため、各セッションの内容と、そこから生まれたアイデアを実践的にまとめたものを知りたい方
- 加盟店限定の不正対策カンファレンスがどのようなものか、また来年参加する価値があるか知りたい方
- 不正対策業務における生成AIの活用を検討しており、他の加盟店がどのような取り組みを行い、どのような課題に直面しているのかを知りたい方
- 経営陣に不正について説明するのに苦労しており、データをより効果的に提示する方法を必要としている
- 自社開発か購入かを検討している、またはPSPが提供する不正対策ツールに限界を感じている
- 返金制度の悪用、プロモーションの不正利用、ロイヤルティプログラム詐欺に対処しており、同業者と情報交換したい方
エピソードノート
Merchant Fraud Allianceをこのような形で構築した理由
私が以前携わっていたカンファレンスは、買収後に終了しました。その結果生じた空白について、多くの加盟店から何度も相談を受けました。そこで私はFraud Fight Clubの運営チームと提携し、彼らがロジスティクスとスポンサー対応を担う一方、私はコンテンツの企画と加盟店の集客に注力しました。スポンサー枠は15社分設け、顧客からの評判、市場での振る舞い、そして製品がうたっているとおりの機能を果たしているかを基準に、招待する企業を選びました。ベンダー向けの参加チケットは販売せず、ソリューションプロバイダーが参加するにはスポンサーになることを唯一の条件としました。その結果、参加者は200人強となり、ソリューションプロバイダー1社につき加盟店関係者が約3人という比率になりました。実務担当者が売り込みに邪魔されることなく、話のできる同業者を見つけられる場であるべきだと考えており、その理想にかなり近づけたと思います。
開催前日のAIブートキャンプ
カンファレンス前日、PlayStationとGoDaddyの加盟店担当者が、約40～50人を対象に4時間のAIブートキャンプを実施しました。会場でアンケートを取ったところ、参加者の大半はまだ実験または試験導入の段階にあることが分かりました。登壇者は、チャージバック対応の調査、アカウント登録数の急増などを検知してSlackチャンネルに通知する例外ベースのアラート、アナリストによるアカウント乗っ取りの特定方法の標準化に、生成AIをどのように活用しているかを紹介しました。手順を統一することが有効なのか、それともアナリストごとに異なるアプローチを取ることで検知範囲が広がるのかについて、活発な議論も交わされました。また、現実的な課題も2つ挙げられました。自分の専門知識をモデルに提供することをためらう従業員がいること、そして早期に導入した一部のチームでは、特定の業務にかかるトークン費用が人件費に匹敵し得ることです。参加者は、不正事例レビューアシスタント、不正傾向アップデート作成ツール、自分らしい文体で文章を書くツールという3つのAIスキルを持ち帰りました。
最も有意義な議論が交わされた分科会
ディープダイブは加盟店関係者限定で、チャタムハウス・ルールのもと、約20名で45分間行われました。私は司会を務めていたため一度も参加できず、今でもそれが心残りです。話を聞いた加盟店関係者は皆、ここでこそ素晴らしい交流が生まれたと語っており、唯一の不満は、もっと長くしてほしかったということでした。ZoomInfoのMegan Mahoneyは、不正対策センター・オブ・エクセレンスの構築に関するセッションを始めましたが、スライドをほとんど進めないうちに、参加者たちが自らのアイデアを持ち寄って議論を主導し始めました。GrubHubのSudhir Lankaは、フードデリバリーと小売業における返金詐欺についての議論を進行し、小売業者向けとマーケットプレイス向けの「作戦会議」形式のラウンドテーブルも行われました。まさにこの形式の狙いどおり、同業者同士が、うまくいったこと、いかなかったことを共有する場となりました。
サービスとしての不正、アプリのクローン、脅威インテリジェンス
メインスポンサーのIncogniaは、ディープフェイクやAI生成画像、サービスとしての不正（Fraud as a Service）のツール群について取り上げました。中でも私が注目したのは、アプリのクローンです。あるEC事業者のデータでは、クローンアプリが関与した場合、チャージバックが約4倍に増えていました。このことから、クローンアプリを利用した不正の検知について、さらに詳しく検討する価値があると感じました。RH-ISACのSteve Diamondは、サービスとしての不正がどのように機能するのか、そしてなぜ共同防御が重要なのかを掘り下げて解説しました。実践的なアドバイスとして、外部の第三者、専任担当者、あるいは兼任担当者のいずれであっても、脅威インテリジェンスの責任者を置き、Telegram、Discord、ダークウェブ上で犯罪者が自社について何を話しているかを監視することを勧めていました。こうしたシグナルは、購入時の意思決定に反映されてこそ最大の効果を発揮します。参加者の何人かは、脅威インテリジェンスをそのように活用することは考えたことがなかったと話していました。
アカウント乗っ取りとエージェントトラフィックについてデータが示したこと
高度なアカウント乗っ取りの手口を分析するパネルディスカッションで、Rebekah Moody氏は、2四半期でアカウント乗っ取りが3倍に増加したことを示すDarwiniumのデータを紹介しました。これにより、フィッシング、認証情報の収集、クレデンシャルスタッフィングをより迅速かつ大規模に実行しやすくなっています。同じデータによると、エージェントによるトラフィックは人間によるトラフィックの約9倍のリスクがあり、自らエージェントであると明示していたのは約4分の1にすぎません。これは一ベンダーの数値であるため、業界のベンチマークではなく、一つの兆候として捉えています。ただし、加盟店から繰り返し聞く話とも一致しており、最終的にはギフトカード、ストアクレジット、ロイヤルティポイントなどの蓄積価値が引き出される被害につながることが少なくありません。
自社との対話
特に議論が盛り上がったのは2つのセッションで、どちらもコミュニケーションをテーマにしていました。長年の友人が初めて単独で登壇し、部門間の隔たりを埋めることについて講演しました。彼女が伝えたかったのは、自部門のデータだけでなく他部門のデータにも目を向けること、そして私たちが見ているのは取引全体のわずか3～5％程度にすぎないと認識することでした。一部に対策が必要だからといって、すべての人に余計な負担をかけるべきではありません。あるチームは、自分たちのデータしか提示してこなかったために、他部門が話を聞いてくれなかった理由がようやく分かったと話してくれました。続いてHolly Sandbergが、経営幹部が実際に重視する不正対策の指標と、経営層向けスコアカードの作り方を紹介しました。これは重要なテーマです。というのも、経営層が求めているのは全体像であるにもかかわらず、不正対策チームは詳細なメールを送りがちだからです。Booking.com、Mastercard、Seonが参加した非決済型不正に関するパネルディスカッションでは、さらに別の視点から、ロイヤルティプログラムの不正利用、プロモーションの悪用、紹介特典の重複獲得など、チャージバックには至らない不正が取り上げられました。
内製か購入か、PSPの盲点、そしてサイバーシグナル
VisaのEric Goodman氏、Group-IBのJulien Laurent氏、ギフトカード決済処理に携わるDajana氏が登壇した業界動向パネルでは、不正が決済の前後へと広がっていることが議論されました。決済データやPSPのツールだけに依存する加盟店は苦戦しています。攻撃の大半は決済手段が入力される前に発生し、返金やチャージバックといった取引後の不正にも対応する必要があるためです。Booking.com、FingerprintのDan Pinto氏、Mark Porteous氏、InComm PaymentsのJarrod Price氏、IncogniaのCEOが参加した「自社開発か外部調達か」をテーマとするパネルでは、加盟店が一部のツールを自社開発し、その他を外部調達することで、複合的なリスク管理基盤を構築するケースが増えている現状が示されました。その後、Jarrod氏はAaron Frye氏とともに、加盟店がPSPにより多くのデータ提供を求め、連携してギャップを埋める方法について語りました。最後にReverbとCertifiは、不正対策チームがサイバーセキュリティチームと緊密に連携することで、加盟店のパフォーマンスが向上するという調査結果を紹介しました。
重要なポイント
- ソリューションプロバイダー1社につき約3社の事業者が参加する、事業者限定のカンファレンスでは、絶え間ない売り込みに邪魔されることなく実務担当者同士で情報交換ができるため、対話の質が向上します。
- AIブートキャンプの参加者の大半は、まだ実験や試験導入の段階にあり、登壇者は、AIで業務をどう効率化できるかを考える前に、なぜその業務が現在のような形で構成されているのかを問うべきだと提案しました。
- 生成AIは、チャージバック調査や例外ベースのアラートに活用できますが、チームはガバナンス、専門知識の共有に対する従業員の懸念、トークンコストを考慮して計画を立てる必要があります。
- Telegram、Discord、ダークウェブから得られる不正脅威インテリジェンスは、担当者を明確にし、購入時の意思決定にそのシグナルを反映させることで最大限に活用できます。
- アプリのクローンが関与した際、あるEC事業者ではチャージバックが約4倍に増加したため、クローンアプリを利用した不正の検知には十分な注意を払う必要があります。
- アカウント乗っ取りやクレデンシャルスタッフィングは急増しており、あるベンダーは、2四半期の間にアカウント乗っ取りが3倍に増加したと報告しています。
- 不正行為は決済の前後のプロセスでも発生するため、PSPのツールだけに依存している加盟店には、把握できない領域が生じます。
- 部門横断の連携は、他部門のデータに目を向け、追加の確認プロセスが必要なのは取引全体のごく一部にすぎないと認識することから始まります。
- 不正対策のエグゼクティブ向けスコアカードは、不正対策チームが伝えたがる詳細情報ではなく、経営層が求める全体像を示すことで最も効果を発揮します。
- 現在、多くの加盟店は不正対策システムの一部を自社開発し、残りを外部から調達しています。ベンダーを選定する際は、製品が実際に機能するかどうかに加え、既存顧客の評価も考慮すべきです。
最後に押さえておきたいポイント
私の心に最も残ったのは、個々の統計データではありません。加盟店の皆さんがテーブル越しに身を乗り出し、誰かが何かを売り込もうとすることもなく、うまくいったこと、いかなかったことを率直に共有し合う姿でした。アライアンスとは、本来こうあるべきなのだと思います。私たちはすでに来年に向けた計画を進めています。最新情報はLinkedInでMerchant Fraud Allianceをフォローしてください。また、ポッドキャストで詳しく取り上げてほしいセッションがあれば、ぜひ教えてください。登壇者の所属企業から許可が得られれば、ゲストとしてお招きしたいと思います。
エピソードの参考資料とリンク
つながる：Karisse Hendrick | LinkedIn
Fraudology Podcast ホスト
受賞歴のあるサイバー詐欺対策の専門家
Eコマース不正防止コンサルタント
スタートアップアドバイザー、基調講演者、
フォーチュン500企業向けコンサルタント
Episode transcript
Karisse Hendrick
00:07
Welcome back to the Fraudology podcast. I am Karisse Hendrick and I have survived the inaugural Merchant Fraud Alliance conference in Chicago. I think I've gotten rested up. It's taken a few days, but overall it was a really incredible experience both as the one of the creators of the conference, you know, to see all of the hard work between goal and reality uh come to fruition. And to see so many people talking with each other and learning. And just that was invigorating in itself. But the feedback has been incredibly positive from all of our attendees and our sponsors. And that was really our goal, right? My biggest goal going into the week was that I didn't want anyone to feel like they wasted their time or their money coming to the conference. You know, one of my co-founders was like, "You can't please everyone." I said, "I know, but that can be my goal." And that is my goal. And I think we succeeded. We haven't gotten the survey results back yet, but you know, as far as what everyone has said online and in person, it was an amazing event. And for those of you that weren't able to attend, I am sorry about that. But that's also what this episode is for. I'm going to try to give you a little bit of what you missed. It's going to be, you know, difficult. Some of the content will be in bite-sized pieces. Uh, I mean, we had two days full of content both on the main stage as well as what we call deep dives. And I'll talk about those in a minute. Um, so I can't compress it into a 30 or 45 minute episode, but I can provide a few nuggets of information that I thought were really interesting and hopefully um give you a little bit of a feel of what happened last week. So I think a lot of you know this but for the last five years since the last conference that I worked on um decided to close their doors. Just due to co due to an acquisition that probably wasn't the right one. They decided to close. And I had worked on their content for their conference for six years. And it kind of left a gap in the market. It left a gap in the industry. Uh yes, there is, you know, one main conference that a lot of online uh merchants attend. I attended as well. I don't I'm It's not that I'm trying to uh replace or compete with anyone, but it just felt like there was something missing. Just something different missing. Not that anything's that means anything's bad already, just, you know, something different. I've been asked many times since then since that the last conference I worked on uh went decided to be no longer uh if I was going to start something. And I was just so overwhelmed by mostly the logistics.
Karisse Hendrick
03:00
I uh am not a logistics person. I'm not super well organized. I don't I mean even when it comes down to planning a trip with my husband, I'm like you plan the trip, I'll be there. Um I don't want to think about the rental car and the flights and the all the things. And there are so many logistics that go into conferences. So that was my biggest kind of hold back. I last year I February of last year so like the beginning of last year uh I was approached by PJ Rohall and Ronald Praetsch who run About-Fraud.com as well as they stood up the um Fraud Fight Club for online uh fraud for banks and financial institutions. And they said they wanted to do a merchant conference. But they wanted to do it with me. Uh because they didn't really know the merchant space. They didn't really know what content merchants wanted. They didn't have a lot of relationships in the merchant world, but they knew how to build conferences. So, it took a long time. I uh reached out to a lot of people that I trust in the industry. And they were very encouraging. So, we went along that path. Um I'm trying to make this part of the story short cuz it's not like fraud nuggets, but it's just giving you a background of what happened. We divided it up so that they took care of logistics as well as sponsorship relationships. Um, I did, you know, introduce some sponsors to the mix and, you know, all of that. And so we did sponsorship relation, they said sponsorship relations, um, other than a few introductions I made. And, uh, they took care of the logistics along with our third party event company, uh, Slate Events, which I can't say anything bad about them. They're just incredible to work with. And if anyone attended MFA last week, you know that that looked like a very I mean, it was a very professionally well done event. And the looks and the aesthetics of it all and the fact that the food was incredible. I I can't tell you how many people told me that. And that's very rare for a conference, by the way. The fact that, you know, everything was running on time and the slides showed up at the right time and all of that was all Slate Events. So, we went on it and then my job was content as well as getting as many merchants to attend as possible. Um, overall we had a little over 200 attendees. That meant that there were three merchants to every one solution provider. That made a big difference.
Karisse Hendrick
05:25
And I had a little bit of a debate with a friend of mine the other day who said, "Couldn't you bring on more sponsors?" You know and I yes I think we could. Now that we've successfully done you know we're still trying to figure out the right ratio the right feel. It was a first time event we were trying to do things. But what was bigger to us and this is something that has come from the merchant ambassadors that we've worked with, is they don't like the fact that merchants that vendors can just pay to be at an event. And there is no vetting process. Especially for younger newer fraud fighters. That don't really know you know aren't plugged into the industry of merchants who are like, went with them. I wouldn't advise it. Or their product hasn't been, you know, upgraded in the last 6 years or whatever it is. They wanted it to be invite only. And so that's what we did. We reached out to sponsors long before we announced the conference. We made a list of prioritization based on a few criteria. I didn't want it to be subjective. I didn't want to be these are the people that Karisse likes and the people that Karisse doesn't like can't come. That wasn't the case. It was as objective as we possibly could be. The very the most important thing to us was the opinion of customers. What do their current customers think of them? Will are they willing to refer other people to them? Um that was by far the most important thing. And I will say that we once we announced the conference and other uh solution providers approached us um we were already full. But we um we wouldn't have extended the invite to them anyway. Uh because their customers aren't happy with them. They'll spend a lot of money on you know acquisition and trying to get new customers but not necessarily on uh their current customers. The other criteria was the opinion of the market. How are they a steward of the market? How are they a partner within the market? Do they provide great information? Are they super salesy and out of touch? Are they, you know, trying to provide good information and, you know, data to the industry, that type of thing. And then the third was just that the product works. The product does what it says it is. Sometimes that means innovation. And other times that means just a really strong steady engine. You know, it's important that the product do what they say that it does. And then it's also important that the the product be reliable. So those were our criteria for creating that list. I wanted to make that clear because I think there's been some questions about that. Uh because of the cost of the venue, uh it was important that we fill our 15 sponsor slots before we even announced the conference. So, I know there were a few companies that, you know, didn't feel like they were included or asked. We reached out to everyone that we had on our list and there were several that didn't have the budget for it or didn't want to sponsor a first-time conference. But because we needed to limit the ratio and we it was important for us to have that community feel and not just, you know, that it was a sales, you know, that people are paying to go to a conference and then paying to be sold to. We didn't sell vendor tickets. So the only way for solution providers to attend was to sponsor. And there were some companies that didn't want to sponsor. And that's okay. I hear a lot through the grapevine. And I know there are some that you know feel like it was unfair. You know we're building what the merchants want. And you know really it came down to everything I've heard over the last few years of what merchants want. Maybe that's different or that's the same as what's out there. And then I tried to we tried to reverse engineer that to determine well what does that mean? You know, hey, I really hate feeling like there's a target on my back.
Karisse Hendrick
09:12
And I can't even have a conversation with a peer because somebody's interrupting to sell to me. You know, I feel like there's more salespeople than there are, you know, practitioners. That type of thing. Okay. Well, then we're going to try to limit the number of salespeople, so you don't feel that way. That type of thing. We were very intentional with every aspect of the conference. I I hope that comes through. You know, whether it's content, who spoke, what they spoke about, all of those things. That was a big question that was asked, so I wanted to answer that. But I also don't want to talk about like the mechanics of the conference too much, but I do think it's important to mention. And if you have any other questions about it, um, please let me know. I'd be happy to explain why we did what we did. We, you know, really wanted to be true to our name, the Merchant Fraud Alliance. We really wanted to build an alliance among merchants. Solution providers have a really important role in that and we acknowledge that and we appreciate that. Um, and we tried to show our appreciation by inviting the companies that, you know, it seems like are doing the right thing, you know, by the industry, uh, to be a part of it. And we also ask the solution providers that they bring more product focused people. And we strongly advise them that that would sell their product more than anything. Uh if someone especially that's been in fraud for you know 15 20 years gets to nerd out on fraud and how are you doing this and how are your models built and how you know blah blah blah with a product person. That's going to sell your product even more. Then you bring in the salesperson, right? But just for conversations and that type of thing. And because we had a 3:1 ratio, most of the time as a practitioner, it was easy to, you know, throw a rock, so to speak. I would hope no one did, but uh throw a rock and and find a peer to talk to. Um and then they could go to the booths and talk to the solution providers and find out what they were providing and and what they had. And we very much encouraged that. Um, one of the cool things about MFA is that the last two hours of uh each day was dedicated to what we call Meeting Madness. And our app is really it's really good. And it allows you to set a schedule and then people can reach out to you and set up a meeting with you within your availability and they'll tell you which table number to go to and meet that person. We encouraged that among merchants as well as with solution providers and merchants. And then we also just had open meeting time where people could just you know wander around and start talking to people. Uh but that was a really good component of it I think I saw a lot of just really um engaged faces.
Karisse Hendrick
12:01
And then another aspect other than the the main stage of content was the deep dives. I am still really bummed that I didn't get to go to a single deep dive. It was decided on the Saturday before the conference that I would be the MC throughout the entire thing. It made sense. I understood, you know, the content and the people and, you know, was able to say a little bit about the the presentation before and then the presentation coming up. But that meant that I didn't get to attend the deep dives. And that's where the magic happened. Uh, every merchant I've talked to has been like, "Oh my gosh, these deep dives." The only complaint I've gotten out of the deep dives is that they need to be longer. And they were already 45 minutes. So, I don't know if we're going to make them an hour and a half to two hours next time, but that's what the request is. Uh, and the deeps are merchant only, and we'd have a topic and we'd have a facilitator or a presenter. For instance, Megan Mahoney from ZoomInfo, she did a presentation on creating a fraud center of excellence. I think she only got through a few of her slides when they just started talking as a group and exchanging ideas. And that's exactly what the point of the deep dives are. Sudhir Lanka, who's been on the podcast before from GrubHub, he led a group discussion on refund fraud for food delivery and retailers. Uh there were war room um round table for retailers and marketplaces. Those were probably the two biggest groups of merchant categories that we had. I hope that we have more next year so we can add more war room type deep dives so that they can talk to each other about what they're seeing and and all of that. Um but a lot of connections were made throughout the week uh because of the deep dives. There's just an opportunity to just share, you know, Chattam House rules, all of that. We had some great topics. There was another one uh led by Steve Diamond at RH-ISAC on the fraud as a service community and the importance of having some type of threat intelligence that you have access to. Whether that's through a third party or a dedicated FTE or somebody's you know part-time job is scrolling Telegram, Discord, dark web. So figure out what cyber criminals are saying about your company and then you know make sure that you're passing those on upstream to uh the time of purchase uh for decision making. So that's kind of the structure of the Merchant Fraud Alliance conference. We were uh in the Willis Tower which used to be the Sears Tower uh in Chicago which was pretty epic and you know had a great feel. We were on the second floor in the Convene location. I think that venue was a really key part and and we were really intentional about that. We looked at several venues and we wanted, you know, the the conference and the flow to be a certain way and we wanted to, you know, have several opportunities for larger conversations, smaller conversations.
Karisse Hendrick
15:05
There were, you know, just lots of different places to be and um the flow was perfect. I think I really uh loved the venue. Hayley at United Airlines offered their space. They have several floors of the Willis Tower and one of those floors is dedicated to conferences. So, she offered us one of the classrooms uh for actually she offered us the whole thing for our conference. And we were like, well, we already signed a pretty hefty contract, but we said, you know, could we do an AI boot camp in one of your classrooms uh for day zero is what we're calling it. That was Monday, October uh 5th. And she said, "Absolutely." And Hayley was incredible with all the logistics. I mean, she and PJ hammered those out, but uh we had I'm going to try not to do last names. Um I know I said a couple already, but we had Stephanie and Evan from PlayStation and Mark from GoDaddy, uh who led the AI boot camp. They are merchants who in my conversations with them had really, you know, shown that they were kind of first to utilize AI, generative AI in LLMs, in fighting fraud and managing fraud and not fraud operations, in analytics in various different ways. And so I asked them to share some of that and they did. And it was about 40 50 attendees that came a day early uh to learn from them and it was a 4-hour course. It it flew by. Uh they gave a lot of really good tips on where to get started, how to get started, um how to manage your team around this. They've, you know, one thing that they said is that leadership is quick to say, hey, you need to use, you know, generative AI for 25% of your job or whatever their, you know, stipulation is or their um kind of new guideline is for the company, but they don't say how or what to use it for or anything like that. So, they shared what they were using it for. They shared what, you know, how they were using it. Um what they feel generative AI is good at, what they feel generative AI is not so good at. Um I did take a few notes and I want to share those. Um some of the things that they use for workflows and they did say you need to have a common way to ID and tag on an operating model.
Karisse Hendrick
17:38
Um but the things that these two companies are using uh generative AI for is chargeback reapers that meant. And some of that is data gathering as far as bin analysis and response codes and who's giving us the most win rate and you know diving into the the data of that. And I do know of at least one chargeback vendor that provides that to their customers already. But in this case you know for merchants that are doing it on their own they can get some of that rich data that helps with root cause analysis. Um, they're also using it for various workloads and then shared processes. It looked like they did a poll of the room as far as where everyone in the room was um, when it comes to using generative AI. And the majority said they were either experimenting like by testing the waters or piloting and testing solutions. One of the things they shared was that the old question, you know, used to be how can AI help me do this faster? Now, what they're asking is why is the work structured this way and should it change? So, what they've learned is this is a really good opportunity to go through all of your workflows and also to determine if your teams are doing things in a similar way. Um there was a little bit of a debate by about that because there you know one of the presenters said that they realized that all their analysts were identifying account takeovers for example in a different way with different SQL queries with different you know tools etc. And their suggestion was to make it all uniform and to create a uh standard operating procedure for identifying ATO's that you could provide to your AI model. There were a couple of people in the audience that said, you know, I really like the fact that different analysts find things in different ways. Um, I think that's important because they're, you know, they're they're finding it, right? But in unique ways and that opens up the surface area to find more. Um, and so those are, you know, a lot of things that you just have to think through and and think about.
Karisse Hendrick
19:53
One of the presenters said, "What's been more difficult?" Uh they kind of asked the question you know someone asked them the question uh what's been more difficult teaching AI how your team works or figuring out how your team works and should work? And that kind of goes into what I was sharing earlier. Some of the people are trying to figure out how to cut percentage of human time. And so they talked a lot about how they measured that and then what they did to um reduce that. One of the merchants is using it for exception-based alerts, you know, to identify anomaly behavior, they set up alerts to their Slack to a specific Slack channel from their generative AI tool and whenever the anom an anomaly was detected like, oh, we had way more account signups than we usually do, right? We had a 47% increase in account signups today. That might be worth an analyst going and looking into. And so it would not only send that alert, but it would send all of the research data along with that uh to the Slack channel and then a different analyst is assigned um that queue every day to then go research. They talked about the different tools they use. They talked about, you know, skills versus projects. They talked about a little bit about AI governance. I think it sounds like most companies are just focusing on output and aren't yet looking at uh governance, but that will probably come soon. One of the presenters said that they're having a difficulty they're having difficulty with knowledge extraction from their team. Um they said they're noticing employees don't want to provide all of their knowledge to be fed into AI. That doesn't surprise me. We're seeing headlines in LinkedIn post and everything else talking about how AI is taking everyone's job. And if you have a lot of domain expertise and you've been at the company a long time and you know how things work and how to identify them and how to use the systems and everything else, I can understand why you wouldn't want to give those secrets away to a machine that might be able to do it faster and um more detailed.
Karisse Hendrick
22:05
So I think that's going to be a challenge for a lot of companies um as they look to uh implement AI usage more. Uh but they also talked about how the the companies that are ahead of the curve that are that have already been using AI for a long time are saying that now they kind of have to pay the piper in a way. A lot of their finance teams are realizing that in some ways it's actually more expensive to use you know with AI tokens. It's more expensive to do these you know some of these operational tasks using AI than it would be to pay a human analyst. Um, and there, you know, some companies are are providing a bill at the end of the month to each department for their AI usage or at least a report to tell them how much they're spending and then a goal of what they need to get that under. But the expense of AI really is uh becoming a focus for those that just dove head first, you know, 9 months ago, maybe a year ago, and said, "Okay, let's see how much we can do with AI." Uh, a lot of them are now realizing it's expensive and could be more expensive than headcount, which I thought was an interesting takeaway. Uh they also provided take-home product that one of the uh presenters created with AI skills that you could then play around with. And it was, you know, already the model was already trained, right, and told, you know, what the task is and and that type of thing. And there were three that were sent out to every attendee that I thought was really valuable. Um and this this course this boot camp was free and will be free next year uh to any merchant attending the conference. So um this is just an add-on that we wanted to provide. We realized you know in all of our conversations that working with AI was the hot topic this year. And a lot of people wanted to know how everyone else was using it in a more detailed way than we could do in a 45m minute session or a 30 minute session. So, we dedicated those four hours, but we didn't charge anything extra. That was just part of being um at the conference. Um but these skills that they built, one was for a fraud case review assistant, the other was for a fraud trend update writer, and the other was more less about fraud and more about uh your personal usage of AI. And that was a write like me tool. So you could teach the model or teach the agent, teach the LLM how to write like you. Uh so you could write an email, a presentation, whatever it is, you know, a a document, a white paper, a process, you know, workflows, whatever. Um to sound like it came from you. So um those were things that they um provided in that boot camp that was really cool. Um after the boot camp, we had a kickoff party for all of the practitioners um sponsored by Sardine. It was very nice of them. It was up on the 99th floor, which was a bit of a expense, but when you're in the tallest building in Chicago, um and it's so famous because it at one time was the tallest building in North America, I think even maybe the world for a while. Um take advantage of it. So that was a really good time. Um it was really a lot of fun to get to see all the familiar faces um get to meet some new ones and just you know the excitement about the event and the week was um was definitely palpable. And I know there were some really good conversations that were had there. So then we had the conference. I did the opening presentation. I don't want to call it a keynote. Um, I might actually re represent that as a podcast episode in the near future because I think it was pretty good. Um, I did a lot about talking about how fraudsters are using AI and how it is increasing the amount of fraud and the speed of fraud that we're seeing um just exponentially. Uh, I got my hands on some figures that were really eye opening. Um, you know, account takeovers are up 175%. No, wait, that's card testing. Sorry. Card testing is up 175%. Uh, account takeovers are up by like 60%. I can't remember the exact stats, but they're learning how to use AI just like we are. And, you know, our goal is always to make it a little slower and a little more expensive for them to commit fraud on our site or at your bank or, you know, where whatever you're protecting. Uh their goal is to make it as fast and cheap as possible and AI really helps them do that. And I was able to show some resources from the dark web that Matt Vega talked about on the podcast last week. I was able to show a video demonstration of that. Thank you Matt Vega uh for sharing that with me. Um, I really, side note, I knew how lucky I was and that I have some incredible friends in fraud, but dang are my friends smart. I learned that uh just even more so this year or this week than ever before. Uh the friends that presented on topics that I asked them to talk about um the friends that were on panels that were in deep dives and that were providing these you know golden nuggets of information to other merchants. Um I know I I think I know the smartest you know maybe some of maybe I don't know everyone but I know a lot of the smartest people in this industry. And I'm so grateful for that. Matt Vega being one of them even though he wasn't able to attend the conference this year. He's not really an e-commerce fraud anymore. So, uh he needed to focus on uh what he's doing um in his new role.
Karisse Hendrick
28:11
So, um I kicked that off and then every 30 35 minutes or so, we had a new um session in the main stage. The way we came up with the content was layered. What I think is important is to ask the attendees what they want to learn. A lot of conferences ask the speakers what they want to talk about and oftentimes you miss the mark. You just you just miss what they want to talk about uh or what they want to learn about, right? And um sometimes those call for speakers are are incredibly you know like 6 8 months before the actual event. And with AI especially that that's changing a lot. If we would have done a call for speakers six months ago, we would have had a totally different agenda and I'm not sure it would have been as helpful as you know the takeaways were in this. The other thing was you know once we asked people what they wanted to talk about. We matched up the right people with those topics people that have had experience in them that have done this that have been in it for a long time that can give tactical and practical takeaways. That was the ask of the uh presenters was make sure that you have a few things that people can implement soon. Not just pontificating and theorizing about what's going to happen. It's like no, this is what we did to stop this. This is what we did to identify this. This is what we did to work with other teams. That type of thing. I don't have the agenda handy, though I could pull it up very quickly. Um because I created it. Um but here are some of the topics. Um after the modern fraud attack landscape that I provided, then um Eduardo Pires at Incognia who was our um main overall sponsor talked about deep fakes, AI images, and fraud as a service and things in the fraud service toolbox. I didn't know a lot about cloning apps and image injection. There were four times more chargebacks for merchants when fraud app clones were used. They looked at a mer an e-commerce merchant that they have that without app clones. Their chargeback rate was uh44, so 44 basis points. With app clones, it was 1.6. So being able to identify um when apps are cloned is is really important. They're looking at fraud farms. They're able to extract apartment level data and I believe that's from the telemetry of the phone and how many feet or meters that phone is up in the air. I didn't get to ask Eduardo more follow-up questions, but I believe that's how that's happening. Um but that's very interesting especially for um you know Fraud Farms and as well as apartment buildings um where there's a lot of you know purchases being made within the apartment especially for those bigger retailers. They said that I can't read that so I'm just not going to say it.
Karisse Hendrick
31:24
Sorry. Um then after that session we had a session that I went out and asked issuers to participate in. And so we had um Angela Diaz at TD Bank and Justin um O'Neill at Capital One along with Troy Huth from Auriemma Roundtables who does a lot of data consortium and collaboration work with those banks as well as in-person event collaboration. They were talking about chargebacks from their perspective and I know that that's not you know some of it was frustrating to merchants but I do think it's important to hear the other perspectives. They don't want to have customers that are abusing chargebacks you know themselves. So you know although that it does happen and I'm not saying it doesn't or and or that they are perfect or that we are perfect. I think every aspect within the ecosystem, every player within the ecosystem has their strengths and their weaknesses, the things that they could improve on for the others to be good stewards of the ecosystem and the things that they need to do for themselves to protect themselves. But it was a really interesting conversation that I hadn't seen anywhere else and that's why I wanted to have it there. I talked to Soups. I was a little worried that day one would feel like the Karisse show, but I hope that we broke it up enough that it didn't. Uh but I talked with Soups Ranjan the CEO of Sardine about uh real world fraud AI fraud meth attack methods and it was a fireside chat. And we talked a lot about you know how fraudsters are using AI to combat fraud and then how fraud teams can use AI or no to commit fraud and then how we can uh use AI to combat fraud. Um so that was really interesting. I hope to have soups on the podcast again soon. I mean, Sardine is obviously my sponsor, but Soups is a very busy guy. He flies all over the country and even the world. Um, talking at conferences, meeting with their customers and everything else. So, um, I do know I'm going to have someone from Sardine soon. It just may not be Soups.
Karisse Hendrick
33:30
Uh, then, um, that was when Megan had her creating a fraud center of excellence, which I've heard great things about. I'm not surprised. I've known Megan for over 10 years. She is excellent. And then we also had our MFA Launchpad. We invited four early stage startups to present the use case that they're solving for and a little bit about their their tool and um their product and their focus uh for 5 minutes each. Uh they did a really good job sticking to that five minutes. We had a countdown clock and they stuck to it. I was impressed. I thought maybe one might try to push the boundaries, but they really didn't. Um and that was really interesting, you know, to see what's coming up. Uh there were a couple that were pretty popular afterwards, but we didn't do any voting or anything like that. We just, you know, we recognized that the gating factor for sponsorships was pretty high and really was only, you know, going to be able to be filled by established fraud companies and we knew that our practitioners as well uh wanted to learn about new technology and we wanted to give those startups a chance to um have access to conversations with our practitioners. So that was a huge success. The next session I almost cried about uh when I was introducing the speaker. I have known her for a very long time since she was in a more junior position in fraud um at Best Buy. And uh I have just seen her grow so much. And this was a topic that I asked her to speak about or kind of told her I was going to have her speak about it. It was her first time ever presenting on the stage by herself. No one could believe that. It was probably the most talked about session of the conference and that is bridging cross functional gaps. And the thing she said in that session I I have the slides. I was going to write read through some of them but I um just don't have the time but it was it was really good. It was really about like changing your own focus and your own way of presenting data and understanding data and you know working to be a good partner with other cross functional teams rather than just being like I'm right and this is the way it's going to be. And you know because the way she started it out was talking about something totally unfraud related about you know hey people looked at this data from this survey and they came to this conclusion then that makes sense. So, they made a lot of business decisions based on that data. They uh people made a lot of investment decisions based on that data. And then they started to see that, huh, we're not getting the same results as we thought we would based on the survey data that we had. And then they zoomed out and they looked at other pieces of data from different parts of the survey and realized, oh, that's not 100%. It's not true in isolation, right?
Karisse Hendrick
36:28
You have to put other pieces of the puzzle together to really identify what's going on in your company or um you know with other decisions that need to be made. And that was really her message was hey we need to look at the data from other departments. We need to not just see our own data and and say hey this means we have this problem and we need to add all this friction. Well you know it's something I say a lot two, we have to remind ourselves that we're only looking at like 3 to 5% of transactions, right? So we can't think that all transactions need friction because 3 to 5% do. Um so she talked a lot about meeting people where they were at different departments in different ways. She talked about um just it was one of the best sessions. I really wish I could have her on the podcast. I've been asking for years um for her and at least one other person from their team. However, um it's not something that their communications team department feels comfortable with, but I will probably be asking her to do a replay of that session next year. Um maybe with some updates because there were other sessions that people gave feedback on, but by far it was this session. It was I talked to one team that said we realized we were talking like we realized why everyone else in the company hates us right now and why you know they're not listening to us and why things are so frustrating for us is because we were talking to them in the wrong way. And we were only looking at our data and not the big picture. So that was I knew that was going to be an informative session. I didn't know how transformative it would be and I am so proud of that speaker. Um, next, uh, Jeff at Persona and Mark at GoDaddy talked about how GoDaddy has updated their risk analysis using AI. That was really interesting. Uh, then we had a panel that I got to create um, on the economics of non-payment fraud. So, we had one merchant. We had Ina from Booking.com. And then we had Jonathon from Mastercard and Logan Porter from SEON. Um, and they each had some unique perspectives on non-payment fraud. The fraud that doesn't turn into a chargeback, whether that's promo code abuse, whether that's loyalty fraud, uh, a little bit about refund fraud, but they knew there was another session about it. So, they mostly focused on loyalty fraud, promo abuse, some referral stacking, that type of thing. Then there was a deep dive on translating dispute analytics for the C suite. I heard that was a very lively discussion. And there was another deep dive um entitled decoding fraud and business motivations for smarter selective friction that was done by one of our sponsors but that was a full room. I've seen pictures of you know the rooms the deep dive room was very full. Um we had about 20 people per uh session and it was uh something that they had to sign up for before the conference started. So there wasn't like a long line or anything like that. It was just hey if you sign up for a spot try to go um because there were other people that wanted to go too. So I'll move on to the next day. Okay. So then um the first session I actually moderated. Um and it was important to me that we have a session of someone from a card brand, someone from a fraud provider and someone from the merchant space that could kind of speak on behalf of merchants like someone that had a strong ethos and and strong you know uh perspective on the industry and could be a good representative of merchants to talk about trends, threats and what merchants should do next. So really talking about the landscape and we talked a lot about how fraud is moving right and left of the transaction uh for e-commerce fraud. You can't just look at payment data and make a decision. I am watching merchants do that especially those that are relying on fraud um tooling from their payment processor or their p their PSP. They are really struggling. I mean those because most of the fraud um attacks are happening before the payment methods ever entered. And if you're only looking at when the payment methods entered that worked for us 10 years ago that worked for us 5 years ago I mean device ID and that type of thing was helpful. But now we need to see the full picture from the moment they enter your website to the moment they check out and even after that because there's post-transaction fraud, right? There's pre-transaction then there's post-transaction whether it's, you know, refund fraud, chargeback fraud, you know, customer service complaints, just all types of things.
Karisse Hendrick
41:15
So, we talked a lot about how fraud was moving up and downstream. We talked a lot about the threats that are, you know, coming down the pike. We had Eric Goodman from Visa, Julien Laurent from Group-IB, and Dajana from Wolfe. Uh, they do gift card processing. That was a really good I mean those three really held their own and did a great job. Julien had a lot of good things to say about how they approach fraud. They uh are looking at threat intel first and using a lot of the information that they get from the dark web to fuel their decisioning. They also talked about real time uh collaboration and real-time data sharing. He had some really good points that I wish I could remember but in the moment they were really I was like wow that's really good. I wish I could write that down, but I'm the moderator, so I can't. Um, we did not record our sessions. I wish we could have, but um, from an AV perspective, it was just one expense we couldn't do. Um, but also, I think it's important for people to attend conferences in person. I just don't think you get the same experience or the same you know connections or the same uh takeaways as if you know by attending remotely. So that was why we didn't do that and because a lot of our merchants couldn't have we couldn't have put any of those on YouTube afterwards or even shared them on my podcast because as I mentioned with one other merchant uh there's several merchants that spoke at the conference that can speak at conferences as long as they're not recorded. But they can't speak you know on YouTube or on a podcast or something like that. So um we you know a lot of them work for very large companies and don't want the information about the type of fraud that they see to be leaked to the media or not even leaked but just shared with the media if it's in a public space. So that's why we didn't record the sessions and that's why I can't go back and remember all the brilliant things that Julien said but it was a good session. Um then we had a panel that was a powerhouse panel um with Stephanie at PlayStation. We had Rebekah Moody at Darwinium uh doing the moderating and she was great. Uh she also handed out chocolates from the UK to the entire audience. So that helped too. Uh it was kind of mid morning so that was a nice pick me up. Uh we had Jon Ferrari uh works for an online platform. I know that. And then Jen from uh Reverb. So you know three women, one guy that held his own. Um really great information and takeaways. This was uh this and the um economics of payment fraud and the build and buy session that I'm about to talk about were probably well and my session too um were probably the best. I mean those panels were just really good and that was my intention. I wanted to have different formats of sessions, some presentations, some panels, some fireside chats, but that sometimes panels I zone out especially if they don't have like slides or anything. I just kind of like especially if it's after lunch or you know after breakfast or you know well when coffee is running out so like before lunch I I wanted to have engaging people that really do their stuff and they didn't disappoint. Some of the statistics that came from that session uh Rebekah shared some of the statistics from their own data. I don't remember if it was billions or millions and that makes a big difference but a lot of transactions in two quarters and they found that account takeover is up 3x. That's crazy. Just in the last two quarters. What is to blame for that? Well, I talked about it in my, you know, first session. It's it's AI. It's so much easier to fish for customer information. It's so much easier to get credentials now for consumers and then it's easy to put it into, you know, an AI platform and just start credential stuffing. And doing it at a speed and then learning from that data and learning okay this is how I get through the process of account login for these type of companies and then sometimes that leads to a purchase on the stored payment method. Sometimes that leads to a purchase on a new payment method. And a lot of times it means robbing the account of its stored value whether that's a gift card a store credit or loyalty points. ATO's being up three times unfortunately doesn't surprise me because of the conversations I've been having with merchants. But it is something that I think we need to be aware of and uh really try to combat quickly because that's just in the last two months. I don't even want to know what it's going to be in a year. Traffic from agents they saw were nine times riskier than human traffic. Um I think that's because fraudsters are early adopters and they adopt new technology faster than humans do. Um huge volume of bot attacks for credential stuffing which goes with that 3x multiplier for ATO's. Uh they found that web transactions are riskier than mobile which I I think sometimes changes over time um especially with emulators and things like that. But I just thought that was an interesting anecdote.
Karisse Hendrick
46:43
And then only one in four transactions or the traffic from agents, one in four are self-declaring. So only one in four have a human behind it that are saying, "Hey, I'm behind this transaction." Um I have seen some news recently that several very large e-commerce companies are now all pledging to one specific um company that's doing a protocol for uh Agentic Commerce. So, I'm keeping an eye on that. Trying to see what else I wrote down in my stats. I think that was it for that session, but there were some really good takeaways um from the practitioners as well as to what they're doing. You know, we called the session the anatomy of sophisticated ATOS because, you know, we've had account takeover for about 15 years now and it they're just getting more and more sophisticated, especially with better tooling and NI and everything else. Then my good friend Holly Sandberg uh talked about the fraud metrics your exe your executives actually care about and how to create an executive scorecard. This was probably the second most mentioned uh session that people talked about and that is because we struggle with talking to our executives and relaying information and providing them with the information they want in the way that they want it. And Holly said similar things as as uh the person from Best Buy but different as well and you know talked about things that those of us that are in fraud inherently do, right? Like we really care about the details. So we send the long emails and we, you know, talk about the details in a presentation and we provide really detailed, you know, uh reporting where they want to know high level. And then she showed how to create like an executive scorecard and which uh metrics to use and how to present them. Um this was also a session that I asked for her to do and she did it very well. Of course she did. She's been in the industry a very long time and has worked for some very large brands in her tenure and uh has learned a lot especially in the last several years. Um I think she would say that just as much I mean as I have learned a lot. We all have. That was when Sudhir did his deep dive on refund fraud. I know that room was packed. Um, but I I don't know a ton about what was talked about, but I know that people found it very helpful. Um, and it was very collaborative, which was important. It was very much, you know, oh yeah, we tried this and it didn't work, but we tried that and it did work. That type of thing. The next panel was one that I mentioned just a few minutes ago. Making the most of build and buy.
Karisse Hendrick
49:29
The premise of this session was because for the longest time there's been a debate in our industry, do we build it or do we buy it when it comes to fraud tooling um and your risk stack? And now it seems like the conversations I've been having um and that our ambassadors have been having have been around making the most of building some of it but buying other parts um and having kind of this Frankensteined risk stack um of different tools. And the people that were on that panel, I mean, I know three of them personally that I know the merchants personally and these are really standup guys that know their stuff. Um, and then we had two sponsors that also joined that I thought provided a lot of value as well. That was something that um, you know, when we talked to the sponsors that we wanted to speak on uh, sessions, we said this is not a sales opportunity. This is an opportunity to give back to the industry and share your perspective. And with that will come people being, you know, curious about your solution and curious about your product and, you know, wanting to meet you. But this isn't the time for that. This is the time for really providing those takeaways, those practical and tactical takeaways that they can use to make better decisions. And you know, so that was really good. This panel was an all-star panel. It was Andreas from Booking.com. Uh Dan Pinto from Fingerprint, he's the CEO. Mark Porteous uh from Portius Risk and Fraud Advisory Services. Previously, Mark was the head of fraud for StockX. Andre Ferraz, who is the CEO of Incognia, and then Jarrod Price, who is the head of fraud engagement for uh InComm Payments, who do a lot of uh they process and they issue and process millions of prepaid credit cards and gift cards um both on their own bins as well as for very large retailers. So these five had I mean I actually did the math when I was sitting there and I I mentioned it after their session. They have over 50 or 60 years of fraud experience between all five of them. It was incredible. Um lots of great t takeaways, things to consider when you're building and when you're buying. And then you know what are some types of tools that are better to build inhouse than others? You know, things to watch out for, things to think about as you're bringing on a third-party provider, how to manage those third party provider relationships, which if I had another session slot, that would have been one of uh the sessions that we did.
Karisse Hendrick
52:19
After that, Maryling Yu and Chris, Maryling Yu from Accertify, and Chris from Reverb um talked about how merchants are using cyber signals to identify payment fraud. Uh is a little bit of what we talked about in the first session of the day with um Eric, Julien, and Dajana about, you know, um how fraud is moving upstream and downstream. But they were talking about how Accertify did this incredible research. I think I shared I know I shared it a couple months ago um here on the podcast, but they talked about how the data shows the performance data of online merchants actually increases when they are working with their cyber team. They were able to do find a math equation that would be able to show the performance of a fraud department and depending on how many instances they were and how they worked with their cyber team, their performance went up. I thought that was really telling of the times and I asked them to share that. And then Chris shared um how that played out in real life and how that you know that data played out in uh in Reverb's decisioning as well as the attacks that they're seeing and how they are having to work with the cyber department and even use some of their tools to be able to identify fraud better. And then there was a a deep dive um about catching an account takeover before it strikes. Uh that was by um Colin at Socure and Dajana at Wolfe. Then to close out the uh the main session, we had Aaron Frye from Fry Consulting Services. He's a former practitioner of fraud. And Jarrod Price from InComm, he did double duty that day and did it very well. Um talking about uniting merchants and their PSPs to close fraud gaps. I thought they actually came to me with this session idea and I thought it was a really unique one and they did a really good job. Not surprising. They're both great great people with tons of experience. They did a good job talking about how they kind of push on their PSPs sometimes for more data um and how they can use them to, you know, close fraud gaps with that, you know, with learning more of that data. And then there was one more there was a war room for retailers and then there was uh in the deep dive room and then the fraud machine how fraud is a service operates scales and why collective defense matters by Steve Diamond at RH-ISAC. That was another full room. And uh I heard a few people say I didn't think about using threat intel in that way. Um, and Steve comes from a sigant exper from sigant experience in the military similar to Matt Vega. So, he had a lot of good uh takeaways from the dark web that he was able to share as well. Okay, I just walked you through a two-day agenda and tried to give little nuggets of information from each session. Um, as you can tell, it was full of great information. I've received some incredible uh notes from people that attended thanking me for the conference, which I don't know if happen if that happens at other events, but I appreciate it. One of them, one of our ambassadors said that her team told her that she can no longer attend MFA because she came back fired up with all these ideas on how to do things and they were just like, "Oh, great."
Karisse Hendrick
55:50
So, I appreciated that compliment. Um I was like, "Well, you're coming back, right?" She was like, "Absolutely." Um but yeah, we had, you know, over 150 of the smartest practitioners in in e-commerce, and I know that's going to grow. Um but it felt it didn't feel small at all. It felt really right. Like it felt like we were building a community and building an alliance, and that was really our purpose. So, thank you to everyone that attended. Thank you to everyone who has been supportive and who has understood that my calendar has been really busy the last several months. I should probably thank my family too for that. Um it's been a lot of work, but how was it rewarding and uh I'm already looking at next year. We're already looking at next year. Um, I will obviously share information on that when we have it, but also make sure you follow me on LinkedIn because I will post about it um a lot when once it comes up as well. Or follow the Merchant Fraud Alliance on LinkedIn. That's even better. You'll learn um daily, you know, information almost daily about the conference um as it's coming up and so it can be on your radar. Uh we do plan to have some year round touch bases with our attendees and our ambassadors but primarily we are a conference company. So that was another question that was asked. Um we will have some collaborative calls and touch bases because fraud doesn't happen just once a year. Um but we're not a membership organization. You don't have to pay a membership fee. Um we are primarily a conference company. All right. That is it for me for today. I feel like I did a pretty good data dump. Uh if you have any additional questions um or if you want to maybe get a little more information about a session or two, I might be able to put you in touch with one of the speakers or um yeah, I I don't know. I want to help as many people as possible learn about fraud. So, uh, you know, however we can do that or if you want me to try to have one of the speakers, you know, attend or come on to the podcast, I can. Like I said, not all of them can because of their comm's rules, um, and PR rules, but, uh, we can give it a try. So, with that, I'm going to wish you a great rest of the week. I, uh, know it was kind of short for most people in the US, um, but I will look forward to speaking with you more next week.
View full transcript
