Back to Glossary

Fraud & AML

The difference between card-present and card-not-present fraud detection

Card-present (CP) fraud detection relies on physical card verification at point-of-sale terminals, while card-not-present (CNP) fraud detection uses behavioral analytics and transaction patterns for remote payments. CNP fraud rates are typically 3-5× higher than CP fraud.

Why It Matters

CNP fraud accounts for 78% of card fraud losses despite representing only 65% of transaction volume, costing merchants $7.60 per $100 of fraud compared to $2.40 for CP fraud. Financial institutions lose approximately $11.27 billion annually to CNP fraud, with chargeback rates averaging 0.9% for e-commerce versus 0.1% for in-store transactions.

How It Works in Practice

  1. 1Validate physical card presence through EMV chip authentication and PIN verification for CP transactions
  2. 2Analyze transaction velocity patterns, detecting unusual spending frequency within 15-minute windows for CNP screening
  3. 3Cross-reference device fingerprinting data against known fraud databases for online payment authentication
  4. 4Apply machine learning models that score CP transactions in 50-100 milliseconds versus 200-500 milliseconds for CNP
  5. 5Trigger step-up authentication for CNP transactions exceeding risk thresholds, typically above $250-500 depending on merchant category

Common Pitfalls

Over-relying on EMV security for CP transactions ignores emerging threats like shimming and social engineering attacks targeting PIN compromise

CNP fraud models may violate GDPR Article 22 automated decision-making requirements if they lack human review mechanisms for high-value declines

False positive rates for CNP detection often reach 10-15%, creating regulatory compliance issues under PSD2 strong customer authentication mandates

Key Metrics

MetricTargetFormula
CP Fraud Detection Rate>99.2%Detected CP fraud transactions / Total CP fraud attempts × 100
CNP False Positive Rate<8%Legitimate transactions declined / Total CNP transactions processed × 100
Average Detection Latency<150msSum of all fraud scoring response times / Total transactions scored

Related Terms