Card-not-present fraud: using crime scripts to inform crime prevention initiatives

Bodker, Amanda; Connolly, Phil; Sing, Oliver; Hutchins, Benjamin T.; Townsley, Michael; Drew, Jacqueline M.

doi:10.1057/s41284-022-00359-w

Secur J

2022

DOI: 10.1057/s41284-022-00359-w

|View full text |Cite

Card-not-present fraud: using crime scripts to inform crime prevention initiatives

Amanda Bodker

Phil Connolly²,

Oliver Sing³

et al.

Abstract: Growth in the online retail sector and improvements in card-present authorisation measures have led to substantial increases in card-not-present (CNP) fraud, particularly in the online retail sector. This article uses crime script analysis to understand the commission process of CNP fraud in online retail settings. Drawing upon previous crime script articles and industry reports we outline the steps involved in the three stages of CNP fraud: preparation; doing it; and getting away. From this script, points of … Show more

Help me understand this report

Search citation statements

Order By: Relevance

Paper Sections

Select...

Citation Types

Supporting

Mentioning

Contrasting

Year Published

2024

2025

Publication Types

Select...

Article3

Relationship

Self Cite0

Independent3

Authors

Journals

Cited by 3 publications

References 31 publications

Supporting

Mentioning

Contrasting

Order By: Relevance

Examining the cyclical nature of crimes: A looped crime script of data theft from organizational networks

Madarie,

Weulen Kranenbarg,

de Poot

2025

Computers in Human Behavior Reports

View full text Add to dashboard Cite

Examining the cyclical nature of crimes: A looped crime script of data theft from organizational networks

Madarie,

Weulen Kranenbarg,

de Poot

2025

Computers in Human Behavior Reports

View full text Add to dashboard Cite

Introducing object-oriented modelling to cybercrime scripting: visualisation for improved analysis

Madarie,

Weulen Kranenbarg,

de Poot

2024

Crime Sci

View full text Add to dashboard Cite

Crime script analysis as a methodology to analyse criminal processes is underdeveloped. This is apparent from the various approaches in which scholars apply crime scripting and present their cybercrime scripts. The plethora of scripting methods raise significant concerns about the reliability and validity of these scripting studies. In this methodological paper, we demonstrate how object-oriented modelling (OOM) could address some of the currently identified methodological issues, thereby refining crime script analysis. More specifically, we suggest to visualise crime scripts using static and dynamic modelling with the Unified Modelling Language (UML) to harmonise cybercrime scripts without compromising their depth. Static models visualise objects in a system or process, their attributes and their relationships. Dynamic models visualise actions and interactions during a process. Creating these models in addition to the typical textual narrative could aid analysts to more systematically consider, organise and relate key aspects of crime scripts. In turn, this approach might, amongst others, facilitate alternative ways of identifying intervention measures, theorising about offender decision-making, and an improved shared understanding of the crime phenomenon analysed. We illustrate the application of these models with a phishing script.

show abstract

Impact, Compliance, and Countermeasures in Relation to Data Breaches in Publicly Traded U.S. Companies

Rodrigues,

Serrano,

Vergara

et al. 2024

Future Internet

View full text Add to dashboard Cite

A data breach is the unauthorized disclosure of sensitive personal data, and it impacts millions of individuals annually in the United States, as reported by Privacy Rights Clearinghouse. These breaches jeopardize the physical safety of the individuals whose data are exposed and result in substantial economic losses for the affected companies. To diminish the frequency and severity of data breaches in the future, it is imperative to research their causes and explore preventive measures. In pursuit of this goal, this study considers a dataset of data breach incidents affecting companies listed on the New York Stock Exchange and NASDAQ. This dataset has been augmented with additional information regarding the targeted company. This paper employs statistical visualizations of the data to clarify these incidents and assess their consequences on the affected companies and individuals whose data were compromised. We then propose mitigation controls based on established frameworks such as the NIST Cybersecurity Framework. Additionally, this paper reviews the compliance scenario by examining the relevant laws and regulations applicable to each case, including SOX, HIPAA, GLBA, and PCI-DSS, and evaluates the impacts of data breaches on stock market prices. We also review guidelines for appropriately responding to data leaks in the U.S., for compliance achievement and cost reduction. By conducting this analysis, this work aims to contribute to a comprehensive understanding of data breaches and empower organizations to safeguard against them proactively, improving the technical quality of their basic services. To our knowledge, this is the first paper to address compliance with data protection regulations, security controls as countermeasures, financial impacts on stock prices, and incident response strategies. Although the discussion is focused on publicly traded companies in the United States, it may also apply to public and private companies worldwide.

show abstract

scite is a Brooklyn-based organization that helps researchers better discover and understand research articles through Smart Citations–citations that display the context of the citation and describe whether the article provides supporting or contrasting evidence. scite is used by students and researchers from around the world and is funded in part by the National Science Foundation and the National Institute on Drug Abuse of the National Institutes of Health.

Contact Info

customersupport@researchsolutions.com

10624 S. Eastern Ave., Ste. A-614

Henderson, NV 89052, USA

This site is protected by reCAPTCHA and the Google Privacy Policy and Terms of Service apply.

Blog Terms and Conditions API Terms Privacy Policy Contact Cookie Preferences Do Not Sell or Share My Personal Information

Made with 💙 for researchers

Part of the Research Solutions Family.

Card-not-present fraud: using crime scripts to inform crime prevention initiatives

Cited by 3 publications

References 31 publications

Examining the cyclical nature of crimes: A looped crime script of data theft from organizational networks

Examining the cyclical nature of crimes: A looped crime script of data theft from organizational networks

Introducing object-oriented modelling to cybercrime scripting: visualisation for improved analysis

Impact, Compliance, and Countermeasures in Relation to Data Breaches in Publicly Traded U.S. Companies

Contact Info

Product

Resources

About