At a glance
- Client
- An online retailerName withheld for confidentiality
- Industry
- Retail
- Service
- Cybersecurity
- Scope
- Bot protection, fraud detection and PCI DSS programme
The challenge
Automated bots tested stolen card numbers against the checkout and tried leaked passwords against customer accounts. Chargebacks rose, genuine customers had accounts hijacked, and the payment provider raised concerns.
The retailer also needed to show PCI DSS compliance to keep accepting cards.
Our approach
Separate bots from people
Bot management filters automated traffic at login and checkout without adding friction for real shoppers.
Score every order
Fraud models assess each order using device, behaviour and payment signals.
Protect accounts
Unusual logins trigger step-up verification, and leaked passwords are blocked.
Achieve PCI DSS
We reduced the card data footprint and prepared the evidence for assessment.
The solution
Bot traffic is now stopped at the edge, risky orders are held for review, and suspicious logins require extra verification. Genuine customers check out as smoothly as before.
The retailer meets PCI DSS requirements with a smaller, easier-to-protect card data environment.
Results
- Card-testing bots blocked before checkout
- Fewer customer accounts taken over
- Risky orders held for review automatically
- PCI DSS compliance achieved and maintained
Technology used
- Bot management
- WAF
- Fraud scoring models
- Tokenisation
- PCI DSS
Facing a similar challenge?
Tell us what you are working on. We will walk you through how we would approach it, with no obligation.