Arcot TransFort Cardholder Protection System for Issuers and Merchants - Overview

The Card Authentication Challenge
Card issuers and online merchants need to authenticate the identity of card users to offset the rise in online fraud during card not present transactions. You also need to ensure that you do not slow down the transaction or frustrate your customers. You want a customizable authentication solution that verifies the identity of the purchaser during the checkout process, and gives you the opportunity to enhance and personalize each transaction.

The Arcot TransFort Solution
Arcot is the de facto standard for card authentication and fraud reduction, for both issuers and merchants. We co-wrote the 3-D Secure protocol with Visa in 2000, and created a simple yet effective way to protect against fraudulent online transactions. All three major card brands use this protocol in their cardholder authentication programs: Verified by Visa, MasterCard SecureCode, and JCB J/Secure. Cardholders enroll their cards by registering a password. When they shop on participating merchants web sites, registered cardholders must provide this secondary authentication. When used by merchants, some or all of the fraud risk for Card Not Present transactions shifts back to the card issuer.

Arcot offers you the choice of a fully hosted service managed by Arcot, or a licensed product for you to install and manage yourself. We host the service in a SAS 70-certified, PCI-compliant data center, with full system back up and built in redundancy for high availability. Backed by a team of trained and knowledgeable client service personnel, the service offers a rapid and easy way to ensure authentication for your users, without the costs of building and managing your own data center.

• If you are an issuer, Arcot TransFort for Issuers enables you to offer an enrollment and authentication service to your cardholders and merchants that are fully compliant with Visa, MasterCard, and JCB security standards.
  
  
• If you are a merchant, Arcot TransFort for Merchants allows you to authenticate the identity of any cardholder who has enrolled in a 3-D Secure compliant program and take advantage of the liability protection offered by the Issuers.

TransFort for Issuers

End-to-end coverage
Provides one platform for end-to-end coverage—from issuer to payment organization to merchant—as well as multi-protocol compliance for Verified by Visa, JCB J/Secure, and MasterCard SecureCode.

Easy to deploy and manage
Offers flexible and configurable deployment as well as simple management, administration, reporting, branding, and enrollment.

Simple integration and customization
You can customize TransFort to meet your business needs. It integrates with a multitude of other front-end, back-end, or customer-facing applications and data sources, including CRM, and fraud and risk management solutions.

TransFort for Merchants

Solution to fit every merchant’s needs
Supports single or multi-merchant environments, payment gateways or acquirer solutions. TransFort operates on all major computer platforms and operating systems.

Maximum protection, minimum disruption
Provides maximum protection with minimum disruption to your users’ experience and your existing processes and transaction flow.

Out-of-the-box deployment
Simple “out-of-the-box” installation, requiring only minimal configuration and HTML updates to existing pages on your commerce server. The software itself requires only a small plug-in for a lightweight, small ‘footprint’ deployment.

Additional Protection Against Fraud
You can add Arcot RiskFort risk-based authentication to TransFort to provide an additional layer of protection for card issuers and merchants against fraudulent shoppers who opt-out of enrolling their stolen cards in the 3-D secure programs. Invisible to legitimate cardholders, RiskFort analyzes a range of data in the context of each transaction and measures the fraud potential of each transaction. Legitimate users who engage in behavior that is within their normal activity profile and your policies do not see a change in their online experience.