A payment method for online, mobile, and telephone orders where the physical card is not present. CNP transactions rely on digital data such as the card number, expiration date, CVV code, and billing address. Unlike in-person transactions, where chip, tap, or swipe methods confirm card authenticity, CNP payments carry a higher risk of fraud because criminals can use stolen card details without needing physical possession of the card. Merchants and payment processors implement tools like 3-D Secure (3DS), address verification systems (AVS), and fraud detection algorithms to mitigate this risk.
Fraud Prevention Tools
CNP fraud prevention tools include 3DS, tokenization, CVV validation, and behavioral analytics.
- 3-D Secure (3DS): An authentication protocol that shifts liability to the issuer if used correctly.
- Tokenization: Replaces sensitive card data with unique identification symbols.
- CVV Validation: Checks the card verification value to ensure the card is present during the transaction.
- Behavioral Analytics: Analyzes transaction behavior, device fingerprints, and geolocation data in real time.
Liability Management
Merchants generally bear more responsibility for fraudulent CNP transactions unless they use approved authentication protocols that shift liability to the issuer.
- Card Network Rules: Under card network rules, merchants often assume liability for fraudulent CNP transactions.
- Authentication Protocols: Approved authentication protocols can shift liability to the issuer.
Use Cases
CNP transactions are common in online stores, subscription services, mobile payments, and phone orders.
- E-Commerce Checkouts: Online stores where customers enter card details manually.
- Mobile App Purchases: In-app purchases made through mobile applications.
- Telephone Orders: Orders placed over the phone where card details are provided verbally.
- Recurring Online Subscriptions: Automatic payments for subscription services.