Most of us get impatient at the credit card stage when booking a holiday. We say, "Let me just fill out this form and finish the transaction." However, at this very point, the 3D Secure infrastructure on e-commerce sites is the only steel door between your money and cyber pirates.
That Critical Code from the Bank
The site where you enter your card information, even if it is fake (phishing), if it claims to support the 3D Secure system, your bank will send you an SMS. The real detail is inside this SMS: * Wrong Scenario: "Your code: 12345. Do not enter your code for international stock market transactions." (But you are buying a hotel!) * Correct Scenario: "Your code: 12345. For your 15,000 TL transaction at X Tourism Inc."
You must read not just the code in the SMS, but to whom the money is going. Most fraudsters cannot clone the 3D gateway, but they will redirect you to pay a fake intermediary institution.
The Trap Behind Wire Transfer and EFT Discounts
Fraudsters found this tactic to bypass the 3D Secure obstacle: "Instant 15% discount with wire transfer!" A bank transfer is one of the hardest transactions to reverse. The "Service not delivered (Chargeback)" insurance of credit card companies does not apply to wire transfers or cryptocurrencies. Therefore, do not purchase a holiday from any site that does not include a 3D code and a corporate Virtual POS, even if they offer a 50% discount.
Our Sahte Site Tespit mechanisms, developed with our technical infrastructure, also check the origin of the POS integrations in the background.
Frequently Asked Questions
Does the 3D Secure system work on every fake site?
No. Some fraudulent sites mimic the 3D Secure page and take you through a fake confirmation screen instead of the real bank. Always verify the company name performing the transaction in the SMS from the bank.
Do I have chargeback rights if I pay by wire transfer?
No. Unlike credit card chargebacks, payments made via bank transfer or EFT cannot be reversed. Use only 3D Secure-supported credit cards for holiday shopping.
How can I distinguish a fake POS page from a real one?
Check the domain name in the browser address bar; fake POS pages usually open with a different domain name that looks similar, rather than the bank's official address. It is mandatory that the transaction amount and recipient name in the SMS exactly match the reservation details.
