Stay with the question.
Longer reads for the problems already on your desk. Principles in theory; working methods here.

Read deeply.
Take something back.
Disputes, accounts, analysis and the practical work between them. Every article ends with a desk card and a question worth discussing.
Explore the continuing seriesPaying for players who never play.
CPA pays for an event. Revenue share pays for a relationship. The quality of an affiliate's traffic is only visible in what the cohort does after the commission has been paid.
Open articleThree layers of a takeover.
Session, device and behaviour each tell part of the story. A takeover is only visible where the three disagree with the customer's past.
Open articleA thousand cards, one question.
How to read an enumeration burst as a defender, what it costs the merchant and the acquirer, and what to do in the first hour that you will not regret in the second.
Open articleOne welcome bonus, forty welcomes.
A bonus is a price the operator pays for a player. Multi-accounting is the same price paid forty times for one. The evidence is in the deposits, not the sign-ups.
Open articleWrite the note for the person who reopens it.
A case-note template that separates what was seen from what was concluded, and survives a representment, an acquirer query or an audit.
Open articleTwo prior transactions and a matching footprint.
What Visa's Compelling Evidence 3.0 asks a merchant to hold, checked against the applicable pathway, and what matching records still do not prove.
Open articleThe money has to leave somewhere.
A deposit tells you where money came from. A withdrawal to a different method tells you where it wants to go. The closed-loop rule, its exceptions and the source-of-funds question all live in the gap between the two.
Open articleA chargeback arrives in its own time.
Disputes land weeks after the sale they belong to. Measure by the month of sale, or the ratio you report will describe the wrong month.
Open articleWhen the cardholder is the customer.
A fraud dispute raised by the person who made the purchase is a different problem from theft. How to tell them apart without deciding too early.
Open articleA shared attribute is a lead, a ring is a finding.
How to move from 'these accounts share something' to 'these accounts are one operation', and how to say which is which.
Open articleReading a merchant before the first transaction.
Underwriting is a forecast with a review date. The PSP is deciding what one merchant will do to a portfolio ratio it does not control, and which terms make that forecast safe to be wrong about.
Open articleThe first fifteen minutes.
A runbook for the moment an authorisation burst appears: confirm, scope, act narrowly, write it down, and only then widen.
Open articleWhat a decline is trying to tell you.
A decline is a message from someone who saw something you did not. Learn who sent it, what they saw, and when a retry is a kindness and when it is a cost.
Open articleFour families of dispute, four kinds of evidence.
Why the first digits of a reason code tell you what the issuer is asking, and what a reply would have to prove.
Open articleThe refund that was never a return.
Refund abuse hides inside a process that exists to keep customers happy. How to see it without punishing the customers who are simply unhappy.
Open articleA rule is a claim. Write it like one.
A four-part template for fraud rules that a colleague, an acquirer or an auditor can read, test and switch off.
Open articleCompared with what, exactly.
Building a baseline by weekday and hour, reading a z-score or a ratio in plain words, and keeping the denominator in the room.
Open articleThe trial that keeps on giving.
Subscriptions turn one risk decision into a recurring one. How to read trial abuse, rebill disputes and the cohort that tells you which is which.
Open articleA person who passes every check and does not exist.
A KYC pass answers narrow questions about documents and data. Whether one real person sits behind the account is a different question, and it is answered over time and in company.
Open articleWho carries the risk when 3DS is skipped.
A working decision frame for SCA exemptions, liability shift and the customers in between.
Open articleThe threshold is a price, not a score.
How to choose where a rule fires by pricing both kinds of error, with a worked matrix you can rebuild in a spreadsheet.
Open articleTwo ratios, two denominators, one portfolio.
Visa's VAMP and Mastercard's ECP count different things over different months. A working guide to what moves each number.
Open articleA velocity rule is a sentence with four parts.
Count what, per what, over how long, against what number. Most velocity rules that go wrong are missing one of the four, or were written for a business that no longer exists.
Open articleWhat the acquirer asks, and why.
The five questions an acquirer puts to a PSP about a merchant near a monitoring threshold, and the records that answer them.
Open articleOriginal teaching material. Business names, scenarios and datasets are fictional unless an external source is explicitly identified. RSS feed