Download PDF
LexisNexis® Risk Solutions Blocks Identity Testing Attacks on Restaurant Chain’s Mobile App
Technology Category
- Analytics & Modeling - Predictive Analytics
- Cybersecurity & Privacy - Application Security
- Cybersecurity & Privacy - Identity & Authentication Management
Applicable Industries
- Food & Beverage
Applicable Functions
- Business Operation
- Sales & Marketing
Use Cases
- Fraud Detection
Services
- Cybersecurity Services
- System Integration
The Challenge
As an incentive to sign up for an online account, this restaurant chain offered a complementary food item with every new registration to the app. It set a maximum threshold for accounts per user, but quickly found this was being abused as customers were signing up for multiple accounts from their device to take advantage of free food. Although this was hitting the company’s bottom line, a bigger problem soon emerged as a result of the mobile app accepting online payments. The company started seeing a high volume of account takeover attempts and chargebacks, which appeared to indicate an infiltration of organized cybercriminals who were attempting to log in to customer accounts with stolen/spoofed identity credentials, and test stolen credit card data. This restaurant chain needed a robust fraud solution that could accurately detect anomalous or high-risk behavior at login, as well as provide better visibility into a user’s true digital identity to understand whether they were abusing free incentive offers.
About The Customer
The customer is a large U.S. restaurant chain that launched a mobile app to enhance customer experience by allowing them to order and pay for food on their mobile devices. The app was designed to reflect the company's straightforward and customer-centric ethos online. However, the introduction of incentives and rewards for new account registrations led to abuse, and the online payment method exposed the company to fraud. The restaurant chain needed a solution to detect and prevent fraudulent activities while maintaining a friction-free experience for legitimate users.
The Solution
Leveraging LexisNexis ThreatMetrix digital identity intelligence, this restaurant chain can accurately detect and stop fraudulent and abusive activity in near real-time without creating friction for legitimate users. The LexisNexis Digital Identity Network collects and processes global shared intelligence from millions of daily consumer interactions, including logins, payments, and new account applications. By analyzing the myriad connections between devices, locations, and anonymized personal information, the company can create a unique digital identity for each user. Behavior that deviates from this trusted digital identity can be accurately identified in near real-time, alerting the restaurant chain to incentive abuse and potential fraud. Key features of the ThreatMetrix solution include Smart ID, which identifies returning users that wipe cookies, use private browsing, and change other parameters to bypass device fingerprinting, and deep connection analysis technologies that give a clearer view of suspicious events. Proxy piercing technology examines TCP/IP packet header information to expose both the Proxy IP address and True IP address, helping to detect and flag suspicious behavior for review, step-up authentication, or rejection before a transaction is processed.
Operational Impact
Quantitative Benefit
Related Case Studies.
Case Study
The Kellogg Company
Kellogg keeps a close eye on its trade spend, analyzing large volumes of data and running complex simulations to predict which promotional activities will be the most effective. Kellogg needed to decrease the trade spend but its traditional relational database on premises could not keep up with the pace of demand.
Case Study
HEINEKEN Uses the Cloud to Reach 10.5 Million Consumers
For 2012 campaign, the Bond promotion, it planned to launch the campaign at the same time everywhere on the planet. That created unprecedented challenges for HEINEKEN—nowhere more so than in its technology operation. The primary digital content for the campaign was a 100-megabyte movie that had to play flawlessly for millions of viewers worldwide. After all, Bond never fails. No one was going to tolerate a technology failure that might bruise his brand.Previously, HEINEKEN had supported digital media at its outsourced datacenter. But that datacenter lacked the computing resources HEINEKEN needed, and building them—especially to support peak traffic that would total millions of simultaneous hits—would have been both time-consuming and expensive. Nor would it have provided the geographic reach that HEINEKEN needed to minimize latency worldwide.
Case Study
Energy Management System at Sugar Industry
The company wanted to use the information from the system to claim under the renewable energy certificate scheme. The benefit to the company under the renewable energy certificates is Rs 75 million a year. To enable the above, an end-to-end solution for load monitoring, consumption monitoring, online data monitoring, automatic meter data acquisition which can be exported to SAP and other applications is required.
Case Study
Coca Cola Swaziland Conco Case Study
Coco Cola Swaziland, South Africa would like to find a solution that would enable the following results: - Reduce energy consumption by 20% in one year. - Formulate a series of strategic initiatives that would enlist the commitment of corporate management and create employee awareness while helping meet departmental targets and investing in tools that assist with energy management. - Formulate a series of tactical initiatives that would optimize energy usage on the shop floor. These would include charging forklifts and running cold rooms only during off-peak periods, running the dust extractors only during working hours and basing lights and air-conditioning on someone’s presence. - Increase visibility into the factory and other processes. - Enable limited, non-intrusive control functions for certain processes.
Case Study
Temperature Monitoring for Restaurant Food Storage
When it came to implementing a solution, Mr. Nesbitt had an idea of what functionality that he wanted. Although not mandated by Health Canada, Mr. Nesbitt wanted to ensure quality control issues met the highest possible standards as part of his commitment to top-of-class food services. This wish list included an easy-to use temperature-monitoring system that could provide a visible display of the temperatures of all of his refrigerators and freezers, including historical information so that he could review the performance of his equipment. It also had to provide alert notification (but email alerts and SMS text message alerts) to alert key staff in the event that a cooling system was exceeding pre-set warning limits.
Case Study
Coca-Cola Refreshments, U.S.
Coca-Cola Refreshments owns and manages Coca-Cola branded refrigerators in retail establishments. Legacy systems were used to locate equipment information by logging onto multiple servers which took up to 8 hours to update information on 30-40 units. The company had no overall visibility into equipment status or maintenance history.
