8 Fraud Prevention & Protection Measures in Google Checkout
By Angsuman Chakraborty, Gaea News NetworkWednesday, August 2, 2006
Eight different ways Google Checkout prevents and protects you from fraudulent credit card transactions, reimburses you for eligible chargebacks and even fights on your behalf:
Update: See the comments at the end for some negative experiences with Google checkout. Consider them before commiting to Google checkout.
Google performs industry-standard Address Verification System (AVS) and Card Verification Value (CVV) checks to prevent credit card fraud.
The Address Verification System is used to verify the identity of the person claiming to own the credit card. The system will check the billing address of the credit card provided by the user with the address on file at the credit card company.
The Card Security Code (CSC), sometimes also called Card Verification Value or Code (CVV or CVC), is a security feature for credit card transactions, giving protection against credit card fraud.
Most debit and credit cards have two card security codes. The first, often called CVC1 or CVV1, is encoded in the magnetic stripe of the card and is used for in-person transactions. The second, known as CVV2 or CVC2, is used to secure “card not present” transactions occurring over the Internet, by mail, or over the phone.
As Google Checkout processes transactions over the internet I am assuming Google is using CVV2. The CVV2 is a 3 or 4 digit value printed on the card, but not available on the magnetic stripe. The number is generated when the card is issued, by encrypting the card number and expiry date under a key known only to the issuing bank. Supplying this code in a transaction is intended to verify that the customer has the card in their physical possession.
Online merchants who require the CVV2 in their transactions are forbidden from storing these details once the transaction is complete. This way, if a database of transactions is compromised, the CVV2 is not included, and the stolen credit card numbers are less useful.
Advanced risk modeling
Google employs advanced risk modeling to detect fraudulent transaction cues across Google services. Google also actively leverages external, cross-industry resources-such as worldwide fraud blacklists-to prevent fraudulent users from accessing Google Checkout in the first place. This is proactive prevention and is not used by most merchants on the internet.
Automatic fraud detection
Google proactively identifies and filters out fraudulent transactions. All fraudulent transactions are immediately cancelled after being detected. Any pending or in progress orders associated with the same credit card will also be cancelled to protect you.
Supplemental manual review
If a transaction appears to be high-risk, Google will restrict the order to protect you from shipping the order to a fraudulent buyer. During this time, our Google Checkout specialists will review the situation further, cancel the transaction if it’s fraudulent, or release it if it’s valid. We may also contact you directly as a backup precaution.
Information sharing
Google Checkout provides buyer verification information within the buyer’s order details to help you run your own fraud checks as needed. If you’re concerned about a particular order, or if you’re unable to contact the buyer with the information we provide, you have the option to cancel the order to avoid further risk.
Chargeback resolution
All merchants are covered by Chargeback Resolution Policy: our specialists will evaluate all chargebacks you receive through Google Checkout and, whenever possible, dispute them on your behalf.
Payment Guarantee Policy
As an additional benefit under Chargeback Resolution Policy, Google also guarantees payment for all transactions that are eligible for Google’s Payment Guarantee Policy (see below for eligibility). Google will reimburse you within a week of receiving and reviewing the required information.
For all eligible transactions, Google will completely reimburse you for any chargebacks resulting from claims of unauthorized purchases and non-receipt of goods. To qualify for this additional protection, you must meet the following criteria:
* You shipped the order to the buyer’s shipping address (as specified in the Google Checkout Merchant Center or the Google Checkout API call) according to the shipping method and timeframe agreed upon when the order was placed.
* You provide a tracking number or other proof of shipping for transactions less than US$250.
* You provide proof of delivery with the buyer’s signature for transactions greater then US$250
* You receive a request from Google for supporting documentation and provide this information within ten business days.
* You’re currently displaying a clear return policy on your website. (Learn more)
* The disputed order doesn’t involve intangible goods.
At a minimum, Google will reimburse you for eligible chargebacks up to $10,000 per year. If your gross Google Checkout sales exceed $1 million per year, Google will protect you for 1% of those sales. For example, if your Google Checkout sales are $2 million, they will protect you for up to $20,000.
I amwas impressed with Google’s effort in online fraud prevention & protection. It gives Google Checkout a distinct edge over its competitors and also increases your peace of mind.
Update: Unfortunately it appears customers are having negative experiences with Google Checkout and Google is apparently not addressing them or addressing them soon enough. See some of the customer experiences with Google Checkout in comments. Google should address such issues immediately with the customers and publicly to protect its own and its shareholder’s interests.
Tags: Fraud, Possession
January 10, 2010: 3:07 pm
I received a message informing me I won £850,000 in a google new years promotion. How do I check this out without getting scammed by a spammer? |
![]() lankshire |
January 7, 2010: 1:54 pm
The only fraud protection Google Checkout provides is for the Seller. Go ahead do a search for “fraud” in the Google Checkout pages and it will give you a ton of stuff on how the seller is protected from fraud. You cannot find anything on how consumers are protected because Google does nothing. I recently made a purchase from a website called TechSunny. I had some confidence in doing so because the company used Google Checkout. It turns out that (along with hundreds of other people were duped by this company). The website is now gone and if you do a search on resellerratings for TechSunny you can find all the horror stories. Anyway, having used Paypal in the past, I went searching for the option in GoogleCheckout to file a claim or dispute. It took me over 20 minutes to find a link. Google hides it. Go ahead and try to search it yourself. When I got a response from GoogleCheckout they pretty much confirmed the company was a fraud and stated that “We no longer allow this vendor to use GoogleCheckout.” Well d’uh!!! There website and company dissappeared!! Here’s the kicker, instead of providing a full refund as Paypal would have done if they found the claim in your favor, all Google does is tell me to contact my credit card company initiate a chargeback! WTF?!? I could have done that myself before. Google provides no fraud protection to consumers because they not only don’t screen their vendors, but they don’t do anything for the consumer even if find the claim in your favor!!! Google Checkout is purely marketed for sellers. Buyers have no protection using Google Checkout! |
![]() hugo santos |
March 8, 2009: 2:54 pm
I see that people here are badly informed. |
![]() arun |
December 12, 2008: 4:19 am
I did not have anything to do Google Checkout, didnt use it at all, even havent heard about it ever. Suddenly I get a mail saying ” Your order has been processed and you will find a debit of $10 in your credit card statement”. It says that I ordered for extension of my domain name registration for a website called protector4you.com on a domain called Godaddy.com. I have simply no idea what this is and am quite worried that I am a victim of ID Theft by a culprit through Google Checkout.Can anyone guide how to fight this out ? |
![]() asafbenzaken |
October 22, 2008: 1:59 pm
What a shifty service! Stay away! |
![]() Blah blah |
December 28, 2007: 2:00 pm
You guys are funny, paypal is just as bad and does everything you just said. Did you know if someone steals your credit card, they probably stole your name, the CVC, your address and anything else they need to make it seem like its you over the net. Google cant’ do anything if they look exactly like you. Paypal only refunds your credit card if the merchant authorizes it. In fact goto https://www.paypalsucks.com and see how bad their service really is. My advice, don’t be such as idiot as to get your information stolen. I mean, how dumb can you be? Google Checkout is a million times better then paypal. Whats better then Google checkout is when merchants use a real merchant account. |
October 20, 2007: 6:38 am
I am very sorry to hear that. It appears others too had bad experiences with Google Checkout. It looks like yet another flop from Google like Orkut. |
![]() Ann |
October 18, 2007: 11:43 am
Just had to cancel a credit card because it had few hundred dollars charge with the reference GOOGLE*neff. I talked to the credit card company and they told me it was an online purchase via Google, nothing else was available. Luckily, the charge was refunded the next day, after the charge was made. Apparently, all the ’safeguards’ did not stop one thief from charging lots of stuff on my card number. He/she must have canceled the order! |
September 20, 2007: 11:02 am
I’m in agreement with most of the others, Google Checkout is definitely a ripoff, do not order at any cost! They provide no protection against sellers who take money and ship nothing, as was my experience. |
![]() Ram |
August 24, 2007: 9:46 pm
Google checkout is a big fraud. The first time they charged me twice for my order and I called my bank and asked them to reverse the order. The second time, my total bill was approx $70, but they charged me $50 more (god only knows for what) and my emails to them are unanswered. If you’re a little less careless and don’t watch your account closely, i’m pretty sure Google will not hesitate to take your money — as they say, the more money you have the more greedy you become |
![]() Annabel |
June 26, 2007: 9:11 am
Look this article is all wrong. First off Google (as well as amazon and all others who store your cc#) do not use CCV2 checks except sometime when you first input your card. They cannot because storeing or keeping CVV2 info for subsequent checkouts is verboten. Most of them just ask fo it to make you feel better but do not use it. |
![]() J M |
December 17, 2006: 1:01 pm
Google Checkout charges your credit before your order ships. You might be ringing up a credit card bill and get nothing in return if the merchant does not ship your order. I ordered an in stock item from buy.com on Dec. 6th. Google Checkout charged my credit card immediately. Buy.com never sent my order because it turns out the item is not in stock, it is on indefinite backorder. It took more than a week of contacting buy.com and Google Checkout to find out why my order never shipped. There is a conflict in the Google Checkout Program policy and what buy.com says Google Checkout policy is. Google Checkout Program policy: “As a Google Checkout merchant, you’re required to adhere to the Google Checkout policies at all times. 2. Order Management b. Ship orders before charging the buyer’s credit card. You may not attempt to charge the buyer’s credit card until you have https://checkout.google.com/seller/policies.html What buy.com says Google Checkout policy is: “Please note that you are billed though your item has not yet shipped. This is one of the unique policies when purchasing through GoogleCheckout. For more questions on GoogleCheckout policies, please visit our Buy.com help site. Under Pricing and Billing click on “What are my payment choices?”. Then, choose Google check out or you can simply copy paste the following link in your address box: https://www.buy.com/corp/support/billing/google.asp” Buy.com policy for customers not using Google Checkout: “When will my credit card be charged? Since we don’t think you should pay for your order until it is actually on its way, Buy.com will not bill you until your products, including backordered or preordered items, are actually shipped. In https://www.buy.com/corp/support/billing/creditcards.asp?what=whencharged Google Checkout support knows that I (and many others - this is a growing problem, and not just with buy.com) have been charged for merchandise that has not been shipped and that the merchant can’t even give an estimate on when the item will be available - if ever. They have done nothing about it. The charge is on my credit card statement. I have nothing to show for it. If Google Checkout can’t be trusted to require merchants to “adhere to the Google Checkout policies at all times,” why should consumers trust Google Checkout with sensitive financial and personal information at all? They shouldn’t. Period. Don’t use Google Checkout. |
October 27, 2006: 10:33 pm
I see the overall response to Google checkout is pretty negative. I have modified the post accordingly. |
![]() Ron McLendon |
October 27, 2006: 2:23 pm
Do NOT use Google checkout under any circumstances. I used it twice for the $10 bonus, but what I got in return at that up. Google charged my first order fine. Three days later, I placed another order, only to be charged twice for the same order. I contacted Google and they claim I was only charged once, but the second charge was a “pending authorization”. Authorization for what? They already have my money. My bank confirmed Google did charge twice for one order. I sent confirmation along with a copy of the double charges to Google and they still deny charging twice. As at is now, I’m out over $30 because of Google Checkout. Steer clear! |
![]() Julius Caesar |
August 26, 2006: 9:08 am
I agree that Google has no checks. Just disputed a transaction for something I did not buy and like the other poster had never used AdWords or signed up for Checkout. The lady at the credit card company said someone may have mistyped a number - if that’s the case, then shouldn’t the CVV # check have caught that??? Very frustrated that I’ve had to spend an hour today fixing something that could have been avoided with a bit of digilence on Google’s part. |
August 8, 2006: 11:49 am
I am very interested to know the details of your case. Please write it in comments or send me an email. Did they reimburse you? > You even use the same words as Google in their replies to me. That is very strange. I am in no way affiliated with Google. I do however use AdSense on my sites but that doesn’t enter me into any obligation wrt. Google. Your implication is totally unfounded. Neither this post nor any posts in any of my blogs are funded / sponsored by any company or individual. |
![]() patrick donnelly |
August 8, 2006: 11:12 am
I find your glowing appraisal of Google Checkout’s fraud protection interesting. You even use the same words as Google in their replies to me when I questioned why, within 10 days of the Checkout launch, my credit card info was stolen and thousands of dollars of charges were racked up in my name. I don’t use Adwords and have never used Checkout. Yet someone got through all of these fabulous fraud protection features? Google did NO verification of the credit card info. I think eBay was right in banning the use of Checkout. Google clearly has poor fraud protection, despite their constantly saying that they do. |
jim