A scammer with a stolen or fake card attempts a transaction. The merchant receives a decline, but the scammer pretends to contact their issuing bank and tells the merchant they received an authentication code. The scammer instructs the merchant, per their bank, to use the code and force or create an “offline” transaction. The merchant enters the code, completing the false transaction.
Read more