PCI-DSS Basics for Cashiers & Store Staff: Card-Not-Present Fraud – Spot the Red Flags

For staff taking orders by phone or online.

When the customer isn't standing in front of you, we have to be extra careful. If something feels "off," it probably is.

The Checklist: The "Phishing Five"

1. The Rush: "I need this shipped overnight to a different address, my card is the only one that works, I'm in a hurry!"

2. The High-End Grab: A huge order of the most expensive items we sell, with no regard for size, color, or price.

3. The Billing/Shipping Mismatch: The billing address is in New York, but they want it shipped to a vacant lot, a freight forwarder, or a random house in another state.

4. The Gift Card Request: They want to pay for a large item with multiple gift cards, or they want to put the refund on a new gift card immediately.

5. The "Broken English" Excuse: The customer can't (or won't) answer simple questions about the billing address, or keeps repeating the card number to make you stop asking questions.

Your Action Plan:

• Verify, Verify, Verify. Ask for the CVV (the 3 digits on the back). If they don't have it, stop.

• Trust your gut. If the screen flashes "AVS Mismatch" (Address Verification failure), do not override it. Call a manager.

• Never change the rules. If the policy is "Ship to billing address only," stick to it.