SpiceJet is operating under fierce competition and online payment frauds became have become rampant. CyberSource's Decision Manager, an automated online risk management solution has helped Spice Jet to automatically evaluate credit card transactions in real time.
Prajapathy isn't an isolated case. Unconfirmed reports suggest that credit card fraud went up by 28 percent in India in 2008. Like every other airline, SpiceJet had equipped itself to screen credit card transactions, but it lacked a foolproof process to verify online transactions. It's solution came in the form of a four member Fraud Control Unit responsible for manually screening transactions made on SpiceJet.com.
[ Learn how to secure your systems with Roger Grimes' Security Adviser blog and newsletter, both from InfoWorld. ]
SpiceJet is now India's second largest low cost carrier in terms of market share. However, getting there wasn't easy given that the airline operates in an increasingly cluttered segment. The landscape was too small for so many players and this had sparked off a price war the likes the country had never seen before. But their low-fare pricing model ensured that the low-cost operators survived on razor-thin margins, suddenly making losses from fraud significant enough to garner CXO attention.
Alarmed by the increase, SpiceJet decided to put risk on its radar. It was necessary that they enhanced customer experience with realtime verification of credit card transactions to alleviate any security fears. The thrust was on making SpiceJet.com a secure place for credit card transactions. Spice Je t then approached IT for help. After deliberation they finally opted for CyberSource's Decision Manager, an automated online risk management solution. The company has a huge dynamic and real-time database of credit cards and this solution is being used by over 20,000 organizations (like Jet Airways and the Future Group) across the globe.
With Decision Manager on board, SpiceJet can now automatically evaluate Single Imagecredit card transactions in real time. Based on a combination of rules framed by the airline and a set of over 150 parameters, the system decides whether a transaction should be processed further or sent for a review.
By running Decision Manager, SpiceJet. com is now able to almost single handedly estimate whether an online purchase should be accepted, rejected, or reviewed. But, the application was not given veto power. The project went live in October 2007 and effectively handled the gravity of the situation.
The solution brought with itself a whole set of benefits. The automatic screening of credit card transactions reduced the organizational burden of manual intervention. "Post-implementation we screen only those transactions that need to be reviewed. We don't have to deal with accepted transactions. So now we handle only about 400 transactions in a day as opposed to about 2,500 prior to the implementation," says Kumar, the head of the fraud control unit.
The solution has definitely impacted customer experience but only in a positive way. "Nothing has changed for the customer except that our website has become a more secure place to transact. Now he knows that his credit card can never be misused at SpiceJet.com. The solution has not only enhanced the sales effectiveness of our website but has also inspired confidence in our customers," says Raje. Plus, it makes it easier for SpiceJet to go international. "Our system is now equipped to handle both international and domestic credit cards.
This solution would lend support to its expansion plans in future. "I think we did it the way we wanted to. A different method could not have been better," says Pal. A robust and flexible system that ensures secure transactions and a step a few feet above competition - Pal couldn't have asked for more.
Highlights
Spice Jet, headquartered in New Delhi, took to the skies in May 2005 for the first time.
Credit card fraud went up by 28 percent in India in 2008.
About 90 percent of Spice Jet's revenue is generated through online credit card transactions.
The project went live in October 2007 and effectively handled the gravity of the situation.
Get the independent advice and expertise you need to support a virtual workforce.
The increase in Linux popularity has increased the frequency and sophistication of malware attacks. Read this 2 page white paper now to learn how you can protect your Linux environment with real-time protection that is certified by all major Linux vendors.
Download now »Ensuring acceptable application delivery will become even more difficult over the next few years. As a result, IT organizations need to ensure that the approach that they take to resolving the current application delivery challenges can scale to support the emerging challenges. This handbook elaborates on the key tasks associated with planning, optimization, management and control and provides decision criteria to help IT organizations choose appropriate solutions.
Download now »A common misconception is that mid-range storage requirements are dramatically different than that of a larger enterprise. Mid-range storage users may require less capacity, but they have similar functionality and management requirements. This ESG paper examines mid-range storage needs and reviews a new solution that adjusts size while retaining value, performance and functionality.
Download now »
Sign up to receive Security Resource Alerts
This white paper provides guidance on how to develop a strategic approach to managing and monitoring logs, a key function required for compliance with many regulatory mandates and a critical defense against security threats.
Download now! »Learn about the processes and technologies that support security information management (SIM) operations, as well as the business case for SIM. The series examines different options for implementing SIM and gives you evaluation criteria for selecting the best option for your organization.
Download now! »Learn the strategies, actions, and capabilities that Best-in-Class organizations employ and technologies they choose to obtain superior performance against various security performance metrics. This report provides guidelines for identifying which security solutions to consume as a MSS and defines best practices for choosing and managing MSSPs.
Download now! »