E-skimming (also called digital skimming) is an advanced but surprisingly common type of fraud. It happens when a criminal infects an e-commerce website with malicious code and steals the customer’s credit or debit card information.

While the customer completes what they believe is a secure checkout on an e-commerce retailer site, the hackers are accessing their information in real-time, all without the retailer or the customer knowing about the hack. This common type of e-skimming hides an unwanted piece of JavaScript code on a checkout page.

E-skimming can be harmful to both the e-commerce retailer and the customer. Businesses can lose profits, suffer reputational damages, and face regulatory compliance issues, so it’s in their interest to take action to protect themselves and their customers.

Minimize Risk by Identifying E-Skimming Threats Before They Cause Harm

There are steps you can take on your own to prevent e-skimming, including vetting all third parties your business works with. Identify and carefully vet all third-party eCommerce providers and ad vendors by limiting the information they can access on your website.

Scheduling regular check-ins with your IT Team to talk about the security of your website can also help protect your website. They can conduct periodic reviews and updates on third-party codes included on your website. They will look for any changes to the code and search for any other red flags.

You can also ask your IT Team if those developing your website use multi-factor authentication and separate permit login accounts that store your website’s code in the cloud. Websites that require only an email and password are much more vulnerable to attack than those that require multi-factor authentication. A common type of multi-factor authentication is sending a code to your email or phone by call or text message. Each team member should have their own account login.

Detecting E-Skimming Attacks

Detecting e-skimming quickly is important when it comes to limiting damage to your business and your customers. One indicator that your business has fallen victim to e-skimming is hearing customer complaints of fraudulent activity after making a purchase on your website.

Another sign is if a new domain comes up that is similar to your business website and is pretending to be your business. For example, if your business is Jenna’s Jewelry, has a website at jennasjewelry.com, but a scammer is pretending to be your business operating as Jena’s Jewelry at jenasjewelry.com, a website that is nearly identical to your website.

Additionally, a variety of software programs can assist in detecting e-skimming. Consulting an expert to learn which software tools are suitable for your e-commerce website is always a good option. The Global Merchant Partners team can guide you toward the best solution.

Take Action if You Suspect You Are a Victim of an E-Skimming Attack

You should never feel embarrassed if you have fallen victim to an e-skimming attack. Many e-commerce retailers, big and small, have been in the exact same place, including Ticketmaster, Puma, and Macy’s. If you think your e-commerce website has been affected, it is essential to act immediately.

Aprile Parella is the director of operations at Global Merchant Partners and specializes in payment fraud and PCI compliance .  Contact Global Merchant Partners to lean ways to keep your payment system and ecommerce websites secure.

Restoring your website to safety and preventing further attacks may involve numerous steps. Navigating these fixes on your own can be difficult, but the team at Global Merchant Partners is here to help ease the stress and get you back to business.