Online fraud deceives people or systems through websites, accounts, or messages in order to steal money, goods, or access.
The scene is the internet service itself, which is wider than one payment record and wider than the card or transfer alone.
How it works
Fake shops, support impersonation, account takeover, and listings for goods that will never ship all fit because the deception uses an online channel.
A stolen card used at a real checkout is closer to payment fraud, while a fake shop that collects the card and disappears is online fraud that may include a payment.
Victims lose money, goods, credentials, or time, and platforms lose trust when people cannot tell a real listing from a staged one.
Controls include identity checks matched to risk, limits on new accounts, and support processes that do not hand out resets on a thin story.
Concrete examples
- A marketplace listing takes payment for a camera and never produces a tracking number or a seller who can be reached.
- A message pretends to be the bank's support team and talks a customer into moving savings to a so called safe account.
- Dozens of new accounts post the same review and the same payout details on the day a promotion starts.
Protective measures
- Match identity checks to the value at risk so a new high value seller is not treated like a long standing customer.
- Limit new account actions until behavior earns trust, and review clusters that share devices or payout details.
- Train support to refuse resets and payout changes that rest only on urgency and secrecy.
- Publish a simple way for customers to report a fake listing or a fake support contact, and staff that path.
How CDPCaptcha helps
Proof of work raises the cost of scripted online deception because each automated attempt must spend computation before the service will proceed.
CDPCaptcha is a self-hosted proof of work check in the browser, with no cookies, no tracking, and no picture puzzles.
It is made and hosted in the EU, in Germany, and the service is described at https://cdpcaptcha.com/.