Mastercard Hypes Artificial Intelligence

Mastercard have deployed 'Decision Intelligence' to scrutinise real time transactions. That sounds impressive - is it?

Corporations and politicians share a tendency to say things that are narrowly true, though a lack of context renders the statements misleading. Mastercard are offering a prime example of this in the security arena.

The card brand has rolled out something it calls Decision Intelligence, which it said “uses artificial intelligence technology to help financial institutions increase the accuracy of real-time approvals of genuine transactions and reduce false declines.”

That sounds pretty good. It then elaborated why it saw this as news: “This is the first use of AI being implemented on a global scale directly on the Mastercard network.” It also labels Decision Intelligence as “a radical new approach,” one that “takes a broader view in assessing, scoring and learning from each transaction. That score then enables the card issuer to apply the intelligence to the next transaction.”

Mastercard’s Ajay Bhalla, president of its enterprise risk and security efforts, is even quoted as saying, “We are solving a major consumer pain point of being falsely declined when trying to make a purchase.”

But the “radical approach” of using AI to intelligently assess fraud in real time has been done by providers that include Forter, Signifyd, Smyte, Stripe Radar, Sift Science, Ravelin, Riskified and Feedzai.

Naturally, unlike Mastercard’s technology, all of them look for problems across payment types, not limiting themselves to transactions from one payment card.

And the claim that Mastercard has solved the problem of false declines is really over the top. There are two problems with that, one involving market share and the other involving the data that Mastercard can apply its AI to.

Mastercard does not have a stranglehold on the transactions market, and in fact Visa processes far more transactions. And while there are merchants that get along without accepting American Express, Diner’s Club or Discover, it’s just about impossible to accept Mastercard and not accept Visa.

That means that, even if this Mastercard effort were perfectly effective, merchants would still have to deploy other antifraud measures for every other payment type they accept. So how does a Mastercard-specific approach help them, given that it is limited to a minority of their transactions?

Here’s what one security executive (who wished to remain anonymous and not alienate Mastercard) had to say about Mastercard’s announcement: “There’s nothing new in their technology or its application. More likely, Mastercard is just trying to fix a deeply broken declines problem and is hoping this will help them look better in the eyes of banks when it comes time to renegotiate contracts.” He then tried to imagine what Mastercard would say to those banks: “‘We can help you reduce declines. Look, we have fancy artificial intelligence.’”

The security executive added that the best AI analytics can’t overcome the limitation that the data that Mastercard has access to — transaction data — is quite restricted. Most security firms use a “machine learning model that is informed by all kinds of data, including how users behave on their site, specific order information, device information, user account details, navigation patterns on the merchant’s website, social networking activity, stuff Mastercard has no access to.”

Any embrace of analytics in security is a positive move. Let’s just hope Mastercard doesn’t believe its own hype. It might have to change its tagline to “Mastercard: We’re everywhere context isn’t.”

Computerworld:      Financial Institutions & Cybercrime:

 

« Amazon Is Using AI To Transform Retail
Behavior Analytics Tools For Cyber-Security »

CyberSecurity Jobsite
Perimeter 81

Directory of Suppliers

IT Governance

IT Governance

IT Governance is a leading global provider of information security solutions. Download our free guide and find out how ISO 27001 can help protect your organisation's information.

NordLayer

NordLayer

NordLayer is an adaptive network access security solution for modern businesses — from the world’s most trusted cybersecurity brand, Nord Security. 

BackupVault

BackupVault

BackupVault is a leading provider of automatic cloud backup and critical data protection against ransomware, insider attacks and hackers for businesses and organisations worldwide.

The PC Support Group

The PC Support Group

A partnership with The PC Support Group delivers improved productivity, reduced costs and protects your business through exceptional IT, telecoms and cybersecurity services.

Resecurity

Resecurity

Resecurity is a cybersecurity company that delivers a unified platform for endpoint protection, risk management, and cyber threat intelligence.

Alert Logic

Alert Logic

Alert Logic delivers unrivaled security for any environment, delivering industry-leading managed detection and response (MDR) and web application firewall (WAF) solutions.

National Cyber Security Directorate (DNSC) - Romania

National Cyber Security Directorate (DNSC) - Romania

DNSC (formerly CERT-RO) is the Romanian national cyber security and incident response team.

Cyber Threat Intelligence Network (CTIN)

Cyber Threat Intelligence Network (CTIN)

CTIN provides cyber threat intelligence services including training, platform evaluation, ISAC/ISAO systems development and counter botnet operations.

Vilnius Tech Park

Vilnius Tech Park

The region‘s most complex and integrated ICT hub, Vilnius Tech Park aims to attract and unite innovative talent from big data, cyber security, smart solutions, fintech and digital design.

BAI Security

BAI Security

BAI Security is a Nationally Recognized Leader in IT Security. Keeping your data safe and your business compliant is our singular focus.

Blue Lance

Blue Lance

Blue Lance is a global provider of cybersecurity governance solutions. Our software solutions automatically collect and store the information necessary for investigations, audit and compliance.

Envieta

Envieta

Envieta is a leader in cryptographic solutions. From server to sensor, we design and implement powerful security into new or existing infrastructure.

US Army Cyber Command (ARCYBER)

US Army Cyber Command (ARCYBER)

US Army’s Cyber Command (ARCYBER) is engaged in the real-world cyberspace fight today, against near-peer adversaries, ISIS, and other global cyber threats.

Sixteenth Air Force (Air Forces Cyber)

Sixteenth Air Force (Air Forces Cyber)

Air Forces Cyber provides mission integration of Information Warfare at operational and tactical levels, creating dilemmas for adversaries in competition and, if necessary, future conflicts.

Grove Group

Grove Group

Grove provides businesses with the tools that work best for their unique operations, through cybersecurity and cloud services, custom software development and our big data analytics expertise.

HLB Mann Judd (Fiji)

HLB Mann Judd (Fiji)

HLB Mann Judd (Fiji) (formerly known as HLB Crosbie & Associates) is a well-established firm of accountants and business advisers in Fiji.

LayerX Security

LayerX Security

LayerX's user-first browser security platform turns any browser into the most protected & manageable workspace, by providing real-time monitoring and governance over users’ activities on the web.

Synoptek

Synoptek

Synoptek is a global systems integrator and managed IT services provider (MSP). We offer comprehensive IT management and consultancy services to organizations worldwide.

Ontinue

Ontinue

Ontinue ION is an MXDR service that provides Nonstop SecOps through five key capabilities that enable your organization to respond to attacks and continuously reduce risk.

OutKept

OutKept

OutKept offers the highest quality phishing simulation campaigns, supported by a community of ethical phishers, to build awareness, and maintain alertness.

Bluerydge

Bluerydge

Bluerydge specialises in cyber security and technology, focusing on the delivery of innovative sovereign solutions through trusted, cleared and experienced professionals.