Best Practice Guide

Best Practice Guide

In 2020 we introduced our Best Practice Guide, a bundle of Best Practices, guidelines, advice, and tips along with examples of Loyalty Fraud.

When we founded the Loyalty Security Alliance, it was in answer to a need in the Loyalty Industry for information and help to combat Loyalty Fraud.

After all, the Loyalty Industry does not have an overriding body that defends our interests, as in the card payment industry. We also do not, yet, have an industry-standard in defining the types of fraud, no set procedures, or rules to live by, which leads to a struggle in limiting loyalty fraud losses.

The LSA offers a platform for Loyalty Programs to meet with their counterparts to discuss ways to reduce fraud, find providers with solutions, and start setting standards whilst sharing Best Practices.

Our event participants have requested us to develop a Best Practice Guide, and we are doing so with the help of industry experts. They will contribute their know-how in specific areas, with examples and guidelines, tips, and advice.

It is the LSA’s hope that you will not only enjoy reading these chapters but most of all, find some useful information in them to take away and implement.

If you would like to contribute to our Guide or have a topic you would like to see included, let us know, we are in this together after all.

We are proud to present our Best Practice Guide. Broken down into comprehensive chapters, rolled out over time, starting with Loyalty Fraud Basics.

Available Chapters

Loyalty Fraud Basics

In our first chapter, we clarify some terminology and go into the types of fraud, the agents in this fraud, and offer some basic tips on securing your program. This chapter was written in cooperation with Comarch, Inc.

Subjects touched upon are:

  • What is Loyalty Fraud?
  • Types of Loyalty Fraud
  • Who should be involved within your organization in dealing with Loyalty Fraud
  • Quantification of Loyalty Fraud Loss
  • Simple tips to prevent Loyalty Fraud

Data Breach

In this chapter, written by Foregenix, we break down Data Breaches, from the initial target research to payload delivery and data extraction. Several controls to mitigate risk and damage are listed, and Best Practices to security, communication, and management.
  • What is a Data Breach?
  • Why are Loyalty Programs and Platforms targets?
  • What are the consequences of a Data Breach in Loyalty
  • Types of Attacks
  • Anatomy of a Data Breach
  • Risk Reduction Controls
  • Incident Management

Account Takeover

In this chapter, we will discuss the Account Takeover and how it affects loyalty programs. We will then dive into actionable steps loyalty managers can take to protect their programs and customers. SecuredTouch authored this chapter.

  • Who should read this chapter
  • What is Account Takeover (ATO)?
  • How does Account Takeover affect Loyalty Programs?
  • How do Fraudsters monetize ATO?
  • Consequences of ATO
  • Detecting ATO in Loyalty

The Best Practice Guide has come to fruition with the support and contributions of these partners: