In this closed forum loyalty systems provider Comarch hosted an open discussion for merchants. We touched upon cybersecurity, the impact of Loyalty Fraud, where Fraud sits in organizations, and other topics on the mind of the attendees.

The success of the session, indicated by questions, participation, and the length that the roundtable ran, indicates that connecting with industry colleagues to discuss trends, threats, and solutions is desired. We hope to host another Merchant Loyalty Session again.

Points that were offered for discussion:

• • • • What team is responsible for managing Loyalty Fraud?
        • Business Team
        • Loyalty Team
        • IT
        • Security
        • Is it outsourced?
        • No clear team
      • Do you use tools for automating Fraud Detection and/or Prevention?
      • What Cybersecurity trends have caught your eye? I.e.:
        • Passwordless login
        • Behavioral Biometrics
        • Security Protection that you have thought of that isn’t out there (yet)
      • Are there elements of Cyber Protection that are especially bothersome to clients? I.e.:
        • Password login
        • 2FA for redemption
        • Captcha
      • Do you think clients would be keen to provide additional data, such as geolocation or device parameters, to gain better protection of their assets?

To create a safe environment to discuss the challenges Loyalty Programs face, and the steps they take to secure their programs, we have established some rules. All participants will be held to these rules and will be reminded of them as needed.

• No competitively sensitive data may be shared.
• Participants will not engage in nor discuss any anti-competitive activities during the sessions, nor will they use the information gained in the sessions for anti-competitive activities outside of the session.
• PII data will not be exchanged or shared unless there is written consent given by the individual company’s legal representatives.
• Chatham House Rules apply – information will be non-attributable.
• Third-Party Intelligence Rule will be respected. Strictly no passing of intelligence to third parties without the formal approval from the originator.
• Participants must provide their company email addresses to avoid uninvited attendees.
• Non-adherence to the Rules will result in the exclusion of the Participant and his/her organization.
• Participants acknowledge and agree that the organizers of the calls cannot be held liable for the accuracy of the information provided and discussed.