• Gemalto is now part of the Thales Group, find out more.

Slash card-not-present fraud with Gemalto Dynamic Code Verification

What is card-not-present fraud?

Card-not-present fraud (CNP) is a category of fraud made via online transactions, telephone or mail.

In other words, it’s a fraudulent payment in situations where a card is not presented to a merchant for visual check.

Typically, CNP happens after a payment card or information on the card has been stolen (name, card number and 3-digit static card security code at the back).

How big is card-not-present fraud?

Card-not-present statistics show that in many countries it's THE major source of card fraud by far. 

Yes, you read that right.

CNP fraud in the US and Canada

In the U.S., 7.9 million consumers were the victim of CNP fraud in 2018. This represents about 3.1% of the U.S. population over 18 years of age, according to a 2019 study.

The amount of card-not-present fraud was estimated at $4.57 billion for 2016 by the U.S. federal reserve in a 2018 report. 

In Canada, CNP fraud has been driven by solid growth in e-commerce transactions. CNP amounts for 76% of the total value of card fraud in 2015.

CNP fraud in Europe 

According to the September 2018 report on fraud in the Single Euro Payments Area (SEPA), card-not-present (CNP) payments counted for a massive 73% of the total value of card fraud for 2016.

With €1.32 billion ($1.49 billion) in losses in 2016, CNP fraud was the largest segment of fraud in the eurozone and the only one to record an increase (+2.1%) compared with the previous year.

This covers Austria, Belgium, Cyprus, Estonia, Finland, France, Germany, Greece, Ireland, Italy, Latvia, Lithuania, Luxembourg, Malta, the Netherlands, Portugal, Slovakia, Slovenia, and Spain.

Card-not-present fraud in the UK

In the UK (not in the eurozone), CNP accounted for £506.4 million (or €563m or $636m), that is 76% of the total value of card fraud in 2018 and a +24% increase over 2017.

CNP fraud in Australia

In 2017, card-not-present fraud in Australia accounted for 84.8% of all fraud on cards. It is a +14% increase over 2016 for a total of 476.3 million AUD (or €295m or 330m USD)  in 2017. (source Australian payments network)

The bad news?

With the shift to EMV drastically reducing card-present fraud, CNP fraud is more likely to grow in the coming years according to a January 2019 report from a Juniper Research report

The company says that CNP fraud will have retailers lose about $130 billion in cumulative revenue between now and 2023. 

Juniper also forecasts that by 2023 companies supporting retail transactions are to spend about $10 billion yearly on fraud detection and prevention capabilities. 

Beyond that, CNP fraud affects consumers' behavior, merchants and banks.

​​​Mitigate  fraud and preserve the consumer's shopping experience​​​​​

card not present fraud

Gemalto’s Dynamic Code Verification is a complete card-not-present security solution based on:

  • a payment display card, 
  • a mobile solution,
  • and a validation server. 

It replaces static cryptograms with dynamic codes, thus mitigating fraud linked to the use of static card numbers stolen online without any impact on the merchant’s infrastructure.

The Gemalto Dynamic Code Verification is the first complete and adaptable solution on the market. 

Banks can decide to deploy the solution on the mobile, on display cards, or with both components. 

The versatility offered by Gemalto Dynamic Code Verification allows banks to offer a relevant and secure eCommerce solution to their customers. ​

Product Sheet (PDF - 126kb)

How Gemalto DCV allows to mitigate online fraud? 

Watch the Gemalto DCV video: Discover how Gemalto DCV allows to mitigate online fraud and card-not-present in particular while offering a simple and convenient shopping experience.​


dynamic code on mobile 

Gemalto Mobile DCV

The Gemalto mobile DCV ​solution allows your customers to store their cards and read the dynamic codes on their mobile phone. 

Customers can choose to secure their application with a PIN to add a strong authentication layer to the application.

dynamic code on mobile 

- Stores your cards in a secure mobile application
- Allows you to complete simple and secure transactions

Dynamic Code Card 

Gemalto Dynamic Code Card

The Gemalto Dynamic Code Card​ is a classic EMV contactless payment card which displays a dynamic code that automatically changes over every 20 minutes without the cardholder’s intervention. 

Instead of the static code currently used to secure online purchases, the dynamic code is displayed on a small ePaper screen on the back of the card.

Gemalto Dynamic Code Card

- Up to 125K Dynamic Code Verifications in 4 years
- Updated security cryptogram every 20 minutes


Read more about Gemalto Dynamic Code Card​

card not present  

Gemalto Confirm Authentication Server

The Gemalto Confirm Authentication Server is a multi-channel, multi-token and vendor-agnostic authentication solution that supports all forms of authentication technologies, across all channels. 

It allows easy integration into banks’ authorization hosts and is protected by hardware security modules.

DCV Mobile

- Easy integration
​- Field proven, comprehensive, scalable and cost-effective

Read more about the Gemalto Confirm Authentication Server

What customers are saying

"Gemalto helped us quickly implement groundbreaking dynamic CVV/CVC technology and the response thus far has been outstanding: in the first weeks of the project we already have more than 100,000 active users."

Hugo Najera Alva, General Director of Digital Banking, BBVA Bancomer, Mexico

Read more about BBVA Bancomer