Mobile Money Payment Fraud Detection: Velocity Checks & Rules (2026)

The verdict in three sentences

Payment fraud is not beaten with a single tool but with a stack of simple rules that filter 90% of attempts before the debit even happens. Velocity checks (limiting the number of transactions per number, card or device over a time window) are the first line of defense, free and effective. Properly tuned, these rules drop the fraud rate from 2.4% to 0.7% while keeping false positives under 1.5%.

Fraud types and their real cost

In 2026, a merchant accepting card and mobile money faces three families of fraud. Stolen card (a number bought on a black market), friendly fraud (the customer disputes a purchase they actually received) and abusive chargebacks. Each incident costs the transaction amount, plus processing fees, plus administrative time.

These figures are a 2026 order of magnitude observed on mid-sized e-commerce stores in West and East Africa. The message is clear: without rules, you lose nearly one FCFA in forty.

The velocity rules to put in place

A velocity rule counts events over a sliding window and blocks or flags beyond a threshold. They require no paid tool: a few lines of server-side code are enough.

The winning pair: velocity to cut automated attacks, and 3-D Secure (authentication via a code sent to the cardholder) for risky cards. On eligible cards, 3DS also shifts chargeback liability to the issuing bank.

Risk scoring, in practice

Rather than hard-blocking, you add up risk points and decide by total: under 30 points let it through, 30 to 60 request 3DS, above 60 send to review. Each signal (new card, disposable email, geo mismatch, abnormal basket) adds points. This system reduces false positives because a loyal customer with a slight anomaly is not punished like an attacker stacking every signal.

Mini case study

Amara runs a cosmetics store in Lagos doing 6,000,000 FCFA (about 3.6M NGN equivalent) in monthly sales. Before rules, his fraud rate is 2.4%, meaning 144,000 FCFA lost each month. He sets up three velocity rules and 3-D Secure on risky cards. His rate falls to 0.7%, meaning 42,000 FCFA in losses. Monthly saving: 102,000 FCFA, over 1,200,000 FCFA a year, for a one-time estimated development cost of 350,000 FCFA. Payback in under four months.

FAQ

Do velocity checks block my real customers?

Properly tuned, no: thresholds (3 tx/number/hour) sit well above normal behavior. False positives stay under 1.5%, and a review-rather-than-block action avoids losing a legitimate sale.

Does 3-D Secure scare buyers away?

It adds a step, so a few abandonments, but you only trigger it on risky transactions (high amount, geo mismatch). On eligible cards it shifts chargeback liability to the bank, well worth the slight friction.

Is mobile money less exposed than card?

Less to stolen cards, but exposed to hijacked accounts and friendly fraud. Velocity rules per number and strict webhook verification (status re-checked via the API) remain essential.

How much does setup cost?

A 2026 order of magnitude: 300,000 to 600,000 FCFA of development for a full rule set integrated into checkout, with no mandatory monthly subscription. The gain quickly exceeds this cost once revenue passes 3,000,000 FCFA per month.

Do I need a paid anti-fraud tool?

Not at first. An in-house rule set covers the essentials. Paid solutions become worthwhile above 30-50 million FCFA in monthly revenue, when machine learning on large volumes adds real marginal value.

Let's talk about your project. We integrate velocity checks, risk scoring and 3-D Secure directly into your checkout to cut fraud without losing your real customers. WhatsApp +221 77 596 93 33.