Case Study

Global E-commerce Retailer Prevents Account Takeover, Carding Attacks and Review Fraud

HUMAN_Case-Study_ATO_Transaction-Abuse_Global-E-commerce-Retailer

Company

This leading global e-commerce retailer distributes vitamins and supplements to customers globally through its website and mobile application.

Security Engineer

Leading Global E-commerce Retailer
“When it comes to detection, nobody does it better than HUMAN. They make sure the bots get all the friction without touching the customer experience.”
Human-Case Study-Exclamation Mark Icons@2x

Challenge

The retailer was experiencing a high volume of malicious bot traffic on their e-commerce portal, including account takeover (ATO), credential stuffing, and carding attacks. The company’s security team was working around the clock to respond in real time. 

Additionally, fraudsters were also using bots to post fake reviews and 'like' the reviews in order to take advantage of monetary incentives. Not only did this mean that attackers were rewarded for fake reviews, but it also compromised the authenticity of the website’s reviews.


Human-Case Study-Shield checkmark icon@2x

Solution

The retailer needed a solution that would accurately identify and block malicious bot activity without impacting their user experience. HUMAN Bot Defender was the clear choice. 

  • Protection against ATO and carding attacks: With its sophisticated machine learning, Bot Defender detects malicious behavior on websites in real time, stopping the most advanced bot attacks. 
  • Product review monitoring: Bot Defender applies the same learning techniques to predict when a product review or rating is likely to have been submitted by a bot and challenges the review before it is published.
  • Flexible architecture with easy integration: Bot Defender’s open architecture allows it to easily interface with any existing technology stack, including Amazon Web Services (AWS). Bot Defender sits in front of the retailer’s AWS instances and blocks malicious bot attacks before they reach the servers, without adding an additional layer of in-line traffic processing. This maintains performance and ensures low latency by reducing overall server load. Bot Defender also seamlessly integrates with industry-leading CDNs, including Amazon CloudFront with AWS Lambda, to protect services hosted on AWS.

RESULTS

After implementing Bot Defender as part of their multi-tier security strategy, the retailer experienced several benefits:
  • Dramatic drop in ATOs and other malicious bot attacks, ensuring a safe shopping experience without adding friction to the customer journey
  • Significant reduction in fake reviews being left on the company’s product, restoring customers’ confidence in using the website’s reviews to inform purchasing decisions
  • Improved operational efficiency because the team no longer had to spend time, money and other resources reactively responding to bot attacks

Connect with Us
to Learn More How HUMAN Can Mitigate ATO and Carding Attacks for You

Related Resources