Velocity checks are a fundamental automated fraud prevention mechanism used by payment gateways and acquiring banks. They monitor the speed, volume, and frequency of transactions or data inputs occurring within a specific timeframe (e.g., per minute, hour, or day) from a single user, IP address, or credit card.
Stopping Card Testing Attacks
Velocity checks are the primary defense against card testing (carding) attacks. If a cybercriminal deploys a botnet to test 5,000 stolen credit card numbers on a merchant's checkout page, a velocity filter will notice the unnatural spike in authorization requests (e.g., 50 rapid-fire transactions from the same IP address in 10 seconds) and automatically block the traffic.
Continuous Monitoring and Velocity
Velocity rules aren't just for blocking external hackers; they are used in continuous risk monitoring. If a newly onboarded merchant typically processes $1,000 a week, but suddenly attempts to process $50,000 in a single day, velocity alerts will flag the account for manual review to ensure the merchant isn't laundering money or executing a bust-out scheme.
