Systems and methods to enhance security in transactions

A computing apparatus, comprising:

• a transaction handler on an electronic payment processing network connecting separate from computers for payment processing in the electronic payment processing network;
• a data warehouse storing:
• a communication reference in association with account information of a payment account in the electronic payment processing network;
• and
• a security preference in association with the account information of the payment account;
• and
• a portal coupled with the transaction handler and communicating using a communication channel outside the electronic payment processing network;
• wherein the transaction handler receives, via the electronic payment processing network from a transaction terminal, an authorization request for a transaction of a payment in the payment account;
• wherein in response to the authorization request, the transaction handler:
• provides in an authorization response for the transaction, based on the security preference, an indication of whether or not to capture an image of a customer using an account identification device at the transaction terminal to make the payment;
• and
• transmits, via the electronic payment processing network, the authorization response to the transaction terminal;
• and
• wherein, in response to the authorization response, the transaction terminal:
• determines, according to the indication provided in the authorization response, whether or not to use a digital camera to capture an image of the customer using the payment account at the transaction terminal to make the payment;
• and
• in response to a determination, at the transaction terminal, that the authorization response requires an image of the customer, executes instructions to cause the digital camera to automatically capture a facial image of the customer using the payment account to make the payment during the transaction at the transaction terminal;
• retrieves a communication reference from the authorization response;
• generates a notification that identifies the transaction and contains the facial image of the customer using the account identification device to make the transaction at the transaction terminal;
• transmits the notification to a user device associated with an authorized user and identified by the communication reference retrieved from the authorization response;
• and
• in response to receiving a communication from the user device, decline the transaction.

A method implemented in a transaction terminal, the method comprising:

• receiving, using an input device of the transaction terminal from an account identification device, account information identifying a payment account associated with an authorized user, the account identification device controlled by a customer;
• transmitting, using a communication device of the transaction terminal, into an electronic payment processing network, an authorization request for a transaction of a payment made using the account information, wherein the electronic payment processing network connects separate computers for payment processing in the electronic payment processing network;
• receiving, using the communication device, from the electronic payment processing network, an authorization response for the transaction identified by the authorization request in the payment account, wherein the authorization request has an indication of whether or not to capture an image of customer using the account identification device at the transaction terminal to make the payment;
• determining, according to the indication provided in the authorization response, whether or not to use a digital camera on the transaction terminal to capture an image of customer using the account identification device at the transaction terminal to make the payment during the transaction;
• and
• in response to a determination that the authorization response requires an image of the customer, executing instructions to cause the digital camera to capture a facial image of the customer using the account identification device to make the payment during the transaction at the transaction terminal;
• retrieving a communication reference from the authorization response;
• generating a notification that identifies the transaction and contains the facial image of the customer using the account identification device to make the transaction at the transaction terminal;
• transmitting the notification to a user device associated with the authorized user and identified by the communication reference retrieved from the authorization response;
• and
• in response to receiving a communication from the user device, decline the transaction.