Systems and methods for detecting potentially compromised payment cards

A computer-implemented method for detecting potentially compromised merchants, said method implemented using a token monitoring (TM) computer device comprising a processor in communication with a memory including a database, the TM computer device associated with a payment processing network, said method comprising:

• generating, by the processor, a set of tokens for use in initiating payment transactions at a selected merchant, each token of the set of generated tokens associated with the selected merchant and unassigned to any cardholder during generation of the set of generated tokens, each token of the set of generated tokens including merchant identification data for identifying the selected merchant;
• storing, in the database, the set of generated tokens as being associated with the selected merchant and unassigned to any cardholder;
• in response to a request from a merchant computer device associated with a transaction merchant, selecting a token of the set of generated tokens associated with the selected merchant and unassigned to any cardholder to assign to a cardholder;
• assigning the token to the cardholder;
• receiving, by the processor from the merchant computer device, an authorization request message associated with a payment transaction, wherein the authorization request message includes a transaction token and a transaction merchant identifier corresponding to the transaction merchant;
• determining, by the processor, that the received transaction token corresponds to one of the set of generated tokens associated with the selected merchant by comparing the transaction token to the set of generated tokens;
• determining, by the processor, whether the transaction merchant is the selected merchant by performing a lookup within the merchant identification data for a match to the transaction merchant identifier;
• and
• in response to the determination that the transaction merchant is not the selected merchant, designating, by the processor, the selected merchant as a compromised merchant.

A computer-readable storage medium having computer-executable instructions embodied thereon, wherein when executed by a token monitoring (TM) computing device having at least one processor coupled to at least one memory device including a database, the computer-executable instructions cause the at least one processor to:

• generate a set of tokens for use in initiating payment transactions at a selected merchant, each token of the set of generated tokens associated with the selected merchant and unassigned to any cardholder during generation of the set of generated tokens, each token of the set of generated tokens including merchant identification data for identifying the selected merchant;
• store, in the database, the set of generated tokens as being associated with the selected merchant and unassigned to any cardholder;
• in response to a request from a merchant computer device associated with a transaction merchant, select a token of the set of generated tokens associated with the selected merchant and unassigned to any cardholder to assign to a cardholder;
• assign the token to the cardholder;
• receive, from the merchant computer device, an authorization request message associated with a payment transaction, wherein the authorization request message includes a transaction token and a transaction merchant identifier corresponding to the transaction merchant;
• determine that the received transaction token corresponds to one of the set of generated tokens associated with the selected merchant by comparing the transaction token to the set of generated tokens;
• determine whether the transaction merchant is the selected merchant by performing a lookup within the merchant identification data for a match to the transaction merchant identifier;
• and
• in response to the determination that the transaction merchant is not the selected merchant, designate the selected merchant as a compromised merchant.