Systems and methods for detecting potentially compromised payment cards

1. A computer-implemented method for detecting potentially compromised payment cards, said method implemented using a token monitoring computer device comprising a processor in communication with a memory including a database, wherein said token monitoring computer device is associated with an interchange network, said method comprising:

storing, in the database, a first merchant identifier associated with a first merchant and linking the first merchant identifier to a plurality of tokens, each token being linked to a payment card identifier, each token being generated based on one or more rules associated with the first merchant, and each token is formatted as a payment account number;

receiving, from a merchant computer device, an authorization request message associated with a transaction, wherein the authorization request message includes a transaction token and a transaction merchant identifier;

determining, by the processor, that the received transaction token is associated with the first merchant by comparing the transaction token to the plurality of tokens linked to the first merchant identifier;

determining, by the processor, that the transaction is not being generated by the first merchant by comparing the transaction merchant identifier to the first merchant identifier; and

in response to the determination that the transaction is not being generated by the first merchant:

transmitting, by the processor to a computing device associated with an issuer bank associated with the transaction, a message including instructions to decline the transaction based on the determination that the merchant identifier does not correspond to the first merchant;

assigning, by the processor, a potentially compromised flag indicating a probability of fraudulent activity to the first merchant identifier based on the determination that the merchant identifier does not correspond to the first merchant;

assigning a first risk factor to one or more payment card accounts used in subsequent transactions involving the first merchant and occurring after the transaction; and

assigning a second risk factor less than the first risk factor to one or more payment card accounts used in preceding transactions involving the first merchant and occurring before the transaction.

2. A method in accordance with claim 1 , wherein if the determination is that the merchant identifier corresponds to the first merchant, the method further comprises:

determining, by the processor, a card identifier associated with the received transaction token; and

transmitting, by the processor, the card identifier to be included in the authorization request message.

3. A method in accordance with claim 1 further comprising initiating an investigation into the first merchant based on the determination that the transaction is not being generated by the first merchant.

4. A method in accordance with claim 1 further comprising:

receiving, by the processor, a card identifier from the first merchant;

determining, by the processor, a token associated with the card identifier and the first merchant; and

transmitting, by the processor, the token to the first merchant.

5. A method in accordance with claim 1 further comprising assigning, by the processor, the potentially compromised flag to a plurality of payment card accounts associated with a plurality of card identifiers, wherein the plurality of card identifiers are stored by the first merchant.

6. A method in accordance with claim 1 further comprising:

receiving, from the first merchant, a subsequent authorization request message including a card identifier;

determining, by the processor, that the potentially compromised flag is assigned to the first merchant identifier; and

assigning, by the processor, the potentially compromised flag to the card identifier.

7. A method in accordance with claim 1 further comprising assigning, by the processor, the potentially compromised flag to one or more card identifiers used in transactions with the first merchant that occurred since the token was originally transmitted to the first merchant.

8. A method in accordance with claim 1 further comprising:

receiving, by the processor, a merchant cleared signal; and

clearing, by the processor, the potentially compromised flag.

9. A method in accordance with claim 1 further comprising:

receiving, by the processor, a compromise confirmed signal; and

updating, by the processor, one or more potentially compromised flags to confirmed compromised.

10. A token monitoring computing device for detecting potentially compromised payment cards, said computing device comprising one or more processors communicatively coupled to one or more memory devices including a database, said token monitoring computing device associated with an interchange network, said computing device configured to:

store, in the database, a first merchant identifier associated with a first merchant and linking the first merchant identifier to a plurality of tokens, each token is further linked to a payment card identifier, each token is generated based on one or more rules associated with the first merchant, and each token is formatted as a payment account number;

receive an authorization request message associated with a transaction from a merchant, wherein the authorization request message includes a transaction token and a transaction merchant identifier;

determine that the received transaction token is associated with the first merchant by comparing the transaction token to the plurality of tokens linked to the first merchant identifier;

determine that the transaction is not being generated by the first merchant by comparing the transaction merchant identifier to the first merchant identifier; and

in response to the determination that the transaction is not being generated by the first merchant:

transmit, to a computing device associated with an issuer bank associated with the payment transaction, a message including instructions to decline the transaction based on the determination that the merchant identifier does not correspond to the first merchant;

assign a potentially compromised flag indicating a probability of fraudulent activity to the first merchant identifier based on the determination that the merchant identifier does not correspond to the first merchant;

assign a first risk factor to one or more payment card accounts used in subsequent transactions involving the first merchant and occurring after the transaction; and

assign a second risk factor less than the first risk factor to one or more payment card accounts used in preceding transactions involving the first merchant and occurring before the transaction.

11. The token monitoring computing device in accordance with claim 10 , wherein if the determination is that the merchant identifier corresponds to the first merchant, the token computing device is further configured to:

determine a card identifier associated with the received transaction token; and

transmit the card identifier to be included in the authorization request message.

12. The token monitoring computing device in accordance with claim 10 further configured to initiate an investigation into the first merchant based on the determination that the transaction is not being generated by the first merchant.

13. The token monitoring computing device in accordance with claim 10 further configured to:

receive a card identifier from the first merchant;

determine a token associated with the card identifier and the first merchant; and

transmit the token to the first merchant.

14. The token monitoring computing device in accordance with claim 10 further configured to assign the potentially compromised flag to a plurality of payment card accounts associated with a plurality of card identifiers, wherein the plurality of card identifiers are stored by the merchant.

15. The token monitoring computing device in accordance with claim 10 further configured to:

receive, from the first merchant, a subsequent authorization request message including a card identifier;

determine that the potentially compromised flag is assigned to the first merchant identifier; and

assign the potentially compromised flag to the card identifier.

16. The token monitoring computing device in accordance with claim 10 further configured to assign the potentially compromised flag to one or more card identifiers used in transactions with the first merchant that occurred since the token was originally transmitted to the first merchant.

17. A computer-readable storage medium having computer-executable instructions embodied thereon, wherein when executed by a token monitoring computing device having at least one processor coupled to at least one memory device, the computer-executable instructions cause the at least one processor to:

store, in a database, a first merchant identifier associated with a first merchant and linking the first merchant identifier to a plurality of tokens, each token is linked to a payment card identifier, each token is generated based on one or more rules associated with the first merchant, and each token is formatted as a payment account number;

receive an authorization request message associated with a transaction from a merchant, wherein the authorization request message includes a transaction token and a transaction merchant identifier; and

determine that the received transaction token is associated with the first merchant by comparing the transaction token to the plurality of tokens linked to the first merchant identifier;

determine that the transaction is not being generated by the first merchant by comparing the transaction merchant identifier to the first merchant identifier; and

in response to the determination that the transaction is not being generated by the first merchant:

transmit, to a computing device associated with an issuer bank associated with the transaction, a message including instructions to decline the transaction based on the determination that the merchant identifier does not correspond to the first merchant;

assign a potentially compromised flag indicating a probability of fraudulent activity to the first merchant identifier based on the determination that the merchant identifier does not correspond to the first merchant, wherein the potentially compromised flag indicates a probability of fraudulent activity;

assign a first risk factor to one or more payment card accounts used in subsequent transactions involving the first merchant and occurring after the transaction; and

assign a second risk factor less than the first risk factor to one or more payment card accounts used in preceding transactions involving the first merchant and occurring before the transaction.

18. The computer-readable storage medium of claim 17 , wherein the computer-executable instructions further cause the at least one processor to:

if the determination is that the merchant identifier corresponds to the first merchant, determine a card identifier associated with the received transaction token; and

transmit the card identifier to be included in the authorization request message.

19. The computer-readable storage medium of claim 17 , wherein the computer-executable instructions further cause the at least one processor to initiate an investigation into the first merchant.