How issuers can mitigate payment card fraud