7 steps for merchants to detect and prevent first-party fraud