To begin with, I would carry out a comprehensive investigation to pinpoint the origin of the fraud. This could involve internal weaknesses, such as inadequate passwords and unprotected systems, or external threats like cybercriminals. By collaborating with the IT department or technology team, I would advocate for system audits, particularly in areas that manage sensitive information, while also promoting stronger password protocols and enhancing employee training on how to recognize and prevent fraudulent activities. If the fraud originates externally, it is vital to invest in fraud detection and prevention software that can quickly identify unusual patterns and behaviors that deviate from the merchant's typical transactions. This approach would facilitate a rapid response and provide insights to bolster the system's defenses against fraud attempts. After identifying the perpetrators, appropriate legal measures should be taken to deter others from similar actions. I am confident that with proactive strategies and ongoing assessments, the merchant can greatly reduce instances of fraud.