Credit card fraud protection for merchants