Security risk

The traditonal method of scoring merchants based on risk may not work when the attack uses low risk merchants to hide illegal transactions.