Fewer than one-third of merchants with annual online sales less than $10 million said their organization tracks false positives.