User's Guide
Table Of Contents
- Payflow Pro Fraud Protection Services User’s Guide
- Preface
- Overview
- How Fraud Protection Services Protect You
- Configuring the Fraud Protection Services Filters
- Assessing Transactions that Triggered Filters
- Activating and Configuring the Buyer Authentication Service
- Performing Buyer Authentication Transactions Using the SDK
- Testing the Buyer Authentication Service
- Buyer Authentication Transaction Overview
- Buyer Authentication Terminology
- Buyer Authentication Server URLs
- Detailed Buyer Authentication Transaction Flow
- Call 1: Verify that the cardholder is enrolled in the 3-D Secure program
- Call 2: POST the authentication request to and redirect the customer’s browser to the ACS URL
- Call 3: Validate the PARES authentication data returned by the ACS server
- Call 4: Submit the intended transaction request to the Payflow server
- Example Buyer Authentication Transactions
- Buyer Authentication Transaction Parameters and Return Values
- ECI Values
- Logging Transaction Information
- Screening Transactions Using the Payflow SDK
- Downloading the Payflow SDK (Including APIs and API Documentation)
- Transaction Data Required by Filters
- Transaction Parameters Unique to the Filters
- Existing Payflow Parameters Used by the Filters
- Response Strings for Transactions that Trigger Filters
- Accepting or Rejecting Transactions That Trigger Filters
- Logging Transaction Information
- Responses to Credit Card Transaction Requests
- Fraud Filter Reference
- Testing the Transaction Security Filters
- Good and Bad Lists
- AVS Failure Filter
- BIN Risk List Match Filter
- Country Risk List Match Filter
- Email Service Provider Risk List Match Filter
- Freight Forwarder Risk List Match Filter
- Geo-location Failure Filter
- International IP Address Filter
- International Shipping/Billing Address Filter
- IP Address Match Filter
- Shipping/Billing Mismatch Filter
- Total Item Ceiling Filter
- Total Purchase Price Ceiling Filter
- Total Purchase Price Floor Filter
- USPS Address Validation Failure Filter
- ZIP Risk List Match Filter
- Deactivating Fraud Protection Services
- Index
Fraud Protection Services User’s Guide 83
Fraud Filter Reference
High-risk Address Filters
A
ZIP Risk List Match Filter
What does the filter do?
This filter compares the Ship To and Bill To ZIP codes (US only) against the high-risk list.
High-risk ZIP codes are determined based on analysis of millions of e-commerce transactions.
The specified action is taken whenever a submitted ZIP code appears in the risk list.
NOTE: Fraud tends to correlate to densely populated areas like major cities. For this reason,
ZIP codes on the risk list will likely correlate to major cities.
How does the filter protect me?
Matching a ZIP code on the risk list does not necessarily indicate a fraudulent purchase, but
that you should evaluate these transactions more closely than other transactions.
Freight Forwarder Risk List Match Filter
What does the filter do?
This filter screens the full Ship To address against a list of addresses of freight forwarders.
NOTE: Unlike the other Risk Lists, the Freight Forwarder Risk List was not developed through
statistical evaluation of e-commerce transactions. Rather, this is a list of know
addresses associated with freight forwarders.
The specified action is taken whenever a shipping address matches the address of a known
freight forwarding service.
NOTE: The Freight Forwarder filter requires a valid US shipping address. If the USPS
Address Validation filter determines that the address does not exist, then the Freight
Forwarder filter is skipped and placed in the Unused Filters list on the Fraud Details
page.
How does the filter protect me?
Freight forwarding services enable a customer to open an account using the forwarder’s
corporate address, and to have the service forward all packages to another end destination.
While there are legitimate uses for a freight forwarding service, forwarders also enable
fraudsters to hide their true location.
Whenever a customer orders delivery to a freight forwarder, you should research the
transaction more closely.
USPS Address Validation Failure Filter
What does the filter do?
This filter screens the Ship To and Bill To addresses (street number, street name, state, and
ZIP code) against the United States Postal Service database of existing addresses. The USPS
updates the database continually.