User's Guide
Table Of Contents
- Payflow Fraud Protection Services User’s Guide
- Preface
- Overview
- How Fraud Protection Services Protect You
- Configuring the Fraud Protection Services Filters
- Assessing Transactions that Triggered Filters
- Activating and Configuring the Buyer Authentication Service
- Performing Buyer Authentication Transactions Using the SDK
- Testing the Buyer Authentication Service
- Buyer Authentication Transaction Overview
- Buyer Authentication Terminology
- Buyer Authentication Server URLs
- Detailed Buyer Authentication Transaction Flow
- Call 1: Verify that the cardholder is enrolled in the 3-D Secure program
- Call 2: POST the authentication request to and redirect the customer’s browser to the ACS URL
- Call 3: Validate the PARES authentication data returned by the ACS server
- Call 4: Submit the intended transaction request to the Payflow server
- Example Buyer Authentication Transactions
- Buyer Authentication Transaction Parameters and Return Values
- ECI Values
- Logging Transaction Information
- Screening Transactions Using the Payflow SDK
- Downloading the Payflow SDK (Including APIs and API Documentation)
- Transaction Data Required by Filters
- Transaction Parameters Unique to the Filters
- Existing Payflow Parameters Used by the Filters
- Response Strings for Transactions that Trigger Filters
- Accepting or Rejecting Transactions That Trigger Filters
- Logging Transaction Information
- Responses to Credit Card Transaction Requests
- Fraud Filter Reference
- Testing the Transaction Security Filters
- Good and Bad Lists
- AVS Failure Filter
- BIN Risk List Match Filter
- Country Risk List Match Filter
- Email Service Provider Risk List Match Filter
- Geo-location Failure Filter
- International IP Address Filter
- International Shipping/Billing Address Filter
- IP Address Match Filter
- Shipping/Billing Mismatch Filter
- Total Item Ceiling Filter
- Total Purchase Price Ceiling Filter
- Total Purchase Price Floor Filter
- USPS Address Validation Failure Filter
- ZIP Risk List Match Filter
- Deactivating Fraud Protection Services
- Index
Content
6
Product Watch List Filter . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 79
High-risk Payment Filters . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 79
AVS Failure Filter . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 79
Card Security Code Failure Filter . . . . . . . . . . . . . . . . . . . . . . . . . . . . 81
Buyer Authentication Failure Filter. . . . . . . . . . . . . . . . . . . . . . . . . . . . 82
BIN Risk List Match Filter . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 84
Account Number Velocity Filter . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 84
High-risk Address Filters . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 84
ZIP Risk List Match Filter . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 85
USPS Address Validation Failure Filter . . . . . . . . . . . . . . . . . . . . . . . . . 85
IP Address Match Filter . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 85
Email Service Provider Risk List Match Filter . . . . . . . . . . . . . . . . . . . . . . 86
Geo-location Failure Filter . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 86
IP Address Velocity Filter . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 87
High-risk Customer Filters . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 88
Bad Lists . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 88
International Order Filters . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 88
Country Risk List Match Filter . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 89
International Shipping/Billing Address Filter . . . . . . . . . . . . . . . . . . . . . . . 89
International IP Address Filter . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 89
International AVS Filter . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 90
Accept Filters. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 90
Good Lists . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 91
Total Purchase Price Floor Filter. . . . . . . . . . . . . . . . . . . . . . . . . . . . . 91
Custom Filters . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 91
Appendix B Testing the Transaction Security Filters . . . . . . . . . .93
Good and Bad Lists . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 93
AVS Failure Filter . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 94
BIN Risk List Match Filter . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 94
Country Risk List Match Filter . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 95
Email Service Provider Risk List Match Filter . . . . . . . . . . . . . . . . . . . . . . . . 95
Geo-location Failure Filter . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 96
International AVS Filter . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 97
International IP Address Filter . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 97
International Shipping/Billing Address Filter . . . . . . . . . . . . . . . . . . . . . . . . . 98
IP Address Match Filter . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 98
Shipping/Billing Mismatch Filter . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 98