Velocity Controls and Fraud Filters

What are Velocity Controls and Fraud Filters and how to configure them

Velocity Controls

Velocity controls are settings that determine transaction thresholds for a particular Merchant. This allows a merchant to monitor transaction flow, transactions by IP address, card number, and amount, right down to the hour.

Setup

To configure Velocity Controls, follow these steps:

  1. Select the Administration tab
  2. Select Terminals
  3. Select the terminal you want to configure
  4. Choose Velocity Controls
  5. Choose the appropriate Limit, Duration and Action for your needs
  6. Click “Update”

Settings Definitions

There are seven configurable settings:

  • Maximum Sale $ - Set this to determine the maximum dollar amount to allow for each transaction.
  • Minimum Sale $ - Set this to determine the minimum dollar amount to allow for each transaction.
  • Maximum $ of Transactions - Set the maximum dollar amount for approved, or all, transactions within a specified time period (from 1 hour, up to 7 days) and whether to decline (transactions are not sent for authorization), or not.
  • Maximum # of Transactions - Set the maximum number of approved, or all, transactions within a specified time period (from 1 hour, up to 7 days) and whether to decline (transactions are not sent out for authorization), or not.  
  • Maximum $ Amount per Card/Check No. - Set the maximum dollar amount allowed per card or check number* per specified time period (up to 24 hours or up to 7 days) and whether to decline (transactions are not sent out for authorization) or not. This calculation is based upon approved transactions only.  Transactions that are not approved are not included in the calculation for maximum $ Amount per card/check no.
  • Maximum # Transactions per Card/Check No. - Set the maximum number of transactions per card or check number* per specified time period (up to 24 hours or up to 7 days) and whether to decline (transactions are not sent out for authorization) or not.  This calculation is based upon approved transactions only.  Transactions that are not approved are not included in the calculation for maximum # transactions per card/check no.
  • Maximum # Transactions per IP - Set the maximum number of transactions allowed per individual IP address per specified time period (up to 24 hours or up to 7 days) and whether to decline or not.  This calculation is based upon approved transactions only.  Transactions that are not approved are not included in the calculation for maximum # transactions per IP.

Example of Completed Velocity Control Settings

Screen Shot 2022-01-11 at 10.20.01 AM

NOTE: Velocity Controls are a risk management tool and not a fraud prevention tool. 

 

Fraud Filters

The ExactPay Gateway offers advanced fraud filters to assist in reducing fraudulent transactions; this in turn can reduce chargebacks. These features allow Merchant Administrators to create positive and negative lists for:

  • IP Address
  • Credit Card
  • Email Address or Domain
  • Reference Number
  • Billing Address
  • Country

Setup A New Filter From the Administration Tab

To setup Velocity Controls, follow these steps:

  1. Select the Administration tab
  2. Select Fraud Filters
  3. Click on “Create Fraud Filter” (first screenshot below)
  4. Select whether or not you want to create a Positive or a Negative filter (second screenshot below)
  5. Choose an option in the “Property” dropdown box
  6. Enter the value
  7. Click “Save”

Screen Shot 2022-01-11 at 10.45.44 AM

 

 

 

 

Example of possible Fraud Filter configurations:

Screen Shot 2022-01-11 at 10.42.21 AM

Note: Positive Filters will override Negative filters.

 

Setup a New Filter Using the Transaction Search

You may also use the Transaction Search list to create new Fraud Filters.

To setup Velocity Controls, follow these steps:

  1. Select the Transaction tab
  2. Enter the search parameters to find the transaction
  3. Click on the transaction
  4. Click on “Fraud Filters” near the bottom of the transaction detail
  5. Select the fraud filters you want to enable (screenshot below)
  6. Click “Save”

Screen Shot 2022-01-11 at 10.48.22 AM

 

Manage Your List of Fraud Filters

Under the Fraud Filters section, Fraud Filters can be managed a few different ways:

  • View the list by All, Negative, or Positive Fraud Filters
  • Download the list into CSV to manually update
  • Upload your own list from a CSV file, see below:

CSV File Format

 Field

Description

Allowed Values

Filter Type

 Determines if the filter is Positive or Negative

  ‘P’ – Positive

  ‘N’ - Negative

Field Name

 The field you are setting the filter for

  ‘Customer Reference’

  ‘Card Number’

  ‘IP Address’

  ‘Email’

  ‘Address’

  ‘Country’

Value

 Value you want to filter

Must adhere to the format required for each field.

  • P,Customer Reference,BG
  • P,Card Number,4111111111111111
  • N,IP Address,1.2.3.4
  • N,Customer Reference,BA
  • N,Email,mick@fraud.com
  • N,Address,123 Crook Street
  • N,Country,UK
  • N,Card Number,5454545454545454

NOTE: If you create a CSV file for upload, it will overwrite any existing Fraud Filters that are in place.

 

Creating Wildcards for Fraud Filters

The following transaction fields come into play when detecting fraudulent transactions. The table below indicates those fields and whether or not wildcards are available when creating your filters

Field

Description

Wildcards Allowed

Billing Address

The Address in the AVS input (AVS format:   StreetAddress|Zip|City|State|Country),

Yes

Country

The Country in the AVS input (AVS format: StreetAddress|Zip|City|State|Country)

No

Card Number

Exact match only (full card number)

No

Customer Reference

String

Yes

Email Address/Domain

Email format or domain (*@xyz.com)

Yes

IP Address

Network notation ranges (192.168.0.1, 192.168.0.1/32)

No

'*' - matches any character(s) in the expression and can be anywhere in the string. To use the '*' symbol literally escape it with '\'. 

Examples:

  • *abc - matches '123abc', and does not match '123abc123'
  • abc* - matches 'abc*', and does not match '123abc123'
  • a*c - matches 'abc', and does not match 'cbc'
  • a\*c - matches 'a*c', and does not match 'abc'