What are Velocity Controls and Fraud Filters and how to configure them
Velocity Controls
Velocity controls are settings that determine transaction thresholds for a particular Merchant. This allows a merchant to monitor transaction flow, transactions by IP address, card number, and amount, right down to the hour.
Setup
To configure Velocity Controls, follow these steps:
- Select the Administration tab
- Select Terminals
- Select the terminal you want to configure
- Choose Velocity Controls
- Choose the appropriate Limit, Duration and Action for your needs
- Click “Update”
Settings Definitions
There are seven configurable settings:
- Maximum Sale $ - Set this to determine the maximum dollar amount to allow for each transaction.
- Minimum Sale $ - Set this to determine the minimum dollar amount to allow for each transaction.
- Maximum $ of Transactions - Set the maximum dollar amount for approved, or all, transactions within a specified time period (from 1 hour, up to 7 days) and whether to decline (transactions are not sent for authorization), or not.
- Maximum # of Transactions - Set the maximum number of approved, or all, transactions within a specified time period (from 1 hour, up to 7 days) and whether to decline (transactions are not sent out for authorization), or not.
- Maximum $ Amount per Card/Check No. - Set the maximum dollar amount allowed per card or check number* per specified time period (up to 24 hours or up to 7 days) and whether to decline (transactions are not sent out for authorization) or not. This calculation is based upon approved transactions only. Transactions that are not approved are not included in the calculation for maximum $ Amount per card/check no.
- Maximum # Transactions per Card/Check No. - Set the maximum number of transactions per card or check number* per specified time period (up to 24 hours or up to 7 days) and whether to decline (transactions are not sent out for authorization) or not. This calculation is based upon approved transactions only. Transactions that are not approved are not included in the calculation for maximum # transactions per card/check no.
- Maximum # Transactions per IP - Set the maximum number of transactions allowed per individual IP address per specified time period (up to 24 hours or up to 7 days) and whether to decline or not. This calculation is based upon approved transactions only. Transactions that are not approved are not included in the calculation for maximum # transactions per IP.
Example of Completed Velocity Control Settings
NOTE: Velocity Controls are a risk management tool and not a fraud prevention tool.
Fraud Filters
The ExactPay Gateway offers advanced fraud filters to assist in reducing fraudulent transactions; this in turn can reduce chargebacks. These features allow Merchant Administrators to create positive and negative lists for:
- IP Address
- Credit Card
- Email Address or Domain
- Reference Number
- Billing Address
- Country
Setup A New Filter From the Administration Tab
To setup Velocity Controls, follow these steps:
- Select the Administration tab
- Select Fraud Filters
- Click on “Create Fraud Filter” (first screenshot below)
- Select whether or not you want to create a Positive or a Negative filter (second screenshot below)
- Choose an option in the “Property” dropdown box
- Enter the value
- Click “Save”
Example of possible Fraud Filter configurations:
Note: Positive Filters will override Negative filters.
Setup a New Filter Using the Transaction Search
You may also use the Transaction Search list to create new Fraud Filters.
To setup Velocity Controls, follow these steps:
- Select the Transaction tab
- Enter the search parameters to find the transaction
- Click on the transaction
- Click on “Fraud Filters” near the bottom of the transaction detail
- Select the fraud filters you want to enable (screenshot below)
- Click “Save”
Manage Your List of Fraud Filters
Under the Fraud Filters section, Fraud Filters can be managed a few different ways:
- View the list by All, Negative, or Positive Fraud Filters
- Download the list into CSV to manually update
- Upload your own list from a CSV file, see below:
CSV File Format
Field |
Description |
Allowed Values |
Filter Type |
Determines if the filter is Positive or Negative |
‘P’ – Positive ‘N’ - Negative |
Field Name |
The field you are setting the filter for |
‘Customer Reference’ ‘Card Number’ ‘IP Address’ ‘Email’ ‘Address’ ‘Country’ |
Value |
Value you want to filter |
Must adhere to the format required for each field. |
- P,Customer Reference,BG
- P,Card Number,4111111111111111
- N,IP Address,1.2.3.4
- N,Customer Reference,BA
- N,Email,mick@fraud.com
- N,Address,123 Crook Street
- N,Country,UK
- N,Card Number,5454545454545454
NOTE: If you create a CSV file for upload, it will overwrite any existing Fraud Filters that are in place.
Creating Wildcards for Fraud Filters
The following transaction fields come into play when detecting fraudulent transactions. The table below indicates those fields and whether or not wildcards are available when creating your filters
Field |
Description |
Wildcards Allowed |
Billing Address |
The Address in the AVS input (AVS format: StreetAddress|Zip|City|State|Country), |
Yes |
Country |
The Country in the AVS input (AVS format: StreetAddress|Zip|City|State|Country) |
No |
Card Number |
Exact match only (full card number) |
No |
Customer Reference |
String |
Yes |
Email Address/Domain |
Email format or domain (*@xyz.com) |
Yes |
IP Address |
Network notation ranges (192.168.0.1, 192.168.0.1/32) |
No |
'*' - matches any character(s) in the expression and can be anywhere in the string. To use the '*' symbol literally escape it with '\'.
Examples:
- *abc - matches '123abc', and does not match '123abc123'
- abc* - matches 'abc*', and does not match '123abc123'
- a*c - matches 'abc', and does not match 'cbc'
- a\*c - matches 'a*c', and does not match 'abc'