Policies, sometimes referred to as “Risk Policies” are , is a comprehensive risk management system designed to automate and streamline decision-making processes for Merchants and transactions on the platform to group a batch of Risk Decisions at once automatically.
Policies - What makes up a policy?
A policy . Facilitators can create and configure Policies that serve as a set of rules and conditions governing how various risk services and checks are applied.
Policies provide a powerful and customizable platform for automating risk management decisions, leveraging a variety of native and third-party risk review services and checks, and offering a flexible framework to adapt to the dynamic nature of Merchant and Transaction risk assessment.
A Policy is made up of 5 components, : Decisions, Sub-Decisions, Rules, Dependencies, and Failover Dependencies. See the table below for descriptions of each:
Policy Component | Description |
Decisions | A configuration of risk rules allowing Facilitators or Referrers to set specific risk criteria to determine the automated action that should occur to a transaction or entity. |
Sub-Decisions | Specific Decision criterial used to initiate the Decision Action. |
Rules | Conditional Sub-Decision criteria to further refine the Decision Action requirement. |
Dependencies | The result of another Decision acts as a prerequisite to trigger the current policy. |
Failover Dependencies | The action that should be taken if a Decision dependency fails or an error occurs to avoid the Decision action. |
...
Decisions
Decisions serve as the central control points within a Policy, coordinating the application of Sub-Decisions Rules and Dependencies with the initially specified risk service.
You can find all available Decisions here:
| Expand |
|---|
| title | Click here to see a list of all Decisions. |
|---|
|
Decision | Description | Available Sub Decisions |
|---|
Realtime Member Search | Designed to identify Individuals who have been designated risks by the US and Foreign governments. | Entity Score Address Conflict Citizenship Conflict Country Conflict DOB Conflict Entity Type Conflict Gender Conflict ID Conflict Phone Conflict
| Realtime Business Search | Designed to identify Business who have been designated risks by the US and Foreign governments. | Entity Score Address Conflict Citizenship Conflict Country Conflict DOB Conflict Entity Type Conflict Gender Conflict ID Conflict Phone Conflict
| MasterCard MATCH | A database that houses information about businesses (and their owners) whose credit card processing privileges have been terminated for a set of very specific reasons. Submissions can be flagged based on a partial, full or no match indicator. | Possible Matches Name Doing Business As Name Address Phone Number Alt Phone Number Country Subdivision Tax ID National Tax ID Service Provider Legal Service Provider DBA Representative Name Representative Address Representative Phone Number Representative Alt Phone Number Representative National ID Representative Drivers License ID Theft Rep National ID ID Theft Rep National Tax ID Termination Reason Code
| Business Instant ID | Validates and verifies a Business information, and TIN across multiple databases using a powerful, proprietary search and comparison process. | Business Score Verification Code Company Name Verification Street Address Verification City Verification State Verification ZIP Verification Phone Verification EIN Verification Risk Indicator Code OFAC Watch List Match Global Watch List Match Business Risk Address Match Business to Rep Link Index REP CVI Score REP Risk Indicator Score REP DOB Code REP NAS Code REP Watch List Match REP PO Box Address REP Decedent Match
| Consumer Instant ID | Validates and verifies a consumer's identity information, and DOB across multiple databases using a powerful, proprietary search and comparison process. | CVI Code Risk Indicator Code NAS Code NAP Code Decedent Match SSN Match DOB Code PO Box Address Watch List Match Red Flag Code
| Consumer Instant ID Basic | | CVI Code Risk Indicator Code NAS Code NAP Code Decedent Match SSN Match DOB Code PO Box Address Watch List Match
| ThreatMetrix | A comprehensive digital identity to authenticate each connecting user by combining information relating to devices, anonymized identity information, behavior patterns and threat intelligence. | Review Status Policy Score Reason Codes Risk Rating
| Transaction ThreatMetrix | | Review Status Policy Score Reason Codes Risk Rating
| ThreatMetrix Emailage | | | ThreatMetrix Fraudpoint | | | ThreatMetrix PhoneFinder | | Consumer Time Last Seen With Phones Consumer Time with Phones Deceased Indicators Phone Verification Message Primary Identity Full Name Primary Phone Carrier Primary Phone Type Primary Phone Risk Count High Primary Phone Risk Count Medium Primary Phone Risk Count Low Primary Phone Risk Indicator Messages Primary Phone Risk Indicator Status Primary Phone Status Primary Phone Verification Indicator Reason Codes
| LegitScript Register | Boards the merchant for online compliance review against the operating regulations of Visa, Mastercard, and other major payment networks. | | Equifax Consumer Credit Report | | | Charity Check | Ensure charities are compliant within key databases including IRS Publication 78, IRS Business Master File, Internal Revenue Bulletin, Automatic Revocation of Exemption, and OFAC Specially Designated National list. | Subsection Code PUB78 Verified
| GIACT Inquiry | GIACT Inquiry | Account Response Code Customer Response Code Verification Response
| GIACT Txn Inquiry | GIACT Inquiry for Transaction | Account Response Code Customer Response Code Verification Response
| GIACT gAuthenticate | | | GIACT Transaction gAuthenticate | | | Payload Attribute | | Entity Type Entity Public Entity Client IP Entity TC Date Entity TC Accept Date Entity TC Version Entity TIN Status Entity Industry Merchant Environment Merchant Annual Credit Card Sales Monthly Volume Merchant Average Ticket Merchant Established Date Merchant MCC Plaid Verification Custom Members Significant Responsibility Members Politically Exposed Members SSN TIN Global Business ID Email Domain Routing Number Change Request Division ID
| Payload Transaction Attribute | | Entity Type Entity Public Entity Client IP Entity TC Date Entity TC Accept Date Entity TC Version Entity TIN Status Entity Industry Merchant Environment Merchant Annual Credit Card Sales Monthly Volume Merchant Average Ticket Merchant Established Date Merchant MCC Plaid Verification Custom Transaction Payment Method Transaction Total Routing Number Imported Type Card on File Type Origin Token
| Risk Rating | | Credit Card Exposure Credit Risk Level Total Exposure ACH Exposure AML Risk Level AML Score AML Risk Category
| Transaction Size | | | Transaction Attribute | | | Transaction Authorization | | | AVS Response | | | Country Block | | Country Code | Transaction Metrics | | Daily All Transactions Count Daily All Transactions Amount Daily Declined Transactions Count Daily Declined Transactions Amount Daily Card Transactions Count Daily Card Transactions Amount Daily Declined Card Transactions Count Daily Declined Card Transactions Amount Daily Cards Present Transactions Count Daily Cards Present Transactions Amount Daily Declined Cards Present Transactions Count Daily Declined Cards Present Transactions Amount Daily Cards-Not-Present Transactions Count Daily Cards-Not-Present Transactions Amount Daily Declined Cards-Not-Present Transactions Count Daily Declined Cards-Not-Present Transactions Amount Daily Bank Transactions Count Daily Bank Transactions Amount Daily Declined Bank Transactions Count Daily Declined Bank Transactions Amount Daily Refunds Count Daily Refunds Amount Daily Declined Refunds Count Daily Declined Refunds Amount Daily Sales Daily Bad Authentications Daily Successful Authentications Weekly All Transactions Count Weekly All Transactions Amount Weekly Declined Transactions Count Weekly Declined Transactions Amount Weekly Card Transactions Count Weekly Card Transactions Amount Weekly Declined Card Transactions Count Weekly Declined Card Transactions Amount Weekly Cards Present Transactions Count Weekly Cards Present Transactions Amount WeeklyDeclined Cards Present Transactions Count Weekly Declined Cards Present Transactions Amount Weekly Cards-Not-Present Transactions Count Weekly Cards-Not-Present Transactions Amount Weekly Declined Cards-Not-Present Transactions Count Weekly Declined Cards Not Present Transactions Amount Weekly Bank Transactions Count Weekly Bank Transactions Amount Weekly Declined Bank Transactions Count Weekly Declined Bank Transactions Amount Weekly Refunds Count Weekly Refunds Amount Weekly Declined Refunds Count Weekly Declined Refunds Amount Weekly Sales Weekly Bad Authentications Weekly Successful Authentications Monthly All Transactions Count Monthly All Transactions Amount Monthly Declined Transactions Count Monthly Declined Transactions Amount Monthly Card Transactions Count Monthly Card Transactions Amount Monthly Declined Card Transactions Count Monthly Declined Card Transactions Amount Monthly Cards Present Transactions Count Monthly Cards Present Transactions Amount Monthly Declined Cards Present Transactions Count Monthly Declined Cards Present Transactions Amount Monthly Cards-Not-Present Transactions Count Monthly Cards-Not-Present Transactions Amount Monthly Declined Cards-Not-Present Transactions Count Monthly Declined Cards-Not-Present Transactions Amount MonthlyBank Transactions Count MonthlyBank Transactions Amount Monthly Declined Bank Transactions Count Monthly Declined Bank Transactions Amount Monthly Refunds Count Monthly Refunds Amount Monthly Declined Refunds Count Monthly Declined Refunds Amount Monthly Bad Authentications Monthly Successful Authentications
| TIN Check | Validates your recipient's Name/TIN information in real-time against the IRS database, the Office of Foreign Assets Control list (OFAC), and the Death Master File (DMF) to ensure you have valid recipient Name/TIN information. | | Trulioo Identity Document Verification (IDV) | | Record Status Surname Given Name Address Line 1 Postal Code Day of Birth Month of Birth Year of Birth Telephone Number State or Province Code Email Address
| Trulioo Business Verification | | Record Status Address Line 1 Postal Code City State or Province Code Business Name Business Registration Number Jurisdicition of Incorporation TIN Found in Directors Officers Found in Company Ownership
| Trulioo Async Business Verification | | Record Status Address Line 1 Postal Code City State or Province Code Business Name Business Registration Number Jurisdicition of Incorporation TIN Found in Directors Officers Found in Company Ownership
| TruliooAmlIdv | | Record Status Surname Given Name Address Line 1 Postal Code Day of Birth Month of Birth Year of Birth Telephone Number State or Province Code Email Address
| PlaidGetIdentity | | Available Current ISO Currency Code Unofficial Currency Code Official Name Type Depository Subtype Phone-Email Mismatch Email-Zip Code Mismatch
| PlaidIdentityMatch | | Legal Name Score Phone Number Score Email Address Score Address Score Business Name Detected First or Last Name Match Postal Code Match
| TxnPlaidIdentityMatch | | Legal Name Score Phone Number Score Email Address Score Address Score Business Name Detected First or Last Name Match Postal Code Match
| TxnPlaidGetIdentity | | Available Current ISO Currency Code Unofficial Currency Code Official Name Type Depository Subtype Phone-Email Mismatch Email-Zip Code Mismatch
| TxnPlaidGetAuth | | | BaselineTxnMetricsOutlierTicketSize | | Sub-Decision Outlier Ticket Size Transaction Number Transaction Percentile Transaction Base |
|
...
Sub-Decisions
...
Policy Component
...
Description
...
Subtype
...
Match Rule
...
Risk Level
...
Operator
...
Value
...
Action
...
Decisions utilize a modular approach called Sub-Decision to break down decisions tied to individual risk services like Realtime Member Search, ThreatMetrix, Equifax Consumer Credit Report, and more.
Policy Component | Description |
Subtype | The specific risk service or check corresponding to a distinct Decision type. |
Match Rule | Decides how the Sub-Decision is applied, either “All” (every owner meeting the criteria) or “Any” (only one owner having to meet the criteria). |
Risk Level | Optional prioritization based on the Merchant’s Risk Score (0-100), with Low (67-100), Medium (34-67), or High (0-33). |
Operator | Criteria filters determining the action based on the provided data from the risk service. |
Value | Specific data values associated with specific Operators. |
Action | The automated process(es) triggered when the Operator and Value criteria are met. |
...
Subtypes
Subtypes are used to further specify the criteria needing to be met by the specific risk service data returned.
See the subtypes available for each decision below:
Realtime Member Search
| Expand |
|---|
| title | Click here to see all Sub-Decisions for Realtime Member Search |
|---|
|
Sub-Decision | Description | Operators | Valid Values |
|---|
Entity Score | A score indicating the confidence in the identity match. | | Score values: 0 - 100 | Address Conflict | Whether the address information for screening list entity matches. | | No value. Operators serves as the value. | Citizenship Conflict | Whether the citizenship information for screening list entity matches. | | No value. Operators serves as the value. | Country Conflict | Whether the country information for screening list entity matches. | | No value. Operators serves as the value. | DOB Conflict | Whether the Date of Birth information for screening list entity matches | | No value. Operators serves as the value. | Entity Type Conflict | Whether the Entity Type information for screening list entity matches | | No value. Operators serves as the value. | Gender Conflict | Whether the Date of Birth information for screening list entity matches | | No value. Operators serves as the value. | ID Conflict | Whether the ID information for screening list entity matches | | No value. Operators serves as the value. | Phone Conflict | Whether the ID information for screening list entity matches | | No value. Operators serves as the value. |
|
...
Each Value will be dependent on the available Operators for each Subtype.
Truthy, Falsy,Is Present, and IsEmpty Operators do not require a Value to be set.
Greater than or equal to threshold, Less than or equal to threshold, Matches Value, and No Match Operators require a specific Value to be set:
Applicable Values for each risk service being reviewed are available in the Subtypes sections above.
...