Integrated Fraud Prevention Tools
Subuno has the following 3rd party fraud prevention tools pre-integrated: BIN, GeoIP, minFraud, Telified, Rapleaf, and PhoneID. No separate account needed with each service. Merchants can use these tools to validate orders manually or create rules to automate order screening. This page provides a description of each service and documents the required inputs and associated outputs.
*required fields
The BIN service provides information about the customer’s credit card based on the first six digits of the credit card. It returns the the name of the issuing bank, which country the card was issued from, and the type of card. The issuing country infomration can be used to compare against the billing information especially in countries where AVS is not supported. | ||
| Input | Output | Output Description |
|---|---|---|
| BIN number* | Card Brand | e.g. Visa, Mastercard, American Express..etc |
| Card Type | e.g.Credit, Debit, Prepaid...etc | |
| Issuing Bank Country | Country location of issuing bank | |
| Issuing Bank | Name of bank that issued the card | |
The GeoIP Country service determines which country the customer is placing the order from by looking at the IP address. Orders coming from IPs that don't match the billing address can potentially be high risk. Card testing attempts coming from foreign IPs can be blocked with this service. | ||
| Input | Output | Output Description |
|---|---|---|
| IP address* | IP Country | Country associated with IP address |
The minFraud service returns a risk score based on IP geolocation and provides information about the customer’s IP address. It also determines if the IP address has been associated with high risk transactions. | ||
| Input | Output | Output Description |
|---|---|---|
| IP Address* | Country Match | Whether IP country matched billing country |
| Billing city | IP Country | Country associated with IP address |
| Billing state/region | High Risk Country | Whether IP or billing came from a high risk country |
| Billing Zip/Postal | Distance | Distance measurement between IP and billing address |
| Billing Country* | IP Region | Region associated with IP address |
| IP City | City associated with IP address | |
| IP ISP | Internet Service Provider (ISP) or carrier of the IP address | |
| IP Org | Organization or owner of the IP address | |
| Anonymous Proxy | Whether IP was flagged as anonymous proxy | |
| Proxy Score | Likelihood of IP being a proxy | |
| Free Email | Whether email domain comes from a free email provider | |
| Risk Score | How risky the transaction is | |
The Telified service provides verification of the customer’s name and address against the phone number. It pings the telephone carriers responsible for the number and checks the provided customer name and address against the carrier’s billing records and returns what matched. The service can also be used to ensure that the phone number being called belongs to the card holder if merchants want to perform order confirmation via telephone. | ||
| Input | Output | Output Description |
|---|---|---|
| Phone Number* | Score | A score signaling the strengh of the match between name, address, and phone number |
| First Name | Explanation | Brief text explanation of the score |
| Last Name | Carrier Support | Whether the carrier of the phone number supports this kind of verification |
| Street | Account Age | How long the phone number has been active under the current subscriber |
| City | Phone Status | Whether the phone number is active, disconnected, invalid, or not available |
| State | Phone2Last | Whether the last name provided matches up with the last name associated with the phone’s billing records |
| ZIP | Phone2Location | Whether the non-street portions of the billing address provided matches up with the non-street portions of the address associated with the phone’s billing records. Because phone carriers store the address information differently, sometimes the complete address may not match due to syntax differences. |
| Phone2Address | Whether the complete address provided matches up with the address associated with the phone’s billing records | |
| Last2Address | Whether the last name provided matches up with the address associated with the phone number. Because phone users often are not the ones paying for the phone bill under family plans, this provides wider match coverage based on last name | |
| Confirmed Individual | Whether the customer name, address, and phone number all match up | |
The Email Verification service provides basic profile information about the customer’s email address and verifies whether email address and the customer’s name and address match. Fraudsters will almost never use the real email address of the card holder since the card holder will know that his/her card was compromised when they receive the order email confirmation so having a match provides signs that the order is legitimate. | ||
| Input | Output | Output Description |
|---|---|---|
| Email* | Email First Seen | When this email was first seen by Rapleaf or Rapleaf's data partners |
| First Name | Age | Approximate age range associated with the email |
| Last Name | Gender | Gender associated with the email |
| Street | Associated City | City location associated with email |
| City | Associated State | State location associated with email |
| State | First Name Match | Whether first name matches the email in Rapleaf's system |
| ZIP | Last Name Match | Whether last name matches the email in Rapleaf's system |
| Street Match | Whether street address matches the email in Rapleaf's system | |
| City Match | Whether city matches the email in Rapleaf's system | |
| State Match | Whether state matches the email in Rapleaf's system | |
| ZIP Match | Whether zip matches the email in Rapleaf's system | |
| Name Address Match | Whether the name matches the address in Rapleaf's system | |
| Velocity Score | Score indicating the velocity of the email | |
| Popularity Score | Score indicating the number of sources the email has been seen at | |
The PhoneID service provides information about the customer’s phone number. It returns the geographical location as well as the type of phone number. The idea is that certain types of phones are relatively disposable and/or not traceable so carry higher risk. For example, fraudsters will often use pre-paid cell phones and non-fixed VOIP numbers because they are easily obtainable/disposable and not traceable. | ||
| Input | Output | Output Description |
|---|---|---|
| Phone number* | Phone Type | Type of phone number. (e.g. fixed land line, cell, prepaid cell, toll free, non-fixed VOIP...etc) |
| Phone City | City associated with phone number | |
| Phone State | State associated with phone number | |
| Phone Zip | Zip code associated with phone number | |
| Phone Time Zone | Time zone associated with phone number | |
| Phone Country | Country associated with phone number | |