Interfaces
Integration Guide
Risk Management
Block certain transactions automatically to reduce manual work
This document is a supplement to the Saferpay Backoffice User Manual and describes the functions of Saferpay Risk Management.
Saferpay Risk Management provides support in fraud prevention for eCommerce and helps to minimize the risk of payment defaults. Various blacklists are available for this purpose and rules can be created for monitoring the frequency of use for payment links for the payment page.
Prerequisites
In order to be able to use Saferpay Risk Management, the following is required:
- a Saferpay eCommerce licence and thus the existence of a valid ID with a user name and password for the Saferpay system
- at least one active Saferpay terminal via which payments can be made and the corresponding Saferpay ACCOUNTID
- a valid acceptance contract for credit cards or the German electronic direct debit procedure (ELV).
Instructions for use
To ensure that the settings made in Saferpay Risk Management apply, please note the following:
When using the Saferpay Authorization Interface, it is absolutely essential to determine the IP address of shoppers already in the shop and to submit them with the authorization request via the IP parameter to Saferpay. This step is necessary because shoppers only navigate through the web pages of the shop when using the authorization interface and no direct connection exists between them and Saferpay. Consequently, Saferpay cannot determine the IP addresses of shoppers and cannot compare them with Risk Management.
If you use the Saferpay payment page, however, you do not need to make any further adjustments. The shopper is then on www.saferpay.com and Saferpay knows the IP address. It is then automatically compared with the IP addresses in Risk Management.
Blacklists
Saferpay Risk Management provides various blacklists for blocking IP addresses, credit card numbers and bank connections or their aliases from Saferpay Secure Card Data. In addition, the countries of origin of IP addresses and credit cards can be determined from which no payments are to be accepted. For existing blacklisted entries, Saferpay refuses the request before an authorization request is triggered.
Overview
After logging in to the Saferpay Backoffice, choose the area “Saferpay Risk Management” to navigate to the Saferpay Risk Management Overview:
The page displays an overview of current entries in the blacklists and a brief description of the functions of Saferpay Risk Management.
IP addresses
Navigate via the “IP addresses” menu item to get to the “Enter IP addresses” form:
After you enter an IP address or an IP address location, click on “Save”. The collected IP addresses are then displayed in a table:
To release an entry, set a check mark in the check box in the relevant line and click on “Remove”.
Exporting and importing data
The IP addresses entered can be exported and imported as CSV or XML files. This, for example, enables you to transfer data to other Saferpay accounts.
To import lists you can use an export of current data as base or create your own list as CSV file. The format of the CSV is shown within following example:
1
Begin;End;Description
2
199.199.199.195;199.199.199.195;Test IP address 1
3
199.199.199.196;199.199.199.198;Test IP range 1
Copied!
IP origin
Using “IP origin”, you get to the user interface for blocking IP addresses from one country or whole continents:
- 1.Activates or deactivates the blacklist
- 2.The check mark in the check box displays the complete blocking.
- 3.If no check mark is set, all requests from the continent are accepted.
- 4.A completely filled check box indicates that blocked entries exist for the continent.
- 5.The current list of countries is displayed by clicking on the continent.
- 6.Button for saving the blocked entries
Blocking of non-country-specific IP addresses
Certain IP addresses cannot be allocated to a country of origin. These can be blocked via the “Other Countries” menu point. In “Details”, the IP addresses which cannot be allocated as well as satellite providers and anonymous proxy servers can be blocked.
Card numbers and aliases
The credit card numbers can be blocked by entering the card numbers or via their aliases if you use the Saferpay Secure Card Data Service. This can be accessed via the “Card Numbers” menu item.
Card number
Click on the “Card Numbers” tab to get to the input screen for blocking credit card numbers. To block whole number ranges, use “%” as a placeholder for several characters.
Example: "523256%" blocks all MasterCard card numbers that start with 523256.
After entering, click on “Save”. The entered card numbers are then displayed in a table:
To release an entry, set a check mark in the check box in the relevant row and click on “Remove”.
Alias
When you use Saferpay Secure Card Data, you can enter an alias instead of the card number in the blacklist. You can enter aliases in the blacklist in the same way as you enter credit card numbers. Click on the “Alias” tab to access the corresponding mask:
Exporting and importing data
The card numbers and aliases entered can be exported and imported as CSV or XML files. This, for example, enables you to transfer data to other Saferpay accounts.
To import lists you can use an export of current data as base or create your own list as CSV file. The format of the CSV is shown within following example:
1
Description;CardNumberPattern
2
Customer X Visa;4200000000000000
3
Customer Y Master;5151515151515151
4
Pattern BIN Range;525252%
Copied!
Card origin
In the “Card origin” column, you can block the countries of origin of MasterCard and Visa credit cards.
- 1.Activates or deactivates the blacklist
- 2.The check mark in the check box displays the complete blocking.
- 3.If no check mark is set, all requests from the continent are accepted.
- 4.A completely filled check box indicates that blocked entries exist for the continent.
- 5.The current list of countries is displayed by clicking on the continent.
- 6.Button for saving the blocked entries
Card type
In the card type screen you can block MasterCard and Visa business cards.
Bank accounts
Bank accounts can be blocked by entering the IBAN or account number and sort code or via their aliases if you use the Saferpay Secure Card Data Service. Choose “Account numbers” to access this area.
IBAN
The “IBAN” tab leads to the input screen for blocking German IBANs in order to exclude these from the German electronic direct debit procedure (ELV) via Saferpay.
After making the relevant entries, click on “Save”. The IBANs entered in the blacklist are then displayed:
Alias
When you use Saferpay Secure Card Data, you can enter an alias instead of the bank connection in the blacklist. You enter aliases in the blacklist in the same way as you enter bank connections. Click on the “Alias” tab to access the corresponding screen:
Exporting and importing data
The IP addresses entered can be exported and imported as CSV or XML files. This, for example, enables you to transfer data to other Saferpay accounts.
To import lists you can use an export of current data as base or create your own list as CSV file. The format of the CSV is shown within following example:
1
Description;IBAN
2
Test IBAN;DE152011128161647502
Copied!
Queries
In this area of Saferpay Risk Management, it is possible to manually make queries regarding the issuing country of a Visa or MasterCard credit card and for the origin of an IP address.
IP origin
Via “IP origin” you reach the screen for requesting an IP address. Enter the IP address to get the country of origin and confirm your entry using the security code.
Then click “Search” to show the results:
Clicking on the button automatically adds the origin of the IP address to the “IP origin” blocking list.
Card Origin
Choose “Card origin” to access the screen for requesting a MasterCard or Visa credit card number. Enter the credit card number to find out the country of origin and confirm your entry using the security code.
Then click “Search” to show the results:
Clicking on the button automatically adds the origin of the credit card number to the “Card origin” blocking list.
Events
In this column, all registered events are listed in tabular form and are provided as statistics.
Event list
Click on the “Event list” menu item to display the registered violations:
The following filters are available for the display:
- All events
- Payment link violations blocked
- Registered payment link violations
- IP addresses blocked for violations
- IP addresses registered for violations
- IP address blockings
- Blockings of IP origin
- Card origin blockings
- Card number/bank connection blockings
- Company card blocking
- SIX risk blocking
Statistics
Choose “Statistics” to display the amounts and causes of all refusals in a table:
Last modified 5mo ago