Risk Management

This document is a supplement to the Saferpay Backoffice User Manual and describes the functions of Saferpay Risk Management.

Saferpay Risk Management provides support in fraud prevention for eCommerce and helps to minimize the risk of payment defaults. Various blacklists are available for this purpose and rules can be created for monitoring the frequency of use for payment links for the payment page.

Prerequisites

In order to be able to use Saferpay Risk Management, the following is required:

• a Saferpay eCommerce licence and thus the existence of a valid ID with a user name and password for the Saferpay system

• at least one active Saferpay terminal via which payments can be made and the corresponding Saferpay ACCOUNTID

• a valid acceptance contract for credit cards or the German electronic direct debit procedure (ELV).

Instructions for use

To ensure that the settings made in Saferpay Risk Management apply, please note the following:

When using the Saferpay Transaction Interface, it is absolutely essential to determine the IP address of shoppers already in the shop and to submit them with the initialize request via the IP parameter to Saferpay. This step is necessary because shoppers only navigate through the web pages of the shop when using the transaction interface and no direct connection exists between them and Saferpay. Consequently, Saferpay cannot determine the IP addresses of shoppers and cannot compare them with Risk Management.

If you use the Saferpay payment page, however, you do not need to make any further adjustments. The shopper is then on www.saferpay.com and Saferpay knows the IP address. It is then automatically compared with the IP addresses in Risk Management.

Blacklists

Saferpay Risk Management provides various blacklists for blocking IP addresses, credit card numbers and bank connections or their aliases from Saferpay Secure Card Data. In addition, the countries of origin of IP addresses and credit cards can be determined from which no payments are to be accepted. For existing blacklisted entries, Saferpay refuses the request before an authorization request is triggered.

Overview

After logging in to the Saferpay Backoffice, choose the area “Saferpay Risk Management” to navigate to the Saferpay Risk Management Overview:

The page displays an overview of current entries in the blacklists and a brief description of the functions of Saferpay Risk Management.

IP addresses

Navigate via the “IP addresses” menu item to get to the “Enter IP addresses” form:

After you enter an IP address or an IP address location, click on “Save”. The collected IP addresses are then displayed in a table:

To release an entry, set a check mark in the check box in the relevant line and click on “Remove”.

Exporting and importing data

The IP addresses entered can be exported and imported as CSV or XML files. This, for example, enables you to transfer data to other Saferpay accounts.

To import lists you can use an export of current data as base or create your own list as CSV file. The format of the CSV is shown within following example:

Begin;End;Description
199.199.199.195;199.199.199.195;Test IP address 1
199.199.199.196;199.199.199.198;Test IP range 1

IP origin

Using “IP origin”, you get to the user interface for blocking IP addresses from one country or whole continents:

1. Activates or deactivates the blacklist

2. The check mark in the check box displays the complete blocking.

3. If no check mark is set, all requests from the continent are accepted.

4. A partially filled check box indicates that blocked entries exist for the continent.

5. The current list of countries is displayed by clicking on the continent.

6. Button for saving the blocked entries

Blocking of non-country-specific IP addresses

Certain IP addresses cannot be allocated to a country of origin. These can be blocked via the “Other Countries” menu point. In “Details”, the IP addresses which cannot be allocated as well as satellite providers and anonymous proxy servers can be blocked.

Card numbers and aliases

The credit card numbers can be blocked by entering the card numbers or via their aliases if you use the Saferpay Secure Card Data Service. This can be accessed via the “Card Numbers” menu item.

Card number

Click on the “Card Numbers” tab to get to the input screen for blocking credit card numbers. To block whole number ranges, use “%” as a placeholder for several characters.

Example: "523256%" blocks all MasterCard card numbers that start with 523256.

After entering, click on “Save”. The entered card numbers are then displayed in a table:

To release an entry, set a check mark in the check box in the relevant row and click on “Remove”.

Alias

When you use Saferpay Secure Card Data, you can enter an alias instead of the card number in the blacklist. You can enter aliases in the blacklist in the same way as you enter credit card numbers. Click on the “Alias” tab to access the corresponding mask:

Exporting and importing data

The card numbers and aliases entered can be exported and imported as CSV or XML files. This, for example, enables you to transfer data to other Saferpay accounts.

To import lists you can use an export of current data as base or create your own list as CSV file. The format of the CSV is shown within following example:

Description;CardNumberPattern
Customer X Visa;4200000000000000
Customer Y Master;5151515151515151
Pattern BIN Range;525252%

Card origin

In the “Card origin” column, you can block the countries of origin of MasterCard and Visa credit cards.

1. Activates or deactivates the blacklist

2. The check mark in the check box displays the complete blocking.

3. If no check mark is set, all requests from the continent are accepted.

4. A completely filled check box indicates that blocked entries exist for the continent.

5. The current list of countries is displayed by clicking on the continent.

6. Button for saving the blocked entries

Card type

In the card type screen you can block MasterCard and Visa business cards.

Bank accounts

Bank accounts can be blocked by entering the IBAN or account number and sort code or via their aliases if you use the Saferpay Secure Card Data Service. Choose “Account numbers” to access this area.

IBAN

The “IBAN” tab leads to the input screen for blocking German IBANs in order to exclude these from the German electronic direct debit procedure (ELV) via Saferpay.

After making the relevant entries, click on “Save”. The IBANs entered in the blacklist are then displayed:

Alias

When you use Saferpay Secure Card Data, you can enter an alias instead of the bank connection in the blacklist. You enter aliases in the blacklist in the same way as you enter bank connections. Click on the “Alias” tab to access the corresponding screen:

Exporting and importing data

The IP addresses entered can be exported and imported as CSV or XML files. This, for example, enables you to transfer data to other Saferpay accounts.

To import lists you can use an export of current data as base or create your own list as CSV file. The format of the CSV is shown within following example:

Description;IBAN
Test IBAN;DE152011128161647502

Queries

In this area of Saferpay Risk Management, it is possible to manually make queries regarding the issuing country of a Visa or MasterCard credit card and for the origin of an IP address.

IP origin

Via “IP origin” you reach the screen for requesting an IP address. Enter the IP address to get the country of origin and confirm your entry using the security code.

Then click “Search” to show the results:

Clicking on the button automatically adds the origin of the IP address to the “IP origin” blocking list.

Card Origin

Choose “Card origin” to access the screen for requesting a MasterCard or Visa credit card number. Enter the credit card number to find out the country of origin and confirm your entry using the security code.

Then click “Search” to show the results:

Clicking on the button automatically adds the origin of the credit card number to the “Card origin” blocking list.