Authorize Fraud Settings

In order to mitigate issues with fraud on Authorize, we have some recommended settings for AFDS.
 

On ALL fraud filters the settings on Authorize should be to DECLINE all transactions, do not put any transactions into review

 

screencapture-account-authorize-net-UI-themes-anet-FraudFilter-IPVelocityFilter-aspx-2021-09-22-22_09_33.png
 
Please note: Some fraud filters do not have this decline setting available
 

Recommended Fraud Settings

Amount Filter

  • This filter allows you to set lower and upper transaction amount thresholds to restrict high-risk transactions and is often used to test the validity of credit card numbers
  • This should only really be set up if you are using your authorize account for other business operations, and don’t want people to be able to process transactions over a certain dollar value

Hourly Velocity Filter

  • This filter limits the total number of transactions received per hour, preventing high-volume attacks common with fraudulent transactions
  • This should never be enabled

Shipping-Billing Mismatch Filter

  • This filter identifies high-risk transactions with different shipping and billing addresses, potentially indicating purchases made using a stolen credit card
  • We currently do not submit shipping data to Authorize, this filter will always fail and should not be enabled

Transaction IP Velocity Filter

  • This filter isolates suspicious activity from a single source by identifying excessive transactions received from the same IP address.
  • If organizers you are selling through the box office, you need to exclude our IP in order to avoid issues
    • Add 104.199.121.21 to the IP Address Exclusion section if sales are being made through the Box Office

ip-exclude.jpg

 

Suspicious Transaction Filter

  • This filter reviews highly suspicious transactions using proprietary criteria identified by Authorize.Net's dedicated Fraud Management Team
  • This filter does not have the ability to automatically decline transactions and it should be disabled until further notice

Authorized AIM IP Addresses

  • This filter allows merchants submitting Advanced Integration Method (AIM) transactions to designate specific server IP addresses that are authorized to submit transactions
  • This should not be enabled unless you have something set up with another provider that requires it

IP Address Blocking

  • This filters allows you to block transactions from IP addresses known to be used for fraudulent activity
  • You can use this filter if you have a list of suspicious IP addresses that you want to block

Enhanced AVS Handling Filter

  • The Address Verification Service (AVS) is a standard feature of the payment gateway that compares the address submitted with an order to the address on file with the customer's credit card issuer. Merchants can then choose to reject or allow transactions based on the AVS response codes. AFDS includes an AVS filter that assists the decision process by allowing merchants the additional options of flagging AVS transactions for monitoring purposes, or holding them for manual review. Enabling this filter can cause issues when making sales through the box office and billing address input is not required in the box office
  • It’s best to leave this filter disabled

Enhanced CCV Handling Filter

  • Like AVS, Card Code Verification (CCV) is a standard feature of the payment gateway. CCV uses a card's three- or four-digit number to validate customer information on file with the credit card association. Like the AVS Filter, the CCV Filter allows merchants the additional options of flagging CCV transactions for monitoring purposes, or holding them for manual review.
  • This filter should not cause issues and here are the recommended settings:

Screen_Shot_2021-09-30_at_8.30.44_PM.png

 

Shipping Address Verification Filter

  • This filter verifies that the shipping address received with an order is a valid postal address
  • We currently do not submit shipping data to Authorize so this filter will always fail and should not be enabled

IP Shipping Address Mismatch Filter

  • This filter compares the shipping address provided with an order to the IP address of where the order originated from. This helps to determine whether or not the order is shipping to the country from which it originated
  • We currently do not submit shipping data to Authorize so this filter will always fail and should not be enabled

Regional IP Address Filter

  • This filter flags orders coming from specific regions or countries. You can choose to customize the filter actions based on an entire geographic area, or select country by country how to process transactions flagged by the filter
  • You can use this filter if you have a list of suspicious IP addresses that you want to block