The fraud-events resource is returned in the 15011 FRAUD_DETECTED error, which BlueSnap sends when a transaction triggers fraud rules.
This resource is a container with these properties:
Reference ID for the BlueSnap fraud check, in case further investigation or information is required.
Unique ID given by Kount for the fraud check.
Container of fraud-event properties.
If a transaction triggers multiple fraud rules, then multiple fraud-event resources (one for each triggered fraud rule or threshold) may be sent within one fraud-events resource for that transaction.
The fraud-event resource is nested in the fraud-events resource container (as shown above). It is a container with the elements described below, which provides an indication of what fraud rule or configurable threshold was triggered and why, and details about the decision (either decline or review).
The fraud rule or threshold that was triggered by the order.
Errors triggered by CVV/AVS rules
AVS_ADDR_MISMATCH: AVS address mismatch
AVS_ADDR_NOT_VERIFIED: AVS address not verified
AVS_NAME_MISMATCH: AVS name mismatch
AVS_ZIP_MISMATCH: AVS zip code mismatch
AVS_ZIP_NOT_VERIFIED: AVS zip not verified
CVV_MISMATCH: CVV mismatch
CVV_NOT_VERIFIED: CVV not verified
Errors triggered configurable thresholds
blacklistIpCountryDecline: Device IP country is on the Device IP Country Decline List
blacklistNetworkTypeDecline: Network type used by the shopper’s device is on the Network Type Decline List
blacklistPaymentCountryDecline: BIN country of the credit card is on the Payment Country Decline List
blacklistShippingCountryDecline: Shipping address country is on the Shipping Address Country Decline List
cardPtokVelocityDecline: Number of transactions with the same credit card in the last hour exceeds the Credit Card 1 Hour Count Decline Threshold
deviceFingerprintVelocityDecline: Number of transactions with the same device fingerprint in the last hour exceeds the Device Fingerprint 1 Hour Count Decline Threshold
deviceIpVelocityDecline: Number of transactions with the same device IP in the last hour exceeds the Device IP 1 Hour Count Decline Threshold
deviceToBillingAddressDecline: Distance from the device IP to the billing address exceeds the Device IP to Billing Distance Decline Threshold
emailVelocityDecline: Number of transactions with the same billing email address in the last 24 hours exceeds the Email Address 24 Hour Count Decline Threshold
highRiskDecline: Order risk score exceeds the High Fraud Risk Decline Filter
orderTotalDecline: Total amount (in USD) for the order exceeds the Total Amount Decline Threshold
Action taken based on the fraud event code.