{"_id":"59a45d467ee621000fc9d41b","category":{"_id":"59a45d447ee621000fc9d3c4","version":"59a45d437ee621000fc9d3b7","project":"57336fd5a6a9c40e00e13a0b","__v":0,"sync":{"url":"","isSync":false},"reference":false,"createdAt":"2015-10-15T16:20:51.519Z","from_sync":false,"order":12,"slug":"resources","title":"Resources"},"parentDoc":null,"project":"57336fd5a6a9c40e00e13a0b","user":"560d5913af97231900938124","version":{"_id":"59a45d437ee621000fc9d3b7","project":"57336fd5a6a9c40e00e13a0b","__v":1,"createdAt":"2017-08-28T18:13:23.840Z","releaseDate":"2017-08-28T18:13:23.840Z","categories":["59a45d447ee621000fc9d3b8","59a45d447ee621000fc9d3b9","59a45d447ee621000fc9d3ba","59a45d447ee621000fc9d3bb","59a45d447ee621000fc9d3bc","59a45d447ee621000fc9d3bd","59a45d447ee621000fc9d3be","59a45d447ee621000fc9d3bf","59a45d447ee621000fc9d3c0","59a45d447ee621000fc9d3c1","59a45d447ee621000fc9d3c2","59a45d447ee621000fc9d3c3","59a45d447ee621000fc9d3c4","59a45d447ee621000fc9d3c5","59a45d447ee621000fc9d3c6","59a45d447ee621000fc9d3c7"],"is_deprecated":false,"is_hidden":false,"is_beta":false,"is_stable":false,"codename":"3.22.1","version_clean":"8976.0.0-XML","version":"8976-XML"},"__v":0,"updates":[],"next":{"pages":[],"description":""},"createdAt":"2015-12-29T15:38:03.931Z","link_external":false,"link_url":"","githubsync":"","sync_unique":"","hidden":false,"api":{"results":{"codes":[]},"settings":"","auth":"required","params":[],"url":""},"isReference":false,"order":64,"body":"###Request\nN/A\n\n###Response\nThe `fraud-events` resource is returned in the [15011 FRAUD_DETECTED](doc:fraud-errors) error, which BlueSnap sends when a transaction triggers fraud rules.\n\nThis resource is a container with these properties:\n[block:parameters]\n{\n  \"data\": {\n    \"h-0\": \"Property Name\",\n    \"h-1\": \"Type\",\n    \"h-2\": \"Description\",\n    \"0-0\": \"`fraud-reference-id`\",\n    \"0-2\": \"Reference ID for the BlueSnap fraud check, in case further investigation or information is required.\",\n    \"0-1\": \"*string*\",\n    \"1-0\": \"`fraud-event`\",\n    \"1-1\": \"*string*\",\n    \"1-2\": \"Container of <a href=\\\"#fraudevent\\\">fraud-event</a> properties.\\nIf a transaction triggers multiple fraud rules, then multiple `fraud-event` resources (one for each triggered fraud rule or threshold) may be sent within one `fraud-events` resource for that transaction.\"\n  },\n  \"cols\": 3,\n  \"rows\": 2\n}\n[/block]\n<a name=\"fraudevent\"></a>**fraud-event sub-resource**\nThe `fraud-event` resource is nested in the `fraud-events` resource container (as shown above). It is a container with the elements described below, which provides an indication of what fraud rule or configurable threshold was triggered and why, and details about the decision (either decline or review).\n[block:parameters]\n{\n  \"data\": {\n    \"h-0\": \"Property Name\",\n    \"h-1\": \"Type\",\n    \"h-2\": \"Description\",\n    \"h-3\": \"Values\",\n    \"0-0\": \"`fraud-event-code`\",\n    \"1-0\": \"`fraud-event-decision`\",\n    \"2-0\": \"`fraud-event-expression`\",\n    \"0-1\": \"*string*\",\n    \"1-1\": \"*string*\",\n    \"2-1\": \"*string*\",\n    \"0-2\": \"The fraud rule or threshold that was triggered by the order.\\nValues:\\n\\n  * **AVS_ADDR_MISMATCH**: AVS address mismatch\\n  * **AVS_NAME_MISMATCH**:\\tAVS name mismatch\\n  * **AVS_ZIP_MISMATCH**: AVS zip code mismatch\\n  * **CVV_MISMATCH**: CVV mismatch\\n  * **ERROR_AVS_ADDR_NOT_VERIFIED**: AVS address not verified\\n  * **ERROR_AVS_ZIP_NOT_VERIFIED**: AVS zip not verified\\n  * **ERROR_CVV_NOT_VERIFIED**: CVV not verified\\n  * **blacklistIpCountryDecline**: Device IP country is on the Device IP Country Decline List\\n  * **blacklistNetworkTypeDecline**: Network type used by the shopper’s device is on the Network Type Decline List\\n  * **blacklistPaymentCountryDecline**: BIN country of the credit card is on the Payment Country Decline List\\n  * **blacklistShippingCountryDecline**: Shipping address country is on the Shipping Address Country Decline List \\n  * **cardPtokVelocityDecline**: Number of transactions with the same credit card in the last hour exceeds the Credit Card 1 Hour Count Decline Threshold\\n  * **deviceFingerprintVelocityDecline**: Number of transactions with the same device fingerprint in the last hour exceeds the Device Fingerprint 1 Hour Count Decline Threshold\\n  * **deviceIpVelocityDecline**: Number of transactions with the same device IP in the last hour exceeds the Device IP 1 Hour Count Decline Threshold\\n  * **deviceToBillingAddressDecline**: Distance from the device IP to the billing address exceeds the Device IP to Billing Distance Decline Threshold\\n  * **emailVelocityDecline**: Number of transactions with the same billing email address in the last 24 hours exceeds the Email Address 24 Hour Count Decline Threshold\\n  * **highRiskDecline**: Order risk score exceeds the High Fraud Risk Decline Filter\\n  * **orderTotalDecline**: Total amount (in USD) for the order exceeds the Total Amount Decline Threshold\",\n    \"1-2\": \"Action taken based on the fraud event code.\\nValues:\\n  * **D**: Decline\\n  * **R**: Review\",\n    \"1-3\": \"\",\n    \"2-2\": \"Explains why the rule/threshold triggered.\"\n  },\n  \"cols\": 3,\n  \"rows\": 3\n}\n[/block]","excerpt":"Contains information regarding fraud errors","slug":"fraud-event","type":"basic","title":"fraud-events / fraud-event"}

fraud-events / fraud-event

Contains information regarding fraud errors

Request

N/A

Response

The fraud-events resource is returned in the 15011 FRAUD_DETECTED error, which BlueSnap sends when a transaction triggers fraud rules.

This resource is a container with these properties:

Property Name
Type
Description

fraud-reference-id

string

Reference ID for the BlueSnap fraud check, in case further investigation or information is required.

fraud-event

string

Container of fraud-event properties.
If a transaction triggers multiple fraud rules, then multiple fraud-event resources (one for each triggered fraud rule or threshold) may be sent within one fraud-events resource for that transaction.

fraud-event sub-resource
The fraud-event resource is nested in the fraud-events resource container (as shown above). It is a container with the elements described below, which provides an indication of what fraud rule or configurable threshold was triggered and why, and details about the decision (either decline or review).

Property Name
Type
Description

fraud-event-code

string

The fraud rule or threshold that was triggered by the order.
Values:

  • AVS_ADDR_MISMATCH: AVS address mismatch
  • AVS_NAME_MISMATCH: AVS name mismatch
  • AVS_ZIP_MISMATCH: AVS zip code mismatch
  • CVV_MISMATCH: CVV mismatch
  • ERROR_AVS_ADDR_NOT_VERIFIED: AVS address not verified
  • ERROR_AVS_ZIP_NOT_VERIFIED: AVS zip not verified
  • ERROR_CVV_NOT_VERIFIED: CVV not verified
  • blacklistIpCountryDecline: Device IP country is on the Device IP Country Decline List
  • blacklistNetworkTypeDecline: Network type used by the shopper’s device is on the Network Type Decline List
  • blacklistPaymentCountryDecline: BIN country of the credit card is on the Payment Country Decline List
  • blacklistShippingCountryDecline: Shipping address country is on the Shipping Address Country Decline List
  • cardPtokVelocityDecline: Number of transactions with the same credit card in the last hour exceeds the Credit Card 1 Hour Count Decline Threshold
  • deviceFingerprintVelocityDecline: Number of transactions with the same device fingerprint in the last hour exceeds the Device Fingerprint 1 Hour Count Decline Threshold
  • deviceIpVelocityDecline: Number of transactions with the same device IP in the last hour exceeds the Device IP 1 Hour Count Decline Threshold
  • deviceToBillingAddressDecline: Distance from the device IP to the billing address exceeds the Device IP to Billing Distance Decline Threshold
  • emailVelocityDecline: Number of transactions with the same billing email address in the last 24 hours exceeds the Email Address 24 Hour Count Decline Threshold
  • highRiskDecline: Order risk score exceeds the High Fraud Risk Decline Filter
  • orderTotalDecline: Total amount (in USD) for the order exceeds the Total Amount Decline Threshold

fraud-event-decision

string

Action taken based on the fraud event code.
Values:

  • D: Decline
  • R: Review

fraud-event-expression

string

Explains why the rule/threshold triggered.