File Action 6tz25
This document was ed by and they confirmed that they have the permission to share it. If you are author or own the copyright of this book, please report to us by using this report form. Report 3i3n4
Overview 26281t
& View File Action as PDF for free.
More details 6y5l6z
- Words: 7,886
- Pages: 45
Visa Risk Manager Guide Visa Real Time Decisioning
January 2008
Visa Real Time Decisioning
What’s Covered n
Visa Real Time Decisioning Overview.....................................................................................3 The Right Decisions at the Right Time.......................................................................................3
n
Rules Startup................................................................................................................... 4 Create New Rule............................................................................................................................... 4 Edit/Delete/Print Existing Rule.....................................................................................................5
n
Rule Definition.............................................................................................................................. 6 Define a Rule...................................................................................................................................... 6
n
Rule Criteria Steps.......................................................................................................................11 Set Rule Criteria................................................................................................................................13 Edit Criteria.......................................................................................................................................20
n
Rule Testing..................................................................................................................................21 Test and Activate Rules..................................................................................................................21
n
Rule Status and Versions......................................................................................................... 24 Status Description..........................................................................................................................24 Version Number..............................................................................................................................24 Modify a Rule...................................................................................................................................25 Deactivate a Rule............................................................................................................................26 Delete an Inactive Rule.................................................................................................................27
n
Rule Publishing...........................................................................................................................28 Access Rule Set Details................................................................................................................29 Edit a Rule Set..................................................................................................................................30 Remove a Rule..................................................................................................................................32
VISA RISK MANAGER GUIDE | VISA REAL TIME DECISIONING Notice: The information herein by Visa is CONFIDENTIAL and may not be disclosed or published without the prior written permission of Visa. Information is to be used solely for acceptance of Visa payment products.
1
n
Block/Exclude Rules.................................................................................................34 Key Considerations.........................................................................................................................34 Create Block Rules—Manual Entry.........................................................................35 Create Block Rules—File ..............................................................................37 Create Exclude Rules................................................................................................... 40 Search for Rules.............................................................................................................42 Delete an Rules..............................................................................................................43
2
VISA RISK MANAGER GUIDE | VISA REAL TIME DECISIONING
Notice: The information herein by Visa is CONFIDENTIAL and may not be disclosed or published without the prior written permission of Visa. Information is to be used solely for acceptance of Visa payment products.
VISA REAL TIME DECISIONING
Visa Real Time Decisioning Overview
The Right Decisions at the Right Time
Visa Real Time Decisioning gives financial institutions the capability to allow Visa to act on their behalf to decline or forward—refer highfraud—risk transactions using predefined rules created by the issuer, ing both “issuer available” and “issuer unavailable” processing options. Whenever Visa sends a decline advice in response to suspected fraud, the advice will contain the details necessary to customer inquiries regarding the decline action taken. Visa Real Time Decisioning enables issuers to create rules for “in flight” authorization decisions using over 20 different authorization parameters to identify the highest risk transactions. Rules that are entered through Visa Rules Manager govern how Visa Real Time Decisioning takes action on transactions scored by Visa Advanced Authorization. Real Time Decisioning: • Processes all Visa-switched transactions that receive a Visa Advanced Authorization score. This includes all authorization and purchase activity for US issued cards, as well as for Canada and LAC regions (FY08).
Visa Real Time Decisioning provides issuers with the ability to stop fraud before losses are realized or additional processing costs are incurred. It is the state-of-the-art system that issuers need to dynamically respond to rapidly changing fraud patterns and stay one step ahead of the criminals. It is an ideal solution for issuers that want to optimize and maintain their operational risk strategies, by supplementing existing systems or as an end-toend solution.
• Optimizes Visa Integrated Payment System infrastructure and all of the “in flight” real time data access. Most fraud management systems monitor a small portion of the total transaction volume. Visa monitors 100% of transactions, leveraging all payment channels and cross-border transaction information. • Is customizable. It provides issuers with the ability to set rules for specific days or time period to accommodate staffing levels or other unique business needs. • Can be used to block/exclude s. In addition to establishing rules to evaluate transaction, issuers can use Visa Real Time Decisioning to identify numbers that should be excluded from specific rules for a given time period and to block numbers to decline all authorization requests. • Generates reports that show actual performance. Visa Real Time Decisioning reports specify all actions taken and can be summarized by BIN or rule.
VISA RISK MANAGER GUIDE | VISA REAL TIME DECISIONING Notice: The information herein by Visa is CONFIDENTIAL and may not be disclosed or published without the prior written permission of Visa. Information is to be used solely for acceptance of Visa payment products.
3
VISA REAL TIME DECISIONING
Rules Startup
Create New Rule
1. From the Visa® Risk Manager Navigation Menu, select Rules Manager, then choose Rules .
1
The Rules Management screen will be displayed.
2
3
2. Select Real Time Decisioning as the Rule Type. 3. When you use the application for the first time, there will be no existing rules. Click the Create New Rule button to define your first rule.
4
Depending on your product options you may have access to either the Real Time Decision Rule Type, Case Creation Rule Type, or both.
VISA RISK MANAGER GUIDE | VISA REAL TIME DECISIONING
Notice: The information herein by Visa is CONFIDENTIAL and may not be disclosed or published without the prior written permission of Visa. Information is to be used solely for acceptance of Visa payment products.
VISA REAL TIME DECISIONING
The Rule Definition Screen will be displayed.
After you have created a rule, it will be displayed the next time you access the Rules Management screen (as shown below).
1
Edit/Delete/ Print Existing Rule
2
3
1. Click the View/Edit button to go to the Rule Definition screen to make changes to the rule. 2. Click the Delete button to remove an inactive rule. (Active rules must be deactivated before they can be deleted. 3. Print the Rules Management screen. For more information about active and inactive rules, refer to “Rules Testing” on pages 21 through 23 in this section.
VISA RISK MANAGER GUIDE | VISA REAL TIME DECISIONING Notice: The information herein by Visa is CONFIDENTIAL and may not be disclosed or published without the prior written permission of Visa. Information is to be used solely for acceptance of Visa payment products.
5
VISA REAL TIME DECISIONING
Rule Definition
Define a Rule
Each Visa Real Time Decisioning rule consists of the following components: • Basic information includes: – -entered — Name, Rule Type, which are required, and Description. – System-generated — Rule Version and Rule Status
The Rule Definition screen is used to set two types of rules: Real Time Decisioning and Case Creation.
• Criteria is used to define the conditions that will be used to evaluate transactions • Processing Options are based on Rule Type. For Real Time Decisioning rules, there are two processing options — Action and Time Frame 1. Enter a Name and optional Description for the rule in the Rule Definition screen. > Rule Definition
This is a screen example for new Real Time Decisioning rule with the Name and Description already entered.
1 2 Default values for Action (Decline), and Time Frame (Always), are displayed.
2. Click the Criteria: “Add a definition” link to validate and save the data entered so far. Note: You can also click the Update button to save your data at any time.
6
VISA RISK MANAGER GUIDE | VISA REAL TIME DECISIONING
Notice: The information herein by Visa is CONFIDENTIAL and may not be disclosed or published without the prior written permission of Visa. Information is to be used solely for acceptance of Visa payment products.
VISA REAL TIME DECISIONING
The system will display a confirmation message 3. Click OK to save the data prior to navigating away from the Rules Definition screen. The Rule Definition: Edit Criteria screen will be displayed.
4
5
4. Follow the simple four-step process to enter the rule criteria. (For a more detailed explanation of this process, see Rule Criteria Steps on pages 11 through 20 of this section.) • Step 1: Select Parameter from the drop-down menu. • Step 2: Choose Operator that is available (displayed) for the selected parameter. • Step 3: Enter Values from the drop-down menu. • Step 4: Add to Criteria List by clicking the Add button. After the first criteria is entered, the can repeat steps 1-4 to add additional criteria to the rule. 5. Click Update to save your data and proceed.
VISA RISK MANAGER GUIDE | VISA REAL TIME DECISIONING Notice: The information herein by Visa is CONFIDENTIAL and may not be disclosed or published without the prior written permission of Visa. Information is to be used solely for acceptance of Visa payment products.
7
VISA REAL TIME DECISIONING
The Rule Definition screen will be redisplayed, showing the selected criteria.
6
7
6. If you need to make any changes to the criteria, click the Edit button. The system will return to the Edit Criteria screen. 7. If you have not already done so, that the default values for Action and Time Frame are correct for your situation. Adjust the Action and Time Frame Processing options, if necessary.
8
Your processing options will vary, depending on the type of rules you are using (i.e., Real Time Decisioning or Case Creation rules).
VISA RISK MANAGER GUIDE | VISA REAL TIME DECISIONING
Notice: The information herein by Visa is CONFIDENTIAL and may not be disclosed or published without the prior written permission of Visa. Information is to be used solely for acceptance of Visa payment products.
VISA REAL TIME DECISIONING
For Real Time Decisioning Rules, you need to specify the Action and the Time Frame Processing Options: • Action defines the response that must occur when a transaction triggers this rule. If you select this option for a rule:
Decline
Then:
• Authorization requests that meet the criteria defined within the rule will be declined by Visa. • A decline response will be sent to the acquirer; the issuer processor will receive a decline advice indicating that the authorization was declined by Visa due to suspected fraud. The Response Code field within the issuer’s advice is set to ‘59’ to indicate that the rule was triggered by Real Time Decisioning..
Forward and Referral
• The authorization request is delivered to the issuer processor for final decision. When delivered, the Response Code (field 39) is set to ‘59’ to indicate that the rule was triggered by Real Time Decisioning.
No Action
• No further rule evaluation is needed for this transaction. This action should be used if the member wants to ignore a specific set of transactions from Real Time Decisioning. • Example: If the issuer has 5 active rules, but does not want any of the rules to be applied to Visa Signature cards, the issuer could create a “No Action” rule where “Product ID = Visa Signature” and assign the Rule Priority = 1. Any authorization request for Visa Signature cards will trigger the “No Action” rule, and the authorization is forwarded to the issuer for decisioning.
> Real time decisioning transaction Flow KI8EJ8:K@FE
;<=@E<;8:K@FE
Gi`fi`kp(Ilc\9
I LC< J < K
GXjj\j
Gi`fi`kp)Ilc\< GXjj\j
Gi`fi`kp*Ilc\;
Gi`fi`kp+Ilc\8
VISA RISK MANAGER GUIDE | VISA REAL TIME DECISIONING
;\Zc`e\ J\e[[\Zc`e\X[m`Z\ kf`jjl\i&gifZ\jjfi Ki`^^\ij*i[ Gi`fi`kpIlc\
=finXi[ J\k8lk_fi`qXk`fe I\jgfej\:f[\=`\c[*0 kfXe\nmXcl\f],0
Ef8Zk`fe
9
Notice: The information herein by Visa is CONFIDENTIAL and may not be disclosed or published without the prior written permission of Visa. Information is to be used solely for acceptance of Visa payment products.
VISA REAL TIME DECISIONING
• Time Frame specifies when the rule should be applied. If you select this option:
Then:
Always
• The rule will be applied at all times.
Days of the Week
• The rule will be applied at specific days and times and the Rules Definition screen will be refreshed to display the Time of Day grid (see below). • s should use the grid to select each hour/day for which the rule should be active.
Issuer Unavailable
• The rule will be evaluated only if the issuer processor is unavailable.
• The selected Action must be Decline. The Time of Day grid allows you to enter the hours for each day that the rule should be applied. All you need to do is click the appropriate boxes. To select all hours for a day, click the Select all link at the end of that row. > TIME OF DAY GRID
10
VISA RISK MANAGER GUIDE | VISA REAL TIME DECISIONING
Notice: The information herein by Visa is CONFIDENTIAL and may not be disclosed or published without the prior written permission of Visa. Information is to be used solely for acceptance of Visa payment products.
VISA REAL TIME DECISIONING
Rule Criteria Steps
For a rule to be defined, it must contain criteria. These are the conditions that determine if a transaction will trigger the rule. Each criterion consists of: • A parameter, such as Merchant Category Code or Transaction Amount • An operator, such as equal to or greater than • One or more values, depending on the parameter and operator selected A rule can contain one or more criteria (multiple criteria are connected as a string of “ands”). The transaction must meet all of the criteria to fall within the rule. Examples of the rules are as follows: Example 1: Rule Name = Non-US ATM Rule Objective: “I want to decline any ATM transaction that originated outside of the US that is greater than $500 and has a risk score greater than or equal to XX” This rule has four parameters (as listed below). To define the rule, you would combine the operators and values to get the following rule components: Parameter
Operator
Value
Merchant Category Code
=
6011 (ATM)
Merchant Country Code
<>
840 (USA)
Transaction Amount
>
500
Advanced Authorization Risk Score
>
XX
Example 2: Rule Name = Country Specific High Risk Rule Objective: “I want to decline any transaction that originated in Spain or Russia where the risk score is greater than or equal to XX and the Compromised Risk Condition Code is either X, Y, or Z.” This rule would have three parameters (as listed below). To define the rule, you would combine the operators and values to each of the three parameters to get the following rule components: Parameter
Operator
Value
Merchant Country Code
IN
643 (Spain) 724 (Russia)
Advanced Authorization Risk Score
>
XX
Compromised Risk Condition Code
IN
X Y Z
VISA RISK MANAGER GUIDE | VISA REAL TIME DECISIONING
11
Notice: The information herein by Visa is CONFIDENTIAL and may not be disclosed or published without the prior written permission of Visa. Information is to be used solely for acceptance of Visa payment products.
VISA REAL TIME DECISIONING
Example 3: Rule Consolidation Whenever possible, you should look for opportunities to consolidate your rules. Rule Objective: “I want to decline any transaction where the risk score is greater than or equal to XX and the transaction type is either Mail/Telephone or Recurring Payment.”
Rule A: Parameter
Operator
Value
Advanced Authorization Risk Score
>
XX
MOTO/ECI/Recurring
=
MOTO
Rule B: Parameter
Operator
Value
Advanced Authorization Risk Score
>
XX
MOTO/ECI/Recurring
=
Recurring Payment
The above two rules can be combined into a single rule by using the “IN” operator with the following criteria:
New Combined Rule (A and B): Parameter
Operator
Value
Advanced Authorization Risk Score
>
XX
MOTO/ECI/Recurring
IN
MOTO Recurring Payment
Rules to Keep the following in mind when deg Visa Risk Manager rules criteria. • All criteria within a rule must be met for that rule to be triggered. • Determine your objectives and write your rules based on your own fraud trends. • Watch out for overlapping or conflicting rules.
12
VISA RISK MANAGER GUIDE | VISA REAL TIME DECISIONING
Notice: The information herein by Visa is CONFIDENTIAL and may not be disclosed or published without the prior written permission of Visa. Information is to be used solely for acceptance of Visa payment products.
VISA REAL TIME DECISIONING
Set Rule Criteria
Once you identify a Name and optional description for a rule in the Rule Definition screen, you are ready to create the criteria for a new rule.
When you click, “Add a New Definition,” the Edit Criteria screen will be displayed.
VISA RISK MANAGER GUIDE | VISA REAL TIME DECISIONING
13
Notice: The information herein by Visa is CONFIDENTIAL and may not be disclosed or published without the prior written permission of Visa. Information is to be used solely for acceptance of Visa payment products.
VISA REAL TIME DECISIONING
1. Select a parameter from the drop-down menu. > Rule Definition — Edit Criteria
1
The Parameter Details Table on the next page offers some additional comments on several parameters listed in the drop-down menu.
14
VISA RISK MANAGER GUIDE | VISA REAL TIME DECISIONING
Notice: The information herein by Visa is CONFIDENTIAL and may not be disclosed or published without the prior written permission of Visa. Information is to be used solely for acceptance of Visa payment products.
VISA REAL TIME DECISIONING
Parameter Details Table Parameter
Range
Key Points to Consider
• Expect values between 6 to 9 digits in length. When entered, the rule will apply to numbers that fall within the range. Example: If you enter 1234567, the application will define the MIN and MAX as follows: MIN: 123456700 MAX: 123456799 • Upon receiving an authorization request for an number, the application will look at the first 9 digits of the number to determine if it falls between the MIN and MAX values.
BIN
The value of the BIN is the first digits of the number.
Compromised Event Reference ID (CER ID)
This field displays the unique ID assigned to a specific data compromised event. If your organization is setup to receive the CER ID, the value will be populated within the authorization message and is available to use in both Real Time Decisioning and Case Creation rules.
• CVV Result Code
• All three of these parameters should only be used in Real Time Decisioning rules if Visa is performing the validation on behalf of the issuer.
• CVV2 Result Code • Address Verification Result Code
Transaction Amount (U.S. $)
• In many situations, the issuer is ing the results for these fields. In this case, the result codes will not be known at the time Real Time Decisioning is evaluating the authorization request. The value of the transaction amount should be entered in the U.S. dollar equivalent. Every transaction that is received by Visa is translated into the U.S. dollar amount, even if both the merchant and issuer process in non-US dollars. Example: If a Canadian cardholder purchases an item at a Canadian merchant; both the issuer and acquirer transaction currency will be in Canadian dollars. However, Visa will translate this activity into the US dollar equivalent, which is always used for the Transaction Amount field. Note: Only whole dollars are allowed. If you want to see transactions that are less than 1.00 (e.g. .99 cents), you should use the less than operator (<) with the value “1” as the transaction amount.
VISA RISK MANAGER GUIDE | VISA REAL TIME DECISIONING
15
Notice: The information herein by Visa is CONFIDENTIAL and may not be disclosed or published without the prior written permission of Visa. Information is to be used solely for acceptance of Visa payment products.
VISA REAL TIME DECISIONING
2. Select an operator that is available for the parameter. Most parameters have a set of available operators, as shown here. (See Special Case Parameters on pages 17 and 18 of this section for non-standard operator explanation.)
2
Use:
TO:
=
Select only one value.
___
<>
Select all values except one.
I want this rule to apply to all e-commerce transactions that were not classified as “secure electronic commerce” would be as follows: MOTO/ECI/Recurring <> “secure electronic commerce”
IN
Select more than one value.
You would use the “IN” operator if you want a rule to apply to both Recurring Transactions and Installment Payments.
Indicate that you do not want to select more than one value.
You would use the “NOT IN” operator if you want a rule to apply to all transactions except Recurring Transactions and Installment Payments.
NOT IN
16
Example:
VISA RISK MANAGER GUIDE | VISA REAL TIME DECISIONING
Notice: The information herein by Visa is CONFIDENTIAL and may not be disclosed or published without the prior written permission of Visa. Information is to be used solely for acceptance of Visa payment products.
VISA REAL TIME DECISIONING
Special Case Parameters The following parameters do not use the standard set of operators: The Merchant Zip Code allows the use of the Like operator. Example: “Merchant Zip Code Like 944” would match zip codes 94400 through 94499.
Transaction Amount and VAA Risk Score parameters allow the use of Less Than, Less Than or Equal To, Greater Than, and Greater Than or Equal to. They do NOT allow the use of IN and NOT IN.
VISA RISK MANAGER GUIDE | VISA REAL TIME DECISIONING
17
Notice: The information herein by Visa is CONFIDENTIAL and may not be disclosed or published without the prior written permission of Visa. Information is to be used solely for acceptance of Visa payment products.
VISA REAL TIME DECISIONING
The Range parameter only uses the Between operator. You can enter up to 9 digits. If you enter less and tab out of the first value, the system will fill it with zeros and display a high value filled with nines:
CW and CW2 Fraud Indicators parameters only allow the On/Off operator and do NOT allow entry of any values. The CW and CW2 Fraud Indicators are flags that are either on or off in the transaction. Example: “CW Fraud Indicator On” would match transactions with that flag. When selected, the “Enter Values” step is not required. Click the “Add” button to add the criteria to the list.
18
VISA RISK MANAGER GUIDE | VISA REAL TIME DECISIONING
Notice: The information herein by Visa is CONFIDENTIAL and may not be disclosed or published without the prior written permission of Visa. Information is to be used solely for acceptance of Visa payment products.
VISA REAL TIME DECISIONING
3. • Click on Step 3 Enter Values to display the drop-down menu. Click on the check box for each value that you want to include in the rule. You may enter multiple values.
• You can also enter a value in the input box, then click the Find link. The system will find that value (if it exists) and automatically select it.
If you are using an operator, such as IN, which allows multiple values, you can use the Find link multiple times. The previous selection will be retained when the next code is found.
3
4. Click the Add button for each parameter.
4
5 The system will immediately display the parameter criteria. 5. Click Update to save your data. Note: The data is not saved until you click the Update button.
VISA RISK MANAGER GUIDE | VISA REAL TIME DECISIONING
19
Notice: The information herein by Visa is CONFIDENTIAL and may not be disclosed or published without the prior written permission of Visa. Information is to be used solely for acceptance of Visa payment products.
VISA REAL TIME DECISIONING
Edit Criteria
1. To edit criteria, click the associated Edit link on the right side of the screen which will redisplay the data as it was originally entered. Example: If you click Edit for the Transaction Amount criteria, the parameter, operator and value would be displayed. 2. Make necessary changes to parameter, operator, and or value. In this example, the value of “500” has been updated to “300.” 3. Click Add to replace the existing parameter, operator, and or value with your new entry. 4. To remove criteria, click the remove link on right side of the screen. The screen will be redisplayed without the criteria parameter, operator, and value.
2 3 1
4
5 5. The data is not saved until you click the Update button.
20
VISA RISK MANAGER GUIDE | VISA REAL TIME DECISIONING
Notice: The information herein by Visa is CONFIDENTIAL and may not be disclosed or published without the prior written permission of Visa. Information is to be used solely for acceptance of Visa payment products.
VISA REAL TIME DECISIONING
Rule Testing
Test and Activate Rules
After you define criteria for the rule, two additional buttons are displayed at the bottom of the Rule Definition screen: Test and Activate. The Test feature allows you to execute the set of rules against up to 13 weeks of sample transaction history in a test environment. You can also test changing the priority of this rule relative to others of the same type.
Visa does minimal validation of rule criteria; therefore testing allows you to ensure the rule produces expected results.
1 1. Click Test to ensure the set of rules yields expected results when validated against a transaction history sampling. The results of the test will be provided in the View Test Results screen for review.
VISA RISK MANAGER GUIDE | VISA REAL TIME DECISIONING
21
Notice: The information herein by Visa is CONFIDENTIAL and may not be disclosed or published without the prior written permission of Visa. Information is to be used solely for acceptance of Visa payment products.
VISA REAL TIME DECISIONING
2. When you are done with rules testing, click Activate. This indicates that you have tested the rule and it is ready to be deployed in production. The Rules Management screen will be displayed.
– The status will be set to Pending Activation and the next sequential version number will be assigned – new rules will be version 001 – If this is a new rule, it will be assigned the lowest priority in the Rule Set; existing rules will retain their current priority The system will also display a confirmation message. 3. Click the OK button to proceed. The new rule will be added to your Real Time Decisioning Rule Set. If you have updated a rule that is already in production, the revised version will be placed in the Rule Set.
22
New rules have the lowest priority and existing rules retain their previous priority.
VISA RISK MANAGER GUIDE | VISA REAL TIME DECISIONING
Notice: The information herein by Visa is CONFIDENTIAL and may not be disclosed or published without the prior written permission of Visa. Information is to be used solely for acceptance of Visa payment products.
VISA REAL TIME DECISIONING
> Activation diagram
@E8:K@M<ILC<J
:LII<EKILC<J
E
<J
Gi`fi`kp(Ilc\9
Gi`fi`kp(Ilc\9
Gi`fi`kp)Ilc\<
Gi`fi`kp)Ilc\<
K\jk\[
Gi`fi`kp*Ilc\8
IL C < J
@eXZk`m\Ilc\;
IL C < J
@eXZk`m\Ilc\: Efkp\kk\jk\[
Gi`fi`kp*Ilc\8
Gi`fi`kp+Ilc\; 8[[`k`feXcilc\[\]Xlckj kfcfn\jkgi`fi`kp
Rules have four different status values: • Inactive • Pending Activation • Active • Pending Deactivation See next page for definitions.
VISA RISK MANAGER GUIDE | VISA REAL TIME DECISIONING
23
Notice: The information herein by Visa is CONFIDENTIAL and may not be disclosed or published without the prior written permission of Visa. Information is to be used solely for acceptance of Visa payment products.
VISA REAL TIME DECISIONING
Rule Status and Versions
Status Description
Status Inactive rules are those not currently in the “live” Rule Set.
Key Points to • All new rules are assigned the “inactive” status until they are activated • Inactive rules can be tested to evaluate performance prior to activating • Previously active rules that have been “de-activate” from production are re-assigned the “inactive” status.
Pending Activation occurs when a request is submitted to activate a rule.
• The rule is added to the member’s Rule Set and is queued for publishing to the “live” environment. • Depending on the rule type, the rules are published at different frequencies throughout the day. • The status of the rule remains “Pending Activation” until the rule is published to the “live” environment
Version Number
Active includes any rule that is currently “live” in the production environment.
• s can modify active rules by changing the criteria and processing options.
Pending Deactivation applies to any rule that is currently active, but has been requested to be deactivated by the .
• Upon submitting the deactivation request, a new Rule Set is created that does not contain the selected rule.
• Upon saving the changes of an active rule, a new version is created and is added to a new Rule Set. The changes to the active rule will not be effective until the new Rule Set is published.
• When the new Rule Set is published to the production environment, the status of the rule is changed to “inactive.”
In addition to the status, each rule has a version number assigned to keep track of changes. Only rules that are in the “active” status are assigned a new version number if they have been updated. Updating an “inactive” rule will not change the version number. > New Rule Version status Flow
8e\nIlc\`jZi\Xk\[
24
M\ij`fe''( @E8:K@M<
Ilc\`jXZk`mXk\[
M\ij`fe''( G<E;@E>8:K@M8K@FE
Ilc\J\k`jXZk`m\ `egif[lZk`fe
M\ij`fe''( 8:K@M<
:_Xe^\jZXeY\dX[\kf @eXZk`m\Ilc\M\ij`fej G\e[`e^8Zk`mXk`fe`e[`ZXk\jk_\Ilc\ M\ij`fe_XjY\\eXZk`mXk\[#Ylkk_\ Zfii\jgfe[`e^Ilc\J\km\ij`fe`jefk p\kXZk`m\`egif[lZk`fe 8Zk`m\`e[`ZXk\jk_`jIlc\M\ij`fe `jZlii\ekc`m\`egif[lZk`fe
VISA RISK MANAGER GUIDE | VISA REAL TIME DECISIONING
Notice: The information herein by Visa is CONFIDENTIAL and may not be disclosed or published without the prior written permission of Visa. Information is to be used solely for acceptance of Visa payment products.
VISA REAL TIME DECISIONING
Modify a Rule
1. To modify a rule, select it on the Rules Management screen and click View/Edit.
1 The Rule Definition screen will be displayed.
2
3
4
5
2. Update the basic information, criteria, and/or processing options. 3. Click Update to save your changes. Note: If you are modifying an inactive rule, your changes will be made to the current version. If you modify a rule in any other status, a new rule version will be created with an Inactive status. 4. Test the new rule definition. 5. Activate the new version. The Rule will retain its priority within the Rule Set, but you can modify it, if needed. When this version is live in production, the previous version will become inactive.
VISA RISK MANAGER GUIDE | VISA REAL TIME DECISIONING
25
Notice: The information herein by Visa is CONFIDENTIAL and may not be disclosed or published without the prior written permission of Visa. Information is to be used solely for acceptance of Visa payment products.
VISA REAL TIME DECISIONING
> Modified Rule Version Flow
Deactivate a Rule
8eXZk`m\Ilc\ `jdf[`]`\[
M\ij`fe'') @E8:K@M<
Ilc\`jXZk`mXk\[
M\ij`fe'') G<E;@E>8:K@M8K@FE
Ilc\J\k`jXZk`m\ `egif[lZk`fe
M\ij`fe'') 8:K@M<
M\ij`fe'')nXjZi\Xk\[n_\eM\ij`fe''( nXjlg[Xk\[ G\e[`e^8Zk`mXk`fe`e[`ZXk\jk_\Ilc\M\ij`fe _XjY\\eXZk`mXk\[Ylkk_\Zfii\jgfe[`e^ Ilc\J\km\ij`fe`jefkp\kXZk`m\`egif[lZk`fe M\ij`fe''( @E8:K@M<
N_\ek_\e\nm\ij`fe `j8Zk`m\`egif[lZk`fe k_\gi\m`fljm\ij`fe `jj\kkf`eXZk`m\
If you no longer need a rule, you can deactivate it. If a rule is active, you can deactivate in one of two ways: 1. From the Rules Definition screen, click on the Deactivate button. 2. If the Rule is in pending activation status and you do not want to activate it,
you need to click the Remove link on the Edit Rule Set screen. When the new version of the Rule Set is published, the rule will have a status of pending deactivation. Once the new Rule Set version is active, the rule status will be updated to inactive. > Inactive rule Status Flow @E8:K@M<ILC<J
:LII<EKILC<J
Gi`fi`kp)Ilc\<
@eXZk`m\Ilc\: ;\c\k\ilc\i\dfm\j `eXZk`m\ilc\
E
<J
Gi`fi`kp(Ilc\9
Gi`fi`kp*Ilc\8
Gi`fi`kp+Ilc\;
26
@eXZk`m\Ilc\8
I LC< J
I LC< J < K
Gi`fi`kp(Ilc\9
@eXZk`m\Ilc\: 8[[`k`feXcilc\ [\]Xlckjkf cfn\jkgi`fi`kp
@E8:K@M<ILC<J
Gi`fi`kp)Ilc\<
Gi`fi`kp+Ilc\;
VISA RISK MANAGER GUIDE | VISA REAL TIME DECISIONING
Notice: The information herein by Visa is CONFIDENTIAL and may not be disclosed or published without the prior written permission of Visa. Information is to be used solely for acceptance of Visa payment products.
VISA REAL TIME DECISIONING
Delete an Inactive Rule
You can also delete an inactive rule if you do not want it to appear on the Rules Management screen. 1. Select the Rules Management screen and click on the inactive rule that you want to delete.
1 2 2. Click the Delete button. The system will display a confirmation message. 3. Click OK to confirm deletion. Note: If the rule had never been activated, it will still be in an inactive status and you can simply delete it. Deleted rules can continue to be viewed from the Rules Set Details screen.
VISA RISK MANAGER GUIDE | VISA REAL TIME DECISIONING
27
Notice: The information herein by Visa is CONFIDENTIAL and may not be disclosed or published without the prior written permission of Visa. Information is to be used solely for acceptance of Visa payment products.
VISA REAL TIME DECISIONING
Rules Publishing
Rules Publishing is the final step needed to activate rules into production. A Rule Set contains at least one rule, but can have multiple rules. There is no maximum limit to the number of rules that can be included in a Rule Set. • When a rule is activated on the Rule Definition screen, the application creates a new “Rule Set” that is given a “pending” status. • The activated rule is assigned the lowest priority within the Rule Set. s have the option of modifying the priority of the rules prior to publishing the them to the “live” environment. > Activate New Rule
@E8:K@M<ILC<J
:LII<EKILC<J
E
<J
Gi`fi`kp(Ilc\9
Gi`fi`kp(Ilc\9
Gi`fi`kp)Ilc\<
Gi`fi`kp)Ilc\<
K\jk\[
8Zk`mXk\ÆX[[k_`j ilc\kfk_\ilc\j\k
Gi`fi`kp*Ilc\8
ILC<J
@eXZk`m\Ilc\;
ILC<J
@eXZk`m\Ilc\: Efkp\kk\jk\[
Gi`fi`kp*Ilc\8
Gi`fi`kp+Ilc\; 8[[`k`feXcilc\[\]Xlckj kfcfn\jkgi`fi`kp
28
VISA RISK MANAGER GUIDE | VISA REAL TIME DECISIONING
Notice: The information herein by Visa is CONFIDENTIAL and may not be disclosed or published without the prior written permission of Visa. Information is to be used solely for acceptance of Visa payment products.
VISA REAL TIME DECISIONING
A Rule Set goes through a series of versions as changes are made to it and/or the underlying rules. The following diagram explains each status stage of the Rule Set publishing process. > Rule Set Version Status Flow
JK8KLJ 8Zk`mXk\fi[\XZk`mXk\X ilc\fii\dfm\]ifdk_\ Ilc\J\k
GlYc`j_k_\Ilc\J\k
Access Rule Set Details
@E8:K@M<
GL9C@J?<;
;\gcfpd\ekZfdgc\k\
8:K@M<
GlYc`j_e\n\im\ij`fe
@E8:K@M<
;<J:I@GK@FE :_Xe^\jZXeY\dX[\kfG\e[`e^Ilc\J\kj% @kn`ccefk_Xm\;Xk\GlYc`j_\[fi8Zk`mXk\[% 8GlYc`j_\[Ilc\J\k`j`ek_\gifZ\jjf]Y\`e^ [\gcfp\[kfgif[lZk`fe%EfZ_Xe^\jZXeY\dX[\ kfk_`jm\ij`fe%@k_XjX;Xk\GlYc`j_\[%
8e8Zk`mXk\[Ilc\J\k`jk_\fe\Zlii\ek`e gif[lZk`fe%EfZ_Xe^\jZXeY\dX[\ kfk_`jm\ij`fe%@k_XjYfk_X;Xk\GlYc`j_\[ Xe[X;Xk\8Zk`mXk\[% 8Ilc\J\km\ij`fe_XjXe`eXZk`m\jkXkljn_\e `k_XjY\\ejlg\ij\[\[YpXcXk\im\ij`fe% K_\gi`fim\ij`fe`jj\kkf`eXZk`m\n_\eXe\n m\ij`fe`jj\kkf8Zk`m\%
Each time you activate a rule, Rule Set Details screen (as shown below) is automatically displayed.
You can also access the Rule Set Details screen when you click the View/ Edit button from the Rules Publishing screen.
VISA RISK MANAGER GUIDE | VISA REAL TIME DECISIONING
29
Notice: The information herein by Visa is CONFIDENTIAL and may not be disclosed or published without the prior written permission of Visa. Information is to be used solely for acceptance of Visa payment products.
VISA REAL TIME DECISIONING
The Rules Publishing screen shows the history of Rule Set versions, along with the Date/Time Published and the Date/Time Activated.
Edit a Rule Set
1. From the Visa Risk Manager Navigation Menu, select Rules Manager, then Rules Publishing.
1
The system will display the Rules Publishing screen.
2 2. To view the details of a Rule Set version, select the rule and click the View/ Edit button. The system will display the Rule Set Details screen – the same screen that is displayed when you activate a rule.
30
VISA RISK MANAGER GUIDE | VISA REAL TIME DECISIONING
Notice: The information herein by Visa is CONFIDENTIAL and may not be disclosed or published without the prior written permission of Visa. Information is to be used solely for acceptance of Visa payment products.
VISA REAL TIME DECISIONING
3 4
3. To view the rule, first select the rule, then click the View Rule Button. The system will display the Rule Definition screen (view-only mode). 4. To edit the Rule Set, click the Edit Rule Set button. The system will display the Edit Rule Set screen which allows you to change rule priorities, publish a Rule Set, or remove the rule from the set.
5
6 5. To change the priority of the rules, simply type a new priority for a rule you want to change. The system will move that rule to that position in the list and will reset any priorities equal to or less than the entered number to a lower value. 6. To publish the Rule Set to production, click the Publish Button. This should only be done when you are sure that you have all of the rules you need and have assigned them the appropriate priority. When you click the Publish button, a confirmation message will appear.
VISA RISK MANAGER GUIDE | VISA REAL TIME DECISIONING
31
Notice: The information herein by Visa is CONFIDENTIAL and may not be disclosed or published without the prior written permission of Visa. Information is to be used solely for acceptance of Visa payment products.
VISA REAL TIME DECISIONING
7. Click OK. The system will redisplay the Rule Set Details screen. Shows current time.
Will be blank until the Rule Set has been sent to Visa® and an acknowledgement has been returned.
7
Remove a Rule
1. To remove a rule from the Rule Set, click the “remove” link beside a rule.
1 A confirmation message will appear. 2. Click OK. The system will redisplay the Rule Set Details screen. The rule will be removed from the Rule Set and its status will be set to Inactive.
32
VISA RISK MANAGER GUIDE | VISA REAL TIME DECISIONING
Notice: The information herein by Visa is CONFIDENTIAL and may not be disclosed or published without the prior written permission of Visa. Information is to be used solely for acceptance of Visa payment products.
VISA REAL TIME DECISIONING
Note: If you remove a rule for a set that is still in pending status, the rule will simply be removed and set to inactive. If you remove a rule from an active or published rule, a new version of the Rule Set will be created in a pending status. > Deactivate and Remove a Rule
@E8:K@M<ILC<J
@eXZk`m\Ilc\:
:LII<EKILC<J
Gi`fi`kp)Ilc\<
;\c\k\ilc\Æ i\dfm\j `eXZk`m\ilc\
Gi`fi`kp(Ilc\9
Gi`fi`kp*Ilc\8
Gi`fi`kp+Ilc\;
@eXZk`m\Ilc\:
@eXZk`m\Ilc\8
E
<J
;\XZk`mXk\Æ i\dfm\k_`j ilc\kfk_\ ilc\j\k
VISA RISK MANAGER GUIDE | VISA REAL TIME DECISIONING
ILC<J
I LC < J < K
Gi`fi`kp(Ilc\9
@E8:K@M<ILC<J
Gi`fi`kp)Ilc\<
Gi`fi`kp+Ilc\;
33
Notice: The information herein by Visa is CONFIDENTIAL and may not be disclosed or published without the prior written permission of Visa. Information is to be used solely for acceptance of Visa payment products.
VISA REAL TIME DECISIONING
Block/Exclude Rules
In addition to establishing rules to evaluate transactions, Visa Real Time Key Considerations Decisioning also allows you to create rules for specific s: • Block s rules will automatically decline authorization requests for the specified . No other rule processing will be performed. • Exclude s rules will identify s that should be excluded from rule processing. – Timeframe — With Visa Risk Manager, you can specify a date range for excluding rules, or use the “until further notice” option. – Rule type — You can also exclude an by rule type. However, rule processing for the other rule type will continue for this . At any point in time, an can have: • A Block rule • An Exclude rule • No -specific rules
Some Key Points to • If you add a new rule to an that already has one, the new rule will replace the existing one. The application includes the ability to search for existing rules. You can use this feature to if a specific rule is going to be replaced. • numbers can be loaded manually or by using an file. • Block and Exclude rules are applied to production within minutes of being added. numbers that are loaded using a file, however, may take a little longer to become effective, depending on the volume.
34
VISA RISK MANAGER GUIDE | VISA REAL TIME DECISIONING
Notice: The information herein by Visa is CONFIDENTIAL and may not be disclosed or published without the prior written permission of Visa. Information is to be used solely for acceptance of Visa payment products.
VISA REAL TIME DECISIONING
1. From the Visa Risk Manager Navigation Menu, select Block/Exclude s.
Create Block Rules— Manual Entry
1
The Block/Exclude Numbers screen will be displayed.
2
2. Click the Block s link. The Block s screen will be displayed.
VISA RISK MANAGER GUIDE | VISA REAL TIME DECISIONING
35
Notice: The information herein by Visa is CONFIDENTIAL and may not be disclosed or published without the prior written permission of Visa. Information is to be used solely for acceptance of Visa payment products.
VISA REAL TIME DECISIONING
3
4
5 3. To enter one or more numbers manually, select Add Numbers. 4. Enter an number you want to block and click the Add button. Continue to enter additional numbers, as needed. 5. When you are done, click the Update button. The system will display a confirmation message. 6. Click OK to confirm that the numbers entered should be blocked. The system will display the Block/Exclude Numbers screen with a confirmation that your request has been submitted.
To view existing rules for Numbers, refer to the Search for Rules on page 45 of this section.
36
VISA RISK MANAGER GUIDE | VISA REAL TIME DECISIONING
Notice: The information herein by Visa is CONFIDENTIAL and may not be disclosed or published without the prior written permission of Visa. Information is to be used solely for acceptance of Visa payment products.
VISA REAL TIME DECISIONING
Create Block Rules—File
1. From the Navigation Menu, select Block/Exclude s.
1
The Block/Exclude Numbers screen will be displayed.
2
2. Click the Block s link. The Block s screen will be displayed.
VISA RISK MANAGER GUIDE | VISA REAL TIME DECISIONING
37
Notice: The information herein by Visa is CONFIDENTIAL and may not be disclosed or published without the prior written permission of Visa. Information is to be used solely for acceptance of Visa payment products.
VISA REAL TIME DECISIONING
3
3. To a file of numbers, select File. 4. Enter the file path and name in the File Location (you can use the Browse button if needed).
Keep in mind that an can only have one level rule at a time. Therefore, when a Block rule is created using this file, it will replace any previous Exclude rule that may exist for the number.
4
5
6 5. You may choose to either Add s to Block List or Replace Existing Block List with this new file (if you are providing a full list of s that should be blocked.) If you select:
Then:
Add s to Block List
The numbers in the file will be added as an additional rule.
Replace Existing Block List with this new file
All existing Block rules will be removed; Exclude rules will be retained.
6. Click the Update button. The system will display a confirmation message.
38
VISA RISK MANAGER GUIDE | VISA REAL TIME DECISIONING
Notice: The information herein by Visa is CONFIDENTIAL and may not be disclosed or published without the prior written permission of Visa. Information is to be used solely for acceptance of Visa payment products.
VISA REAL TIME DECISIONING
After you confirm the numbers should be blocked, the system will display the Block/Exclude s Numbers screen with a message that your request has been submitted. You will also see an additional link, View File Processing Results.
7
7. Click the View File Processing Results link to check the status of the file . The amount of time needed to process the file will depend on the number of s it contains. The File Processing screen will be displayed. The file status will be one of the following: • Publishing – The file is currently being processed • Partially ed – One or more s was successfully ed and one or more had an error • ed – All s in the file were successfully ed • Not ed – All s in the file had errors
If at least one error was identified, an error file will be generated that indicates the number and the associated error. A link will be available for that file in the Errors column; click that link to view the details of the errors.
VISA RISK MANAGER GUIDE | VISA REAL TIME DECISIONING
39
Notice: The information herein by Visa is CONFIDENTIAL and may not be disclosed or published without the prior written permission of Visa. Information is to be used solely for acceptance of Visa payment products.
VISA REAL TIME DECISIONING
Create Exclude 1. At the Block/Exclude Numbers screen, click the Exclude s link. Rules
1
The Exclude s screen will be displayed. 2. Use the same process for creating Exclude rules as you did for Block s. Here, however, you can apply additional options as needed.
2 Additional Options: Exclude Rules can be set until further notice or for a specified date range. The default is until further notice.
Exclude Rules can be set by rule type.
40
VISA RISK MANAGER GUIDE | VISA REAL TIME DECISIONING
Notice: The information herein by Visa is CONFIDENTIAL and may not be disclosed or published without the prior written permission of Visa. Information is to be used solely for acceptance of Visa payment products.
VISA REAL TIME DECISIONING
3. To define the rule for a specific timeframe, select Date Range and enter an end date. (The start date defaults to today and cannot be modified.)
3 4
4. To apply the Exclude rule to a specific rule type (either Real Time Decisioning or Case Creation), select the appropriate type in the Applies to drop-down.
VISA RISK MANAGER GUIDE | VISA REAL TIME DECISIONING
41
Notice: The information herein by Visa is CONFIDENTIAL and may not be disclosed or published without the prior written permission of Visa. Information is to be used solely for acceptance of Visa payment products.
VISA REAL TIME DECISIONING
The search feature allows you to view all rules, or those for a specific BIN or number.
Search for Rules
1. To view all rules, go to the Block/Exclude Numbers screen, select the View all rules button, then click the Search button.
1
OR 2. To view a specific rule, select Enter BIN or Number and enter a value, then click the Search button.
2
42
VISA RISK MANAGER GUIDE | VISA REAL TIME DECISIONING
Notice: The information herein by Visa is CONFIDENTIAL and may not be disclosed or published without the prior written permission of Visa. Information is to be used solely for acceptance of Visa payment products.
VISA REAL TIME DECISIONING
The Search Results screen will be displayed.
The Search Results screen will display up to 1000 rules, even if there are more rules that match the search criteria.
3
3. To obtain a list of “all” matching rules, click the Export List link to create a spreadsheet.
Delete an Rules
You can delete rules that you no longer need. 1. Search for rules (as described in this section). At the Search Result screen, click the Delete check box for the (s) associated with the rule you need to delete.
1
2 2. Click Update. A confirmation message will be displayed. 3. Click OK to continue deleting the rule.
VISA RISK MANAGER GUIDE | VISA REAL TIME DECISIONING
43
Notice: The information herein by Visa is CONFIDENTIAL and may not be disclosed or published without the prior written permission of Visa. Information is to be used solely for acceptance of Visa payment products.
January 2008
Visa Real Time Decisioning
What’s Covered n
Visa Real Time Decisioning Overview.....................................................................................3 The Right Decisions at the Right Time.......................................................................................3
n
Rules Startup................................................................................................................... 4 Create New Rule............................................................................................................................... 4 Edit/Delete/Print Existing Rule.....................................................................................................5
n
Rule Definition.............................................................................................................................. 6 Define a Rule...................................................................................................................................... 6
n
Rule Criteria Steps.......................................................................................................................11 Set Rule Criteria................................................................................................................................13 Edit Criteria.......................................................................................................................................20
n
Rule Testing..................................................................................................................................21 Test and Activate Rules..................................................................................................................21
n
Rule Status and Versions......................................................................................................... 24 Status Description..........................................................................................................................24 Version Number..............................................................................................................................24 Modify a Rule...................................................................................................................................25 Deactivate a Rule............................................................................................................................26 Delete an Inactive Rule.................................................................................................................27
n
Rule Publishing...........................................................................................................................28 Access Rule Set Details................................................................................................................29 Edit a Rule Set..................................................................................................................................30 Remove a Rule..................................................................................................................................32
VISA RISK MANAGER GUIDE | VISA REAL TIME DECISIONING Notice: The information herein by Visa is CONFIDENTIAL and may not be disclosed or published without the prior written permission of Visa. Information is to be used solely for acceptance of Visa payment products.
1
n
Block/Exclude Rules.................................................................................................34 Key Considerations.........................................................................................................................34 Create Block Rules—Manual Entry.........................................................................35 Create Block Rules—File ..............................................................................37 Create Exclude Rules................................................................................................... 40 Search for Rules.............................................................................................................42 Delete an Rules..............................................................................................................43
2
VISA RISK MANAGER GUIDE | VISA REAL TIME DECISIONING
Notice: The information herein by Visa is CONFIDENTIAL and may not be disclosed or published without the prior written permission of Visa. Information is to be used solely for acceptance of Visa payment products.
VISA REAL TIME DECISIONING
Visa Real Time Decisioning Overview
The Right Decisions at the Right Time
Visa Real Time Decisioning gives financial institutions the capability to allow Visa to act on their behalf to decline or forward—refer highfraud—risk transactions using predefined rules created by the issuer, ing both “issuer available” and “issuer unavailable” processing options. Whenever Visa sends a decline advice in response to suspected fraud, the advice will contain the details necessary to customer inquiries regarding the decline action taken. Visa Real Time Decisioning enables issuers to create rules for “in flight” authorization decisions using over 20 different authorization parameters to identify the highest risk transactions. Rules that are entered through Visa Rules Manager govern how Visa Real Time Decisioning takes action on transactions scored by Visa Advanced Authorization. Real Time Decisioning: • Processes all Visa-switched transactions that receive a Visa Advanced Authorization score. This includes all authorization and purchase activity for US issued cards, as well as for Canada and LAC regions (FY08).
Visa Real Time Decisioning provides issuers with the ability to stop fraud before losses are realized or additional processing costs are incurred. It is the state-of-the-art system that issuers need to dynamically respond to rapidly changing fraud patterns and stay one step ahead of the criminals. It is an ideal solution for issuers that want to optimize and maintain their operational risk strategies, by supplementing existing systems or as an end-toend solution.
• Optimizes Visa Integrated Payment System infrastructure and all of the “in flight” real time data access. Most fraud management systems monitor a small portion of the total transaction volume. Visa monitors 100% of transactions, leveraging all payment channels and cross-border transaction information. • Is customizable. It provides issuers with the ability to set rules for specific days or time period to accommodate staffing levels or other unique business needs. • Can be used to block/exclude s. In addition to establishing rules to evaluate transaction, issuers can use Visa Real Time Decisioning to identify numbers that should be excluded from specific rules for a given time period and to block numbers to decline all authorization requests. • Generates reports that show actual performance. Visa Real Time Decisioning reports specify all actions taken and can be summarized by BIN or rule.
VISA RISK MANAGER GUIDE | VISA REAL TIME DECISIONING Notice: The information herein by Visa is CONFIDENTIAL and may not be disclosed or published without the prior written permission of Visa. Information is to be used solely for acceptance of Visa payment products.
3
VISA REAL TIME DECISIONING
Rules Startup
Create New Rule
1. From the Visa® Risk Manager Navigation Menu, select Rules Manager, then choose Rules .
1
The Rules Management screen will be displayed.
2
3
2. Select Real Time Decisioning as the Rule Type. 3. When you use the application for the first time, there will be no existing rules. Click the Create New Rule button to define your first rule.
4
Depending on your product options you may have access to either the Real Time Decision Rule Type, Case Creation Rule Type, or both.
VISA RISK MANAGER GUIDE | VISA REAL TIME DECISIONING
Notice: The information herein by Visa is CONFIDENTIAL and may not be disclosed or published without the prior written permission of Visa. Information is to be used solely for acceptance of Visa payment products.
VISA REAL TIME DECISIONING
The Rule Definition Screen will be displayed.
After you have created a rule, it will be displayed the next time you access the Rules Management screen (as shown below).
1
Edit/Delete/ Print Existing Rule
2
3
1. Click the View/Edit button to go to the Rule Definition screen to make changes to the rule. 2. Click the Delete button to remove an inactive rule. (Active rules must be deactivated before they can be deleted. 3. Print the Rules Management screen. For more information about active and inactive rules, refer to “Rules Testing” on pages 21 through 23 in this section.
VISA RISK MANAGER GUIDE | VISA REAL TIME DECISIONING Notice: The information herein by Visa is CONFIDENTIAL and may not be disclosed or published without the prior written permission of Visa. Information is to be used solely for acceptance of Visa payment products.
5
VISA REAL TIME DECISIONING
Rule Definition
Define a Rule
Each Visa Real Time Decisioning rule consists of the following components: • Basic information includes: – -entered — Name, Rule Type, which are required, and Description. – System-generated — Rule Version and Rule Status
The Rule Definition screen is used to set two types of rules: Real Time Decisioning and Case Creation.
• Criteria is used to define the conditions that will be used to evaluate transactions • Processing Options are based on Rule Type. For Real Time Decisioning rules, there are two processing options — Action and Time Frame 1. Enter a Name and optional Description for the rule in the Rule Definition screen. > Rule Definition
This is a screen example for new Real Time Decisioning rule with the Name and Description already entered.
1 2 Default values for Action (Decline), and Time Frame (Always), are displayed.
2. Click the Criteria: “Add a definition” link to validate and save the data entered so far. Note: You can also click the Update button to save your data at any time.
6
VISA RISK MANAGER GUIDE | VISA REAL TIME DECISIONING
Notice: The information herein by Visa is CONFIDENTIAL and may not be disclosed or published without the prior written permission of Visa. Information is to be used solely for acceptance of Visa payment products.
VISA REAL TIME DECISIONING
The system will display a confirmation message 3. Click OK to save the data prior to navigating away from the Rules Definition screen. The Rule Definition: Edit Criteria screen will be displayed.
4
5
4. Follow the simple four-step process to enter the rule criteria. (For a more detailed explanation of this process, see Rule Criteria Steps on pages 11 through 20 of this section.) • Step 1: Select Parameter from the drop-down menu. • Step 2: Choose Operator that is available (displayed) for the selected parameter. • Step 3: Enter Values from the drop-down menu. • Step 4: Add to Criteria List by clicking the Add button. After the first criteria is entered, the can repeat steps 1-4 to add additional criteria to the rule. 5. Click Update to save your data and proceed.
VISA RISK MANAGER GUIDE | VISA REAL TIME DECISIONING Notice: The information herein by Visa is CONFIDENTIAL and may not be disclosed or published without the prior written permission of Visa. Information is to be used solely for acceptance of Visa payment products.
7
VISA REAL TIME DECISIONING
The Rule Definition screen will be redisplayed, showing the selected criteria.
6
7
6. If you need to make any changes to the criteria, click the Edit button. The system will return to the Edit Criteria screen. 7. If you have not already done so, that the default values for Action and Time Frame are correct for your situation. Adjust the Action and Time Frame Processing options, if necessary.
8
Your processing options will vary, depending on the type of rules you are using (i.e., Real Time Decisioning or Case Creation rules).
VISA RISK MANAGER GUIDE | VISA REAL TIME DECISIONING
Notice: The information herein by Visa is CONFIDENTIAL and may not be disclosed or published without the prior written permission of Visa. Information is to be used solely for acceptance of Visa payment products.
VISA REAL TIME DECISIONING
For Real Time Decisioning Rules, you need to specify the Action and the Time Frame Processing Options: • Action defines the response that must occur when a transaction triggers this rule. If you select this option for a rule:
Decline
Then:
• Authorization requests that meet the criteria defined within the rule will be declined by Visa. • A decline response will be sent to the acquirer; the issuer processor will receive a decline advice indicating that the authorization was declined by Visa due to suspected fraud. The Response Code field within the issuer’s advice is set to ‘59’ to indicate that the rule was triggered by Real Time Decisioning..
Forward and Referral
• The authorization request is delivered to the issuer processor for final decision. When delivered, the Response Code (field 39) is set to ‘59’ to indicate that the rule was triggered by Real Time Decisioning.
No Action
• No further rule evaluation is needed for this transaction. This action should be used if the member wants to ignore a specific set of transactions from Real Time Decisioning. • Example: If the issuer has 5 active rules, but does not want any of the rules to be applied to Visa Signature cards, the issuer could create a “No Action” rule where “Product ID = Visa Signature” and assign the Rule Priority = 1. Any authorization request for Visa Signature cards will trigger the “No Action” rule, and the authorization is forwarded to the issuer for decisioning.
> Real time decisioning transaction Flow KI8EJ8:K@FE
;<=@E<;8:K@FE
Gi`fi`kp(Ilc\9
I LC< J < K
GXjj\j
Gi`fi`kp)Ilc\< GXjj\j
Gi`fi`kp*Ilc\;
Gi`fi`kp+Ilc\8
VISA RISK MANAGER GUIDE | VISA REAL TIME DECISIONING
;\Zc`e\ J\e[[\Zc`e\X[m`Z\ kf`jjl\i&gifZ\jjfi Ki`^^\ij*i[ Gi`fi`kpIlc\
=finXi[ J\k8lk_fi`qXk`fe I\jgfej\:f[\=`\c[*0 kfXe\nmXcl\f],0
Ef8Zk`fe
9
Notice: The information herein by Visa is CONFIDENTIAL and may not be disclosed or published without the prior written permission of Visa. Information is to be used solely for acceptance of Visa payment products.
VISA REAL TIME DECISIONING
• Time Frame specifies when the rule should be applied. If you select this option:
Then:
Always
• The rule will be applied at all times.
Days of the Week
• The rule will be applied at specific days and times and the Rules Definition screen will be refreshed to display the Time of Day grid (see below). • s should use the grid to select each hour/day for which the rule should be active.
Issuer Unavailable
• The rule will be evaluated only if the issuer processor is unavailable.
• The selected Action must be Decline. The Time of Day grid allows you to enter the hours for each day that the rule should be applied. All you need to do is click the appropriate boxes. To select all hours for a day, click the Select all link at the end of that row. > TIME OF DAY GRID
10
VISA RISK MANAGER GUIDE | VISA REAL TIME DECISIONING
Notice: The information herein by Visa is CONFIDENTIAL and may not be disclosed or published without the prior written permission of Visa. Information is to be used solely for acceptance of Visa payment products.
VISA REAL TIME DECISIONING
Rule Criteria Steps
For a rule to be defined, it must contain criteria. These are the conditions that determine if a transaction will trigger the rule. Each criterion consists of: • A parameter, such as Merchant Category Code or Transaction Amount • An operator, such as equal to or greater than • One or more values, depending on the parameter and operator selected A rule can contain one or more criteria (multiple criteria are connected as a string of “ands”). The transaction must meet all of the criteria to fall within the rule. Examples of the rules are as follows: Example 1: Rule Name = Non-US ATM Rule Objective: “I want to decline any ATM transaction that originated outside of the US that is greater than $500 and has a risk score greater than or equal to XX” This rule has four parameters (as listed below). To define the rule, you would combine the operators and values to get the following rule components: Parameter
Operator
Value
Merchant Category Code
=
6011 (ATM)
Merchant Country Code
<>
840 (USA)
Transaction Amount
>
500
Advanced Authorization Risk Score
>
XX
Example 2: Rule Name = Country Specific High Risk Rule Objective: “I want to decline any transaction that originated in Spain or Russia where the risk score is greater than or equal to XX and the Compromised Risk Condition Code is either X, Y, or Z.” This rule would have three parameters (as listed below). To define the rule, you would combine the operators and values to each of the three parameters to get the following rule components: Parameter
Operator
Value
Merchant Country Code
IN
643 (Spain) 724 (Russia)
Advanced Authorization Risk Score
>
XX
Compromised Risk Condition Code
IN
X Y Z
VISA RISK MANAGER GUIDE | VISA REAL TIME DECISIONING
11
Notice: The information herein by Visa is CONFIDENTIAL and may not be disclosed or published without the prior written permission of Visa. Information is to be used solely for acceptance of Visa payment products.
VISA REAL TIME DECISIONING
Example 3: Rule Consolidation Whenever possible, you should look for opportunities to consolidate your rules. Rule Objective: “I want to decline any transaction where the risk score is greater than or equal to XX and the transaction type is either Mail/Telephone or Recurring Payment.”
Rule A: Parameter
Operator
Value
Advanced Authorization Risk Score
>
XX
MOTO/ECI/Recurring
=
MOTO
Rule B: Parameter
Operator
Value
Advanced Authorization Risk Score
>
XX
MOTO/ECI/Recurring
=
Recurring Payment
The above two rules can be combined into a single rule by using the “IN” operator with the following criteria:
New Combined Rule (A and B): Parameter
Operator
Value
Advanced Authorization Risk Score
>
XX
MOTO/ECI/Recurring
IN
MOTO Recurring Payment
Rules to Keep the following in mind when deg Visa Risk Manager rules criteria. • All criteria within a rule must be met for that rule to be triggered. • Determine your objectives and write your rules based on your own fraud trends. • Watch out for overlapping or conflicting rules.
12
VISA RISK MANAGER GUIDE | VISA REAL TIME DECISIONING
Notice: The information herein by Visa is CONFIDENTIAL and may not be disclosed or published without the prior written permission of Visa. Information is to be used solely for acceptance of Visa payment products.
VISA REAL TIME DECISIONING
Set Rule Criteria
Once you identify a Name and optional description for a rule in the Rule Definition screen, you are ready to create the criteria for a new rule.
When you click, “Add a New Definition,” the Edit Criteria screen will be displayed.
VISA RISK MANAGER GUIDE | VISA REAL TIME DECISIONING
13
Notice: The information herein by Visa is CONFIDENTIAL and may not be disclosed or published without the prior written permission of Visa. Information is to be used solely for acceptance of Visa payment products.
VISA REAL TIME DECISIONING
1. Select a parameter from the drop-down menu. > Rule Definition — Edit Criteria
1
The Parameter Details Table on the next page offers some additional comments on several parameters listed in the drop-down menu.
14
VISA RISK MANAGER GUIDE | VISA REAL TIME DECISIONING
Notice: The information herein by Visa is CONFIDENTIAL and may not be disclosed or published without the prior written permission of Visa. Information is to be used solely for acceptance of Visa payment products.
VISA REAL TIME DECISIONING
Parameter Details Table Parameter
Range
Key Points to Consider
• Expect values between 6 to 9 digits in length. When entered, the rule will apply to numbers that fall within the range. Example: If you enter 1234567, the application will define the MIN and MAX as follows: MIN: 123456700 MAX: 123456799 • Upon receiving an authorization request for an number, the application will look at the first 9 digits of the number to determine if it falls between the MIN and MAX values.
BIN
The value of the BIN is the first digits of the number.
Compromised Event Reference ID (CER ID)
This field displays the unique ID assigned to a specific data compromised event. If your organization is setup to receive the CER ID, the value will be populated within the authorization message and is available to use in both Real Time Decisioning and Case Creation rules.
• CVV Result Code
• All three of these parameters should only be used in Real Time Decisioning rules if Visa is performing the validation on behalf of the issuer.
• CVV2 Result Code • Address Verification Result Code
Transaction Amount (U.S. $)
• In many situations, the issuer is ing the results for these fields. In this case, the result codes will not be known at the time Real Time Decisioning is evaluating the authorization request. The value of the transaction amount should be entered in the U.S. dollar equivalent. Every transaction that is received by Visa is translated into the U.S. dollar amount, even if both the merchant and issuer process in non-US dollars. Example: If a Canadian cardholder purchases an item at a Canadian merchant; both the issuer and acquirer transaction currency will be in Canadian dollars. However, Visa will translate this activity into the US dollar equivalent, which is always used for the Transaction Amount field. Note: Only whole dollars are allowed. If you want to see transactions that are less than 1.00 (e.g. .99 cents), you should use the less than operator (<) with the value “1” as the transaction amount.
VISA RISK MANAGER GUIDE | VISA REAL TIME DECISIONING
15
Notice: The information herein by Visa is CONFIDENTIAL and may not be disclosed or published without the prior written permission of Visa. Information is to be used solely for acceptance of Visa payment products.
VISA REAL TIME DECISIONING
2. Select an operator that is available for the parameter. Most parameters have a set of available operators, as shown here. (See Special Case Parameters on pages 17 and 18 of this section for non-standard operator explanation.)
2
Use:
TO:
=
Select only one value.
___
<>
Select all values except one.
I want this rule to apply to all e-commerce transactions that were not classified as “secure electronic commerce” would be as follows: MOTO/ECI/Recurring <> “secure electronic commerce”
IN
Select more than one value.
You would use the “IN” operator if you want a rule to apply to both Recurring Transactions and Installment Payments.
Indicate that you do not want to select more than one value.
You would use the “NOT IN” operator if you want a rule to apply to all transactions except Recurring Transactions and Installment Payments.
NOT IN
16
Example:
VISA RISK MANAGER GUIDE | VISA REAL TIME DECISIONING
Notice: The information herein by Visa is CONFIDENTIAL and may not be disclosed or published without the prior written permission of Visa. Information is to be used solely for acceptance of Visa payment products.
VISA REAL TIME DECISIONING
Special Case Parameters The following parameters do not use the standard set of operators: The Merchant Zip Code allows the use of the Like operator. Example: “Merchant Zip Code Like 944” would match zip codes 94400 through 94499.
Transaction Amount and VAA Risk Score parameters allow the use of Less Than, Less Than or Equal To, Greater Than, and Greater Than or Equal to. They do NOT allow the use of IN and NOT IN.
VISA RISK MANAGER GUIDE | VISA REAL TIME DECISIONING
17
Notice: The information herein by Visa is CONFIDENTIAL and may not be disclosed or published without the prior written permission of Visa. Information is to be used solely for acceptance of Visa payment products.
VISA REAL TIME DECISIONING
The Range parameter only uses the Between operator. You can enter up to 9 digits. If you enter less and tab out of the first value, the system will fill it with zeros and display a high value filled with nines:
CW and CW2 Fraud Indicators parameters only allow the On/Off operator and do NOT allow entry of any values. The CW and CW2 Fraud Indicators are flags that are either on or off in the transaction. Example: “CW Fraud Indicator On” would match transactions with that flag. When selected, the “Enter Values” step is not required. Click the “Add” button to add the criteria to the list.
18
VISA RISK MANAGER GUIDE | VISA REAL TIME DECISIONING
Notice: The information herein by Visa is CONFIDENTIAL and may not be disclosed or published without the prior written permission of Visa. Information is to be used solely for acceptance of Visa payment products.
VISA REAL TIME DECISIONING
3. • Click on Step 3 Enter Values to display the drop-down menu. Click on the check box for each value that you want to include in the rule. You may enter multiple values.
• You can also enter a value in the input box, then click the Find link. The system will find that value (if it exists) and automatically select it.
If you are using an operator, such as IN, which allows multiple values, you can use the Find link multiple times. The previous selection will be retained when the next code is found.
3
4. Click the Add button for each parameter.
4
5 The system will immediately display the parameter criteria. 5. Click Update to save your data. Note: The data is not saved until you click the Update button.
VISA RISK MANAGER GUIDE | VISA REAL TIME DECISIONING
19
Notice: The information herein by Visa is CONFIDENTIAL and may not be disclosed or published without the prior written permission of Visa. Information is to be used solely for acceptance of Visa payment products.
VISA REAL TIME DECISIONING
Edit Criteria
1. To edit criteria, click the associated Edit link on the right side of the screen which will redisplay the data as it was originally entered. Example: If you click Edit for the Transaction Amount criteria, the parameter, operator and value would be displayed. 2. Make necessary changes to parameter, operator, and or value. In this example, the value of “500” has been updated to “300.” 3. Click Add to replace the existing parameter, operator, and or value with your new entry. 4. To remove criteria, click the remove link on right side of the screen. The screen will be redisplayed without the criteria parameter, operator, and value.
2 3 1
4
5 5. The data is not saved until you click the Update button.
20
VISA RISK MANAGER GUIDE | VISA REAL TIME DECISIONING
Notice: The information herein by Visa is CONFIDENTIAL and may not be disclosed or published without the prior written permission of Visa. Information is to be used solely for acceptance of Visa payment products.
VISA REAL TIME DECISIONING
Rule Testing
Test and Activate Rules
After you define criteria for the rule, two additional buttons are displayed at the bottom of the Rule Definition screen: Test and Activate. The Test feature allows you to execute the set of rules against up to 13 weeks of sample transaction history in a test environment. You can also test changing the priority of this rule relative to others of the same type.
Visa does minimal validation of rule criteria; therefore testing allows you to ensure the rule produces expected results.
1 1. Click Test to ensure the set of rules yields expected results when validated against a transaction history sampling. The results of the test will be provided in the View Test Results screen for review.
VISA RISK MANAGER GUIDE | VISA REAL TIME DECISIONING
21
Notice: The information herein by Visa is CONFIDENTIAL and may not be disclosed or published without the prior written permission of Visa. Information is to be used solely for acceptance of Visa payment products.
VISA REAL TIME DECISIONING
2. When you are done with rules testing, click Activate. This indicates that you have tested the rule and it is ready to be deployed in production. The Rules Management screen will be displayed.
– The status will be set to Pending Activation and the next sequential version number will be assigned – new rules will be version 001 – If this is a new rule, it will be assigned the lowest priority in the Rule Set; existing rules will retain their current priority The system will also display a confirmation message. 3. Click the OK button to proceed. The new rule will be added to your Real Time Decisioning Rule Set. If you have updated a rule that is already in production, the revised version will be placed in the Rule Set.
22
New rules have the lowest priority and existing rules retain their previous priority.
VISA RISK MANAGER GUIDE | VISA REAL TIME DECISIONING
Notice: The information herein by Visa is CONFIDENTIAL and may not be disclosed or published without the prior written permission of Visa. Information is to be used solely for acceptance of Visa payment products.
VISA REAL TIME DECISIONING
> Activation diagram
@E8:K@M<ILC<J
:LII<EKILC<J
E
Gi`fi`kp(Ilc\9
Gi`fi`kp(Ilc\9
Gi`fi`kp)Ilc\<
Gi`fi`kp)Ilc\<
K\jk\[
Gi`fi`kp*Ilc\8
IL C < J
@eXZk`m\Ilc\;
IL C < J
@eXZk`m\Ilc\: Efkp\kk\jk\[
Gi`fi`kp*Ilc\8
Gi`fi`kp+Ilc\; 8[[`k`feXcilc\[\]Xlckj kfcfn\jkgi`fi`kp
Rules have four different status values: • Inactive • Pending Activation • Active • Pending Deactivation See next page for definitions.
VISA RISK MANAGER GUIDE | VISA REAL TIME DECISIONING
23
Notice: The information herein by Visa is CONFIDENTIAL and may not be disclosed or published without the prior written permission of Visa. Information is to be used solely for acceptance of Visa payment products.
VISA REAL TIME DECISIONING
Rule Status and Versions
Status Description
Status Inactive rules are those not currently in the “live” Rule Set.
Key Points to • All new rules are assigned the “inactive” status until they are activated • Inactive rules can be tested to evaluate performance prior to activating • Previously active rules that have been “de-activate” from production are re-assigned the “inactive” status.
Pending Activation occurs when a request is submitted to activate a rule.
• The rule is added to the member’s Rule Set and is queued for publishing to the “live” environment. • Depending on the rule type, the rules are published at different frequencies throughout the day. • The status of the rule remains “Pending Activation” until the rule is published to the “live” environment
Version Number
Active includes any rule that is currently “live” in the production environment.
• s can modify active rules by changing the criteria and processing options.
Pending Deactivation applies to any rule that is currently active, but has been requested to be deactivated by the .
• Upon submitting the deactivation request, a new Rule Set is created that does not contain the selected rule.
• Upon saving the changes of an active rule, a new version is created and is added to a new Rule Set. The changes to the active rule will not be effective until the new Rule Set is published.
• When the new Rule Set is published to the production environment, the status of the rule is changed to “inactive.”
In addition to the status, each rule has a version number assigned to keep track of changes. Only rules that are in the “active” status are assigned a new version number if they have been updated. Updating an “inactive” rule will not change the version number. > New Rule Version status Flow
8e\nIlc\`jZi\Xk\[
24
M\ij`fe''( @E8:K@M<
Ilc\`jXZk`mXk\[
M\ij`fe''( G<E;@E>8:K@M8K@FE
Ilc\J\k`jXZk`m\ `egif[lZk`fe
M\ij`fe''( 8:K@M<
:_Xe^\jZXeY\dX[\kf @eXZk`m\Ilc\M\ij`fej G\e[`e^8Zk`mXk`fe`e[`ZXk\jk_\Ilc\ M\ij`fe_XjY\\eXZk`mXk\[#Ylkk_\ Zfii\jgfe[`e^Ilc\J\km\ij`fe`jefk p\kXZk`m\`egif[lZk`fe 8Zk`m\`e[`ZXk\jk_`jIlc\M\ij`fe `jZlii\ekc`m\`egif[lZk`fe
VISA RISK MANAGER GUIDE | VISA REAL TIME DECISIONING
Notice: The information herein by Visa is CONFIDENTIAL and may not be disclosed or published without the prior written permission of Visa. Information is to be used solely for acceptance of Visa payment products.
VISA REAL TIME DECISIONING
Modify a Rule
1. To modify a rule, select it on the Rules Management screen and click View/Edit.
1 The Rule Definition screen will be displayed.
2
3
4
5
2. Update the basic information, criteria, and/or processing options. 3. Click Update to save your changes. Note: If you are modifying an inactive rule, your changes will be made to the current version. If you modify a rule in any other status, a new rule version will be created with an Inactive status. 4. Test the new rule definition. 5. Activate the new version. The Rule will retain its priority within the Rule Set, but you can modify it, if needed. When this version is live in production, the previous version will become inactive.
VISA RISK MANAGER GUIDE | VISA REAL TIME DECISIONING
25
Notice: The information herein by Visa is CONFIDENTIAL and may not be disclosed or published without the prior written permission of Visa. Information is to be used solely for acceptance of Visa payment products.
VISA REAL TIME DECISIONING
> Modified Rule Version Flow
Deactivate a Rule
8eXZk`m\Ilc\ `jdf[`]`\[
M\ij`fe'') @E8:K@M<
Ilc\`jXZk`mXk\[
M\ij`fe'') G<E;@E>8:K@M8K@FE
Ilc\J\k`jXZk`m\ `egif[lZk`fe
M\ij`fe'') 8:K@M<
M\ij`fe'')nXjZi\Xk\[n_\eM\ij`fe''( nXjlg[Xk\[ G\e[`e^8Zk`mXk`fe`e[`ZXk\jk_\Ilc\M\ij`fe _XjY\\eXZk`mXk\[Ylkk_\Zfii\jgfe[`e^ Ilc\J\km\ij`fe`jefkp\kXZk`m\`egif[lZk`fe M\ij`fe''( @E8:K@M<
N_\ek_\e\nm\ij`fe `j8Zk`m\`egif[lZk`fe k_\gi\m`fljm\ij`fe `jj\kkf`eXZk`m\
If you no longer need a rule, you can deactivate it. If a rule is active, you can deactivate in one of two ways: 1. From the Rules Definition screen, click on the Deactivate button. 2. If the Rule is in pending activation status and you do not want to activate it,
you need to click the Remove link on the Edit Rule Set screen. When the new version of the Rule Set is published, the rule will have a status of pending deactivation. Once the new Rule Set version is active, the rule status will be updated to inactive. > Inactive rule Status Flow @E8:K@M<ILC<J
:LII<EKILC<J
Gi`fi`kp)Ilc\<
@eXZk`m\Ilc\: ;\c\k\ilc\i\dfm\j `eXZk`m\ilc\
E
Gi`fi`kp(Ilc\9
Gi`fi`kp*Ilc\8
Gi`fi`kp+Ilc\;
26
@eXZk`m\Ilc\8
I LC< J
I LC< J < K
Gi`fi`kp(Ilc\9
@eXZk`m\Ilc\: 8[[`k`feXcilc\ [\]Xlckjkf cfn\jkgi`fi`kp
@E8:K@M<ILC<J
Gi`fi`kp)Ilc\<
Gi`fi`kp+Ilc\;
VISA RISK MANAGER GUIDE | VISA REAL TIME DECISIONING
Notice: The information herein by Visa is CONFIDENTIAL and may not be disclosed or published without the prior written permission of Visa. Information is to be used solely for acceptance of Visa payment products.
VISA REAL TIME DECISIONING
Delete an Inactive Rule
You can also delete an inactive rule if you do not want it to appear on the Rules Management screen. 1. Select the Rules Management screen and click on the inactive rule that you want to delete.
1 2 2. Click the Delete button. The system will display a confirmation message. 3. Click OK to confirm deletion. Note: If the rule had never been activated, it will still be in an inactive status and you can simply delete it. Deleted rules can continue to be viewed from the Rules Set Details screen.
VISA RISK MANAGER GUIDE | VISA REAL TIME DECISIONING
27
Notice: The information herein by Visa is CONFIDENTIAL and may not be disclosed or published without the prior written permission of Visa. Information is to be used solely for acceptance of Visa payment products.
VISA REAL TIME DECISIONING
Rules Publishing
Rules Publishing is the final step needed to activate rules into production. A Rule Set contains at least one rule, but can have multiple rules. There is no maximum limit to the number of rules that can be included in a Rule Set. • When a rule is activated on the Rule Definition screen, the application creates a new “Rule Set” that is given a “pending” status. • The activated rule is assigned the lowest priority within the Rule Set. s have the option of modifying the priority of the rules prior to publishing the them to the “live” environment. > Activate New Rule
@E8:K@M<ILC<J
:LII<EKILC<J
E
Gi`fi`kp(Ilc\9
Gi`fi`kp(Ilc\9
Gi`fi`kp)Ilc\<
Gi`fi`kp)Ilc\<
K\jk\[
8Zk`mXk\ÆX[[k_`j ilc\kfk_\ilc\j\k
Gi`fi`kp*Ilc\8
ILC<J
@eXZk`m\Ilc\;
ILC<J
@eXZk`m\Ilc\: Efkp\kk\jk\[
Gi`fi`kp*Ilc\8
Gi`fi`kp+Ilc\; 8[[`k`feXcilc\[\]Xlckj kfcfn\jkgi`fi`kp
28
VISA RISK MANAGER GUIDE | VISA REAL TIME DECISIONING
Notice: The information herein by Visa is CONFIDENTIAL and may not be disclosed or published without the prior written permission of Visa. Information is to be used solely for acceptance of Visa payment products.
VISA REAL TIME DECISIONING
A Rule Set goes through a series of versions as changes are made to it and/or the underlying rules. The following diagram explains each status stage of the Rule Set publishing process. > Rule Set Version Status Flow
JK8KLJ 8Zk`mXk\fi[\XZk`mXk\X ilc\fii\dfm\]ifdk_\ Ilc\J\k
GlYc`j_k_\Ilc\J\k
Access Rule Set Details
@E8:K@M<
GL9C@J?<;
;\gcfpd\ekZfdgc\k\
8:K@M<
GlYc`j_e\n\im\ij`fe
@E8:K@M<
;<J:I@GK@FE :_Xe^\jZXeY\dX[\kfG\e[`e^Ilc\J\kj% @kn`ccefk_Xm\;Xk\GlYc`j_\[fi8Zk`mXk\[% 8GlYc`j_\[Ilc\J\k`j`ek_\gifZ\jjf]Y\`e^ [\gcfp\[kfgif[lZk`fe%EfZ_Xe^\jZXeY\dX[\ kfk_`jm\ij`fe%@k_XjX;Xk\GlYc`j_\[%
8e8Zk`mXk\[Ilc\J\k`jk_\fe\Zlii\ek`e gif[lZk`fe%EfZ_Xe^\jZXeY\dX[\ kfk_`jm\ij`fe%@k_XjYfk_X;Xk\GlYc`j_\[ Xe[X;Xk\8Zk`mXk\[% 8Ilc\J\km\ij`fe_XjXe`eXZk`m\jkXkljn_\e `k_XjY\\ejlg\ij\[\[YpXcXk\im\ij`fe% K_\gi`fim\ij`fe`jj\kkf`eXZk`m\n_\eXe\n m\ij`fe`jj\kkf8Zk`m\%
Each time you activate a rule, Rule Set Details screen (as shown below) is automatically displayed.
You can also access the Rule Set Details screen when you click the View/ Edit button from the Rules Publishing screen.
VISA RISK MANAGER GUIDE | VISA REAL TIME DECISIONING
29
Notice: The information herein by Visa is CONFIDENTIAL and may not be disclosed or published without the prior written permission of Visa. Information is to be used solely for acceptance of Visa payment products.
VISA REAL TIME DECISIONING
The Rules Publishing screen shows the history of Rule Set versions, along with the Date/Time Published and the Date/Time Activated.
Edit a Rule Set
1. From the Visa Risk Manager Navigation Menu, select Rules Manager, then Rules Publishing.
1
The system will display the Rules Publishing screen.
2 2. To view the details of a Rule Set version, select the rule and click the View/ Edit button. The system will display the Rule Set Details screen – the same screen that is displayed when you activate a rule.
30
VISA RISK MANAGER GUIDE | VISA REAL TIME DECISIONING
Notice: The information herein by Visa is CONFIDENTIAL and may not be disclosed or published without the prior written permission of Visa. Information is to be used solely for acceptance of Visa payment products.
VISA REAL TIME DECISIONING
3 4
3. To view the rule, first select the rule, then click the View Rule Button. The system will display the Rule Definition screen (view-only mode). 4. To edit the Rule Set, click the Edit Rule Set button. The system will display the Edit Rule Set screen which allows you to change rule priorities, publish a Rule Set, or remove the rule from the set.
5
6 5. To change the priority of the rules, simply type a new priority for a rule you want to change. The system will move that rule to that position in the list and will reset any priorities equal to or less than the entered number to a lower value. 6. To publish the Rule Set to production, click the Publish Button. This should only be done when you are sure that you have all of the rules you need and have assigned them the appropriate priority. When you click the Publish button, a confirmation message will appear.
VISA RISK MANAGER GUIDE | VISA REAL TIME DECISIONING
31
Notice: The information herein by Visa is CONFIDENTIAL and may not be disclosed or published without the prior written permission of Visa. Information is to be used solely for acceptance of Visa payment products.
VISA REAL TIME DECISIONING
7. Click OK. The system will redisplay the Rule Set Details screen. Shows current time.
Will be blank until the Rule Set has been sent to Visa® and an acknowledgement has been returned.
7
Remove a Rule
1. To remove a rule from the Rule Set, click the “remove” link beside a rule.
1 A confirmation message will appear. 2. Click OK. The system will redisplay the Rule Set Details screen. The rule will be removed from the Rule Set and its status will be set to Inactive.
32
VISA RISK MANAGER GUIDE | VISA REAL TIME DECISIONING
Notice: The information herein by Visa is CONFIDENTIAL and may not be disclosed or published without the prior written permission of Visa. Information is to be used solely for acceptance of Visa payment products.
VISA REAL TIME DECISIONING
Note: If you remove a rule for a set that is still in pending status, the rule will simply be removed and set to inactive. If you remove a rule from an active or published rule, a new version of the Rule Set will be created in a pending status. > Deactivate and Remove a Rule
@E8:K@M<ILC<J
@eXZk`m\Ilc\:
:LII<EKILC<J
Gi`fi`kp)Ilc\<
;\c\k\ilc\Æ i\dfm\j `eXZk`m\ilc\
Gi`fi`kp(Ilc\9
Gi`fi`kp*Ilc\8
Gi`fi`kp+Ilc\;
@eXZk`m\Ilc\:
@eXZk`m\Ilc\8
E
;\XZk`mXk\Æ i\dfm\k_`j ilc\kfk_\ ilc\j\k
VISA RISK MANAGER GUIDE | VISA REAL TIME DECISIONING
ILC<J
I LC < J < K
Gi`fi`kp(Ilc\9
@E8:K@M<ILC<J
Gi`fi`kp)Ilc\<
Gi`fi`kp+Ilc\;
33
Notice: The information herein by Visa is CONFIDENTIAL and may not be disclosed or published without the prior written permission of Visa. Information is to be used solely for acceptance of Visa payment products.
VISA REAL TIME DECISIONING
Block/Exclude Rules
In addition to establishing rules to evaluate transactions, Visa Real Time Key Considerations Decisioning also allows you to create rules for specific s: • Block s rules will automatically decline authorization requests for the specified . No other rule processing will be performed. • Exclude s rules will identify s that should be excluded from rule processing. – Timeframe — With Visa Risk Manager, you can specify a date range for excluding rules, or use the “until further notice” option. – Rule type — You can also exclude an by rule type. However, rule processing for the other rule type will continue for this . At any point in time, an can have: • A Block rule • An Exclude rule • No -specific rules
Some Key Points to • If you add a new rule to an that already has one, the new rule will replace the existing one. The application includes the ability to search for existing rules. You can use this feature to if a specific rule is going to be replaced. • numbers can be loaded manually or by using an file. • Block and Exclude rules are applied to production within minutes of being added. numbers that are loaded using a file, however, may take a little longer to become effective, depending on the volume.
34
VISA RISK MANAGER GUIDE | VISA REAL TIME DECISIONING
Notice: The information herein by Visa is CONFIDENTIAL and may not be disclosed or published without the prior written permission of Visa. Information is to be used solely for acceptance of Visa payment products.
VISA REAL TIME DECISIONING
1. From the Visa Risk Manager Navigation Menu, select Block/Exclude s.
Create Block Rules— Manual Entry
1
The Block/Exclude Numbers screen will be displayed.
2
2. Click the Block s link. The Block s screen will be displayed.
VISA RISK MANAGER GUIDE | VISA REAL TIME DECISIONING
35
Notice: The information herein by Visa is CONFIDENTIAL and may not be disclosed or published without the prior written permission of Visa. Information is to be used solely for acceptance of Visa payment products.
VISA REAL TIME DECISIONING
3
4
5 3. To enter one or more numbers manually, select Add Numbers. 4. Enter an number you want to block and click the Add button. Continue to enter additional numbers, as needed. 5. When you are done, click the Update button. The system will display a confirmation message. 6. Click OK to confirm that the numbers entered should be blocked. The system will display the Block/Exclude Numbers screen with a confirmation that your request has been submitted.
To view existing rules for Numbers, refer to the Search for Rules on page 45 of this section.
36
VISA RISK MANAGER GUIDE | VISA REAL TIME DECISIONING
Notice: The information herein by Visa is CONFIDENTIAL and may not be disclosed or published without the prior written permission of Visa. Information is to be used solely for acceptance of Visa payment products.
VISA REAL TIME DECISIONING
Create Block Rules—File
1. From the Navigation Menu, select Block/Exclude s.
1
The Block/Exclude Numbers screen will be displayed.
2
2. Click the Block s link. The Block s screen will be displayed.
VISA RISK MANAGER GUIDE | VISA REAL TIME DECISIONING
37
Notice: The information herein by Visa is CONFIDENTIAL and may not be disclosed or published without the prior written permission of Visa. Information is to be used solely for acceptance of Visa payment products.
VISA REAL TIME DECISIONING
3
3. To a file of numbers, select File. 4. Enter the file path and name in the File Location (you can use the Browse button if needed).
Keep in mind that an can only have one level rule at a time. Therefore, when a Block rule is created using this file, it will replace any previous Exclude rule that may exist for the number.
4
5
6 5. You may choose to either Add s to Block List or Replace Existing Block List with this new file (if you are providing a full list of s that should be blocked.) If you select:
Then:
Add s to Block List
The numbers in the file will be added as an additional rule.
Replace Existing Block List with this new file
All existing Block rules will be removed; Exclude rules will be retained.
6. Click the Update button. The system will display a confirmation message.
38
VISA RISK MANAGER GUIDE | VISA REAL TIME DECISIONING
Notice: The information herein by Visa is CONFIDENTIAL and may not be disclosed or published without the prior written permission of Visa. Information is to be used solely for acceptance of Visa payment products.
VISA REAL TIME DECISIONING
After you confirm the numbers should be blocked, the system will display the Block/Exclude s Numbers screen with a message that your request has been submitted. You will also see an additional link, View File Processing Results.
7
7. Click the View File Processing Results link to check the status of the file . The amount of time needed to process the file will depend on the number of s it contains. The File Processing screen will be displayed. The file status will be one of the following: • Publishing – The file is currently being processed • Partially ed – One or more s was successfully ed and one or more had an error • ed – All s in the file were successfully ed • Not ed – All s in the file had errors
If at least one error was identified, an error file will be generated that indicates the number and the associated error. A link will be available for that file in the Errors column; click that link to view the details of the errors.
VISA RISK MANAGER GUIDE | VISA REAL TIME DECISIONING
39
Notice: The information herein by Visa is CONFIDENTIAL and may not be disclosed or published without the prior written permission of Visa. Information is to be used solely for acceptance of Visa payment products.
VISA REAL TIME DECISIONING
Create Exclude 1. At the Block/Exclude Numbers screen, click the Exclude s link. Rules
1
The Exclude s screen will be displayed. 2. Use the same process for creating Exclude rules as you did for Block s. Here, however, you can apply additional options as needed.
2 Additional Options: Exclude Rules can be set until further notice or for a specified date range. The default is until further notice.
Exclude Rules can be set by rule type.
40
VISA RISK MANAGER GUIDE | VISA REAL TIME DECISIONING
Notice: The information herein by Visa is CONFIDENTIAL and may not be disclosed or published without the prior written permission of Visa. Information is to be used solely for acceptance of Visa payment products.
VISA REAL TIME DECISIONING
3. To define the rule for a specific timeframe, select Date Range and enter an end date. (The start date defaults to today and cannot be modified.)
3 4
4. To apply the Exclude rule to a specific rule type (either Real Time Decisioning or Case Creation), select the appropriate type in the Applies to drop-down.
VISA RISK MANAGER GUIDE | VISA REAL TIME DECISIONING
41
Notice: The information herein by Visa is CONFIDENTIAL and may not be disclosed or published without the prior written permission of Visa. Information is to be used solely for acceptance of Visa payment products.
VISA REAL TIME DECISIONING
The search feature allows you to view all rules, or those for a specific BIN or number.
Search for Rules
1. To view all rules, go to the Block/Exclude Numbers screen, select the View all rules button, then click the Search button.
1
OR 2. To view a specific rule, select Enter BIN or Number and enter a value, then click the Search button.
2
42
VISA RISK MANAGER GUIDE | VISA REAL TIME DECISIONING
Notice: The information herein by Visa is CONFIDENTIAL and may not be disclosed or published without the prior written permission of Visa. Information is to be used solely for acceptance of Visa payment products.
VISA REAL TIME DECISIONING
The Search Results screen will be displayed.
The Search Results screen will display up to 1000 rules, even if there are more rules that match the search criteria.
3
3. To obtain a list of “all” matching rules, click the Export List link to create a spreadsheet.
Delete an Rules
You can delete rules that you no longer need. 1. Search for rules (as described in this section). At the Search Result screen, click the Delete check box for the (s) associated with the rule you need to delete.
1
2 2. Click Update. A confirmation message will be displayed. 3. Click OK to continue deleting the rule.
VISA RISK MANAGER GUIDE | VISA REAL TIME DECISIONING
43
Notice: The information herein by Visa is CONFIDENTIAL and may not be disclosed or published without the prior written permission of Visa. Information is to be used solely for acceptance of Visa payment products.
Related Documents 3h463d
File Action 6tz25
October 2022 0
File 6u363d
December 2021 0
File 6u363d
November 2020 0
File 2fd6d
November 2019 117
File 2fd6d
October 2019 208