Fraud prevention

• True — Indicates that rules should be returned
• False — Indicates that rules should not be returned
• <Blank> — Indicates that rules are not returned

Phone number provided by a customer during a transaction with a merchant.

Notes:

• This field should be sent when the transaction is conducted over the phone
• If a customer automatic number identification (ANI) is unsupported by the call center, enter 0123456789 into this field.

This field can be populated with user-defined values, shopping cart data, or both. Supports up to 999 characters.

There can be multiple strings sent in a single record.

Notes:

• Each item must be separated by a “pipe” (|) character
  • The “pipe” (|) character cannot be used as part of the data.
• To embed ampersands (&), equal signs (=), and/or “pipe” (|) characters within the data itself, the data provided must be Uniform Resource Identifier (URI) encoded. For example:
  • An ampersand (&) is %26
  • A “pipe” (|) character is %7C
    
  • An equal sign (=) is %3D
• If user-defined data must be previously-defined (e.g., UPROMOCODE=40&|):
  • U — Constant
  • PROMOCODE — The previously-defined label
  • 40 — Rule value
• If related to a date, the format is YYYY-MM-DD
• If related to time, the format is HH:MM:SS, where HH is in 24-hour format.
• & — Constant
• For shopping cart data, the following criteria applies:
  • May be URI-encoded
  • A “pipe” (|) character indicates the end of a string
  • Must contain five sub-elements, such as in the following example: T=TV&I=SKU123&D=42 Plasma&Q=1&P=70000&|
    • T — Type: In the example above, the type is a television.
    • I — Item: In the example above, the item is the stock keeping unit (SKU)
    • D — Description: In the example above, the description is a plasma television
    • Q — Quantity: This value must be numeric.
    • P — Price: This value must be numeric (two-decimal value implied)

Merchant-generated fraud session ID

Notes:

• Should be unique for a period of 30 days
• Only able to support upper- and lower-cased alphabetical (A-Z, a-z) or numeric (0-9) values
• Supports a maximum of 32 characters

Method of shipment selected for an item. Valid values include the following:

• C — Lowest cost
• D — Carrier designated by customer
• E — Electronic delivery* 
• G — Ground*
• I — International
• M — Military
• N — Next day/overnight*
• O — Other/standard
• P — Store pickup*
• S — Same day*
• T — Two-day service*

Note: Values marked with an asterisk (*) pertain to American Express.

• A — Approve
• D — Decline
• E — Manager review
• R — Review
• <blank> — No decision response code is returned

Provides a comma-delimited list of the rules triggered

Notes: 

• The first four positions in the list are the number of rules returned, followed by an equal (=) sign
• If more rules are triggered than can fit in the record, the last character in this field is a plus (+) sign
• If no rules are triggered, 0000= is returned

• X — Pre-authorization check
• Y — Post-authorization check

• ca — California
• CA — Canada

Note: If the region is returned as lowercase, it is a state or province. If the region is returned as uppercase, it is a country.

Payment method brand identified during Safetech fraud scoring. Valid values include the following:

• AMEX — American Express
• AUBC — Australian Bankcard
• CHEK — Check
• CHIN — China Pay
• DISC — Discover
• DNRS — Diner’s Club
• JCB — Japan Credit Bureau (JCB) International
• MSRO — Maestro
• MSTR — Mastercard
• VISA — Visa
• VISE — Visa Electron
• UNKN — Other
• <Blank> — May be returned

The device layers are as follows:

• Operating system — The network, operating system, and secure sockets layer (SSL) return definite information
• Flash settings — Queries the device to determine if it is Flash-capable. If so, device data is gathered via Flash.
• JavaScript settings — Queries the device to determine if it is JavaScript capable. If so, device data is gathered via JavaScript.
• Cookie settings — Queries HTTP headers for a number of device-associated data.
• Browser — Queries the high-level browser to collect information about the browser, such as the user-agent string and browser type.

Note: Each layer is delimited by periods (e.g., 329B0D35C3.41111A0B4A)

Indicates a corresponding Kaptcha record. Valid values include the following:

• Y — Yes
• N — No
• <Blank> — May be returned

The region or state where the consumer's device resides. Examples:

• ca — California
• CA — Canada

Note: If the region is returned as lowercase, it is a state or province. If the region is returned as uppercase, it is a country.

Network type associated with consumer Valid values include the following:

• A — Anonymous
• H — High School
• L — Library
• N — Normal
• O — Open Proxy
• P — Prison

Indicates if the device is using a proxy. Valid values include the following:

• Y — Yes 
• N — No 
• <Blank> — May be returned

Indicates if the device’s browser allows JavaScript. Valid values include the following:

• Y — Yes 
• N — No 
• <Blank> — May be returned

Indicates if the device’s browser allows Flash. Valid values include the following:

• Y — Yes 
• N — No 
• <Blank> — May be returned

Indicates if the device’s browser allows cookies. Valid values include the following:

• Y — Yes 
• N — No 
• <Blank> — May be returned

Indicates if the device is a mobile device. Valid values include the following:

• Y — Yes 
• N — No 
• <Blank> — May be returned

Indicates if the device has wireless capabilities. Valid values include the following:

• Y — Yes 
• N — No 
• <Blank> — May be returned

Indicates if the device is voice controlled. Valid values include the following:

• Y — Yes 
• N — No 
• <Blank> — May be returned

Indicates if the device is a remotely controlled computer. Valid values include the following:

• Y — Yes 
• N — No 
• <Blank> — May be returned