Blocking rulesets
Overview
Verifone's Blocking Rulesets feature enables merchants to set certain rules, based on which transactions are automatically blocked by Verifone, without informing the cardholder of the transaction decline reason. As a result, merchants can save fees for transactions that are not forwarded for further processing. If the transaction activates a blocking ruleset, it is declined by Verifone.
Availability
The Blocking Rulesets in Verifone Central can be used by any user with a Merchant Admin role and need to be applied at Merchant Site level.
Blocking rulesets in Verifone Central
Blocking rulesets can be set for any merchant entity and can only be viewed by the merchant entity they were set up for.
Within a blocking ruleset, you can set any of the following rules:
- Amount − the rule is triggered if the transaction amount fulfils the operator criteria.
- The following operators are permitted:
- is less than
- is less than and equal to
- equals to
- is not equal to
- is greater than or equal to
- is greater than
- The value field accepts any number.
- The following operators are permitted:
- Currency Code the rule is triggered if the transaction currency code fulfils the operator criteria.
- The following operators are permitted:
- equals to
- is not equal to
- The value field is a drop-down of all transaction currency codes that Verifone accepts.
- The following operators are permitted:
- Customer − the rule is triggered if the shopper's name or email address fulfils the operator criteria.
- The following operators are permitted:
- equals to
- is not equal to
- The value field accepts any text.
- The following operators are permitted:
- Customer Country Code − the rule is triggered if the shopper's country code fulfils the operator criteria.
- The following operators are permitted:
- equals to
- is not equal to
- The value field is a drop-down of all country codes that Verifone accepts.
- The following operators are permitted:
- Customer IP − the rule is triggered if the shopper's IP address fulfils the operator criteria.
- The following operators are permitted:
- equals to
- is not equal to
- The value field accepts IP-formatted content.
- The following operators are permitted:
- Customer IP Country − the rule is triggered if the country code of the shopper's IP address fulfils the operator criteria.
- The following operators are permitted:
- equals to
- is not equal to
- The value field is a drop-down of all country codes that Verifone accepts.
- The following operators are permitted:
- Issuer Country − the rule is triggered if the country code of the shopper's payment card issuer fulfils the operator criteria.
- The following operators are permitted:
- equals to
- is not equal to
- The value field of all country codes that Verifone accepts.
- The following operators are permitted:
- Entity − the rule is triggered if the merchant entity that initiated the transaction fulfils the operator criteria.
- The following operators are permitted:
- equals to
- is not equal to
- The value field accepts any number.
- The following operators are permitted:
- 3DS enrollment status - the rule is triggered if the 3DS enrolment status provided during the 3DS process fulfils the operator criteria.
- The following operators are permitted:
- equals to
- is not equal to
- The value field accepts the following values:
- Y - Yes, Bank is participating in 3-D Secure protocol and will return the ACSUrl.
- N - No, Bank is not participating in 3-D Secure protocol.
- U - Unavailable, the DS or ACS is not available for authentication at the time of the request.
- B - Bypass, merchant authentication rule is triggered to bypass authentication in this use case.
- The following operators are permitted:
- 3DS authentication status - the rule is triggered if the 3DS authentication status provided during the 3DS process fulfils the operator criteria.
- The following operators are permitted:
- equals to
- is not equal to
- The value field accepts the following values:
- Y - Successful Authentication.
- N - Failed Authentication.
- A - Successful Attempts Transaction.
- C - Challenge Required for Authentication.
- R - Authentication Rejected.
- U - Unable to Complete Authentication
- The following operators are permitted:
- 3DS signature verification - the Rule is triggered if the 3DS signature verification provided during the 3DS process fulfils the operator criteria.
- The following operators are permitted:
- equals to
- is not equal to
- The value field accepts the following values:
- Y - Indicates that the signature of the PARes has been validated successfully and the message contents can be trusted.
- N - Indicates that the PARes could not be validated. This result could be for a variety of reasons; tampering, certificate expiration, etc., and the result should not be trusted.
- The following operators are permitted:
- 3DS error - the Rule is triggered if an error value provided during the 3DS process fulfils the operator criteria.
- The following operators are permitted:
- equals to
- is not equal to
- The value field accepts any number
- The following operators are permitted:
Workflow
Add a blocking ruleset
To add a blocking ruleset, follow these steps:
- Log in to your Verifone Central account.
- Navigate to Administration and click on Blocking Rulesets.
- Provide a label for your new ruleset and select the rules you want to add from the drop-down list. After you select a rule and its values, click on Add rule.
- After adding the desired rules to your new ruleset, click on Create ruleset.
- Your new ruleset is created.
- You can add a new ruleset by clicking on Add new ruleset. You can set multiple rulesets for a merchant entity.
Edit a blocking ruleset
To edit/change a ruleset, follow these steps:
- Log in to your Verifone Central account.
- Navigate to Administration and click on Blocking Rulesets.
- Click on the ruleset you want to edit.
- In the next window, click on Edit ruleset.
- Update the ruleset and click Save changes.
Verifone Validation Logic
To provide an example of the Verifone validation logic, let us assume that you set up the following two blocking rulesets for a given merchant entity:
- Blocking Ruleset A
- Rule 1: Issuer Country equals to Country A
- Rule 2: Amount is greater than 100
- Rule 3: Currency Code equals to Currency Code B
- Blocking Ruleset B
- Rule 1: Customer Country Code is not equal to Country Code C
After saving the blocking rulesets, transaction #001 is initiated with the merchant entity with the following properties:
- 99 Currency Code B with Issuer Country A from Shopper Country D
And the following logic is applied by the Verifone Validation Service for Transaction #001:
- Blocking Ruleset A, Rule 1 is triggered
- Blocking Ruleset A, Rule 2 is not triggered
- Blocking Ruleset A, Rule 3 is triggered
- Blocking Ruleset A is not activated
- Blocking Ruleset B, Rule 1 is triggered
- Blocking Ruleset B is activated
- Result: The Transaction is blocked by the Verifone Validation Service
Transaction #002 is initiated with the merchant entity with the following properties:
- 101 Currency Code A with Issuer Country B from Shopper Country C
The following logic is applied by the Verifone Validation Service for transaction #002:
- Blocking Ruleset A, Rule 1 is not triggered
- Blocking Ruleset A, Rule 2 is triggered
- Blocking Ruleset A, Rule 3 is not triggered
- Blocking Ruleset A is not activated
- Blocking Ruleset B, Rule 1 is not triggered
- Blocking Ruleset B is not activated
- Result: The transaction is not blocked by the Verifone Validation Service, and is sent for further processing
Blocking rulesets use cases
Amongst others, Verifone's blocking rulesets feature can be used for use cases such as:
- If there are any IPs or customers known to be fraudulent, you can preemptively block them to avoid future fraudulent activities.
- Also, as a merchant, you might be asked by an acquirer or by a local government to comply with regulations or national laws and not be in business with certain countries.
- Blocking failed 3DS transactions. For more information, see Blocking failed 3DS transactions | Online payments | Verifone Developer Portal.