Interaction between the SOFI and external system is organized via XML-interfaces by HTTPS protocol. The external system provides the data of transaction that currently processed to SOFI and receives results of this transaction check on fraud.
The SOFI returns to the external system the payment status and the reasons for the status determination as a result of checking. All possible fraud-statuses of the payment are presented in the table below.
Payment fraud-statuses, which SOFI determines
Name | Code | Description |
Clear | 0 | Fraud is not detected. |
Suspicious | 50 | Transaction passes all filters but data analysis shows that this payment can be considered both (50/50) as fraudulent and as clear. |
Fraud | 100 | Transaction didn't pass some filters or data analysis shows that this payment has all features of fraud . |
All possible reasons for the fraud-status determination are presented in the table below.
Reasons for the fraud-status determination
Name | Code | Description |
Math model | 1 | Fraud-status was determined by the mathematical modeling methods. |
Insufficient data | 2 | Corresponds to the 'clear' fraud-status but no checks were performed by mathematical modeling methods as insufficient data were provided for the payment. |
Not validate | 3 | Corresponds to the 'clear' fraud-status but no checks were performed. |
Expert | 4 | Fraud-status was determined by expert. |
Payment is in black list1 | 7 | Fraud-status determined according to black list of payment attributes. |
Payment is in trust white list1 | 8 | Fraud-status determined according to trust white-list of payment attributes. |
Payment is out of allowing white list1 | 9 | Fraud-status determined according to allowing white list, when payment attributes are out of that list. |
Blocked card | 10 | Fraud-status was determined by corresponding to the filter on card number. |
Blocked e-mail | 11 | Fraud-status was determined by corresponding to the filter on E-mail. |
Blocked unique payer identity | 12 | Fraud-status was determined by corresponding to the filter on unique payer identity values under application/service of external system. |
Blocked customer country | 14 | Fraud-status was determined by corresponding to the filter on customer country (country is determined by customer IP-address). |
Blocked bank county | 15 | Fraud-status was determined by corresponding to the filter on issuer-bank country. |
Blocked IP | 16 | Fraud-status was determined by corresponding to the filter on IP-address. |
Trust card | 17 | Corresponds to the 'Clear' fraud-status due to the card belonging to list of trusted cards. |
Trust IP | 18 | Corresponds to the 'Clear' fraud-status due to the IP belonging to list of trusted IP-address. |
Fraud chain | 13 | Corresponds to the 'Suspicious' fraud-status. This payment was successfully checked by mathematical methods and passed all filters but some characteristics of payment look like payments that were considered as fraudulent. |
Fraud-list from bank | 20 | Payment is considered as fraudulent due to fraud-lists from bank. |
Blocked phone | 19 | Fraud-status was determined by corresponding to the filter on customer phone number. |
Limit restrictions | 21 | Fraud-status is set in accordance with the limit (based on aggregated payments for a certain period) for the merchant, external system or the payment application. |
1 these reasons can be specified when there is not more specific reason for the fraud-status determination, for example, blocked card. |
After receiving the fraud-status from SOFI the external system should make a decision to block or to proceed the payment further. The result of payment processing within the external system is provided to SOFI as a payment status. All possible payment statuses are listed in the table below.
Payment statuses to be provided to SOFI
Status | Name | Code | Description |
Successfully authorized | Approved | 1000 | Payment successfully authorized. |
Failed payment | Failed | 1001 | Payment failed (system error) due to any technical reasons (for example: no internet connection to the processing centre; technical issues with payment processing on the external system and so on...). |
Blocked online | BlockedOnLine | 1002 | Rejected on-line before authorization due to not technical reasons (for example: in case when card-holder rejects the purchase; payment characteristics don't fit to the merchants' limits; the payment timeout has been expired and so on ...). |
Not authorized due to fraud | FraudDeclined | 1003 | Rejected on-line by results of authorization (fraud reasons) i.e. payment data were transmitted to the processing center or acquiring bank, which declined the payment due to a fraud reason. The same status is also given if the external system has identified the fraud via own tools and canceled the payment before authorization. |
Not authorized | Declined | 1004 | Rejected on-line by results of authorization (not fraud reasons), i.e. processing center is not processed the payment due to some not fraudulent reason (for example, if there are insufficient funds on the payer's account; an incorrect CSC code were entered and so on, or if the cause is not known). |
Canceled due to fraud (SOFI) | FraudCanceled | 1005 | Rejected after authorization by fraud reasons, i.e. if SOFI system has identified payment as fraudulent after authorization. |
Canceled | Canceled | 1006 | Rejected after authorization (for example, when the money refund is performed). |
Blocked online due to fraud (SOFI) | FraudBlockedOnLine | 1007 | Rejected on-line before authorization by fraud reasons, when SOFI has detected the fraud. |
Canceled due to fraud | FraudCanceled | 1008 | Rejected after authorization by fraud reasons, external system (bank, interior ministry etc.) has identified payment as fraudulent after authorization. |
When external system decided to proceed the payment authorization and status 'Approved' had been sent to SOFI, a fraud-status in SOFI can be changed (later) by expert or during fraud-chain analysis. SOFI will notify the external system about the change through the notification interface.
Scenario for interaction between SOFI and external system is shown on the picture below.
Scenario for interaction between SOFI and external system