Risk filter

Plans supporting this feature: Pay Prime Growth Scale

Overview

You can define your own risk filters to prevent fraudulent or risky transactions from taking place, and to help avoid costly chargebacks. Risk filters are your fraud prevention layer: you decide which transaction patterns to allow, flag, block, or challenge with extra authentication — without any manual review.

How risk filters work

A risk filter consists of one or more rule sets. Each rule set has:

• Conditions: the transaction details to check, such as card country, amount, or currency.

• A match type: whether ANY or ALL of the conditions must apply.

• An action: what happens when the conditions match: Allow, Flag, Block, Require SCA (Strong Customer Authentication) - with challenge, or Nothing.

You can combine as many conditions as you need, across fields such as amount, card country, requester country, currency, card type, acquirer, transaction type, payment type, and more. The filter options available depend on the field you choose.

Examples

• Block all cards issued outside the EU — set Card country to a list of non-EU countries and choose the action Block.

• Require corporate cards to complete strong authentication — set Corporate card to match, and choose the action Require SCA (Strong Customer Authentication) - with challenge.

• Flag transactions where the cardholder's country doesn't match the requester's country — set Not same country to match, and choose the action Flag.

Set up a risk filter

1. Navigate to Configurations → Checkout management → Risk filter.
      

2. Add your first rule set: Create a new rule set to hold your conditions and action.
      

3. Name and Description: Give the rule set a clear, descriptive name and a short description of what it does — for example, name block_non_eu_cards, description "Blocks all card payments issued outside the EU."

4. Conditions: Choose which transaction details to check. Common fields include:

   Field	What it checks
   Amount	The transaction amount
   Currency of transaction	The currency used for the payment
   Card country	The country where the card was issued
   Requester country	The country the customer is transacting from
   Not same country	Whether the card country and requester country differ
   Corporate card	Whether the card is a corporate or business card
   Card type	The card scheme, e.g. Visa or Mastercard
   Card prefix	The card's BIN/IIN prefix
   Card SCA status	Whether the card supports Strong Customer Authentication
   Strongly authenticated	Whether the transaction itself was strongly authenticated
   3D status	The 3D Secure status of the transaction
   Acquirer	The acquiring bank processing the transaction
   Transaction type	The type of transaction, e.g. purchase or refund
   Payment type	The payment method used, e.g. card or mobile wallet

   Depending on the field you choose, you'll see different filter options — for example, a country field lets you select one or more countries, while the amount field lets you set a threshold.

5. ANY/ALL and action: Choose whether ANY or ALL of your conditions must apply, then pick what happens when they do:

   • Allow — let the transaction through

   • Flag — let it through, but mark it for review

   • Block — stop the transaction

   • Require SCA (Strong Customer Authentication) - with challenge — force an extra authentication step

   • Nothing — take no action

6. Save your rule set once your conditions and action are set.

7. Status: Turn on the Status switch to activate the risk filter.

   Once activated, every matching transaction is evaluated automatically at checkout — you don't need to do anything further.

Manage your rule sets

• To add another rule set, click Add rule set and repeat the steps above.

• To remove a rule set, click the trash icon next to it.