Using CyberSource Decision Manager for Fraud Management

CyberSource provides a configurable advanced fraud management solution called Decision Manager, which integrates into the NetSuite order management workflow. When setting up your CyberSource credit card gateway profile in NetSuite, you can specify if you want the gateway to work with the Decision Manager features and services you subscribe to in your CyberSource account. You can use Decision Manager for internal (MOTO) orders, Web store orders, or both. You then use Decision Manager to screen, review, and resolve orders with potentially fraudulent payment information, along with Decision Manager analytics for advanced reporting.

Accounts that use third party Web stores and connect to NetSuite using SOAP web services can also use CyberSource Decision Manager to manage credit card fraud. For more information, see Set Up Decision Manager for SOAP Web Services Orders.

Use CyberSource Decision Manager to set up the level of fraud management you want for your business. Managing potential credit card fraud efficiently reduces lost revenue, improves order fulfillment timing, and reduces the staff time required to screen orders.

CyberSource Decision Manager services include:

• Global Validation Tests

  • Device Fingerprinting

  • Velocity monitoring

  • IP Geolocation

  • Multi-merchant transaction histories/shared data

  • Global telephone directories

  • Global delivery address verification services

  • Positive and negative lists

  • AVS (card association address verification)

  • Verified by Visa, MasterCard, SecureCode

  • CVV2, CVC2, CID (verification of 3 or 4 digit verification number on card)

• Business Management Rules

  • Create and modify rules on demand

  • No IT coding required

  • Passive mode to test rules before going live

• Case Management System

  • Automated case ownership and priority assignment

  • Automated queue SLA Management

  • Review Dashboard with in-line validation

More information about CyberSource Decision Manager is available at http://www.cybersource.com/resources/collateral/Resource_Center/service_briefs/risk_svcs_overview_datasheet.pdf.

Device Fingerprinting

Enable Device Fingerprinting along with CyberSource Decision Manager to capture a digital fingerprint of the device used to place a order in your Web store. Device fingerprinting, in conjunction with order and payment information, helps determine if the computer placing the order is considered trustworthy. This evaluation lets you distinguish between valuable customers and online fraudsters to minimize chargebacks and losses due to payment fraud.

Gathering a device fingerprint does not capture any personal information from the shopper. When a shopper submits an order, the credit card authorization request sent to CyberSource includes device characteristics which are analyzed in real-time for risky device behavior. Decision Manager uses rules you define along with other analytics to decide whether to authorize the order payment and returns an Accept/Reject/Review decision for the sales order to NetSuite.

The following illustrates the benefit of using Device Fingerprinting.

NetSuite + Decision Manager	NetSuite + Decision Manager with Device Fingerprinting
A new customer places a Web store order for a LCD television, shipped overnight with a billing address in the US and a different shipping address in the US.	A new customer places a Web store order for a LCD television, shipped overnight with a billing address in the US and a different shipping address in the US.
All AVS and CSC information match.	All AVS and CSC information match. A hidden proxy is detected obscuring the fact that the device is located in China.
Credit card payment is authorized. In NetSuite, the order advances to Pending Fulfillment status in the order management workflow.	Credit card payment is authorized but the order is flagged for review. In NetSuite, the order is placed on Payment Hold for review and final decision.

To use Device fingerprinting, complete the setup steps in NetSuite and in Decision Manager:

• In NetSuite, for the CyberSource Credit Card Processing Profile, enable the Web Store Orders (E-Commerce) feature and the Enable Device Fingerprinting preference for Decision Manager. See Set Up CyberSource Decision Manager.

• In CyberSource, set up Decision Manager to incorporate device fingerprint information in order verification. Refer to CyberSource account documentation for more information.

• For SuiteCommerce Advanced sites, customize your web store application to call the getDeviceFingerPrintingHtml() API. See Device Fingerprinting.

Identifying High Fraud Risk Items

If you use the Send Purchase Card Data feature, you can identify NetSuite inventory items that are at the highest risk of fraudulent transactions. For more information on this feature, see Using the Purchase Card Data Module.

To set the fraud risk for an item, you first customize the item record form to include the Fraud Risk field.

To add the Fraud Risk field to the item record:

1. Open a new item record.

2. In the upper right corner of the form, click Customize, and select Customize Form.

3. Click the Fields subtab.

4. Click the Sales/Pricing subtab.

5. Check the box in the Show column next to Fraud Risk.

6. Save the form.

Then, update your inventory item records and set the fraud risk. To do this, edit the item record. In the Fraud Risk field, select the level of risk for this item.

When you configure the CyberSource Decision Manager, you can consider fraud risk in determining whether a transaction is fraudulent.

Populating Level III Data in the Request Details

If you use a CyberSource processing profile with Decision Manager enabled, line-level item data is populated in the request NetSuite sends to the gateway. For more information, see Populating Level III Item Data with CyberSouce Decision Manager.

Related Topics:

Payment Card Number Security and Compliance

Setting Up Customer Credit Card Soft Descriptors

Populating Level III Item Data with CyberSouce Decision Manager

Accepting Credit Card Payments

Maintaining Recurring Credit Card Payments

Managing Payment Holds

Viewing Customer Credit Card Transactions

Setting Up Customer Credit Card Processing

Transitioning to a New Gateway and Disabling the Old Gateway

Credit Card Processing Gateway FAQ

Customer Credit Card Processing

General Notices