Fraud & Risk Management
Effectively enhance fraud detection
With this section you will get a good understanding of FRM, it's need, use cases, architecture and steps to integrate it in your system.
The Hyperswitch Fraud and Risk Management (FRM) platform offers a comprehensive Unified API designed to cater to your specific payment validation needs, effectively enhancing fraud protection within your payment ecosystem.
Benefits
Processor-Agnostic Integration: Single API connect lets you seamlessly connect with an FRM solution of choice.
Customized Fraud Strategies: Enables users to adjust fraud prevention measures by allowing them to select between Pre-Auth and Post-Auth checks based on specific payment methods and connectors.
Unified Dashboard: A consolidated interface that displays all flagged transactions, making decision-making on potential frauds a breeze.
Real-Time Alerts: Immediate notifications are sent when potential fraudulent activity is detected, ensuring quick action and minimal losses.
Insightful Analytics: Detailed reports on fraud patterns help inform decisions and strategy adjustments.
Use cases
Below are few sample FRM use cases
Online Marketplaces: Secure transactions on e-commerce platforms like Amazon or eBay, regardless of payment methods or processors. Benefit from chargeback guarantees, dispute resolution, account security, real-time fraud alerts, and streamlined fraud investigation tools.
High-Value Transactions: Protect high value orders in luxury retail, or high-end custom services. Ensure payment validity, prevent chargebacks, optimize PSD2 compliance, reduce transaction friction, gain valuable fraud trend insights, and utilize predictive fraud analysis.
Overview
You can enable the FRM solution of your choice with few clicks and very minimal code changes. Below are the two scenarios in which FRM can be activated through Hyperswitch.
Prerequisite
You should possess payment method information
You will have to signup with an FRM solution provider and get the API keys
Pre-Authorization Flow
In the PreAuth flow, the FRM solution is invoked before authorizing a payment with your payment processor. When a customer attempts to make a payment, the transaction details are sent to the FRM solution for analysis. The FRM solution assesses the risk associated with the transaction based on various parameters such as the customer's historical behaviour, transaction patterns, location, device information, and any other relevant data. It then provides a risk score or recommendation. Based on the risk score or recommendation, one can decide whether to proceed with the transaction, decline it, or take additional verification steps to ensure its legitimacy. The goal is to prevent potentially fraudulent transactions from being authorized in the first place.
Possible actions based on the status
Continue on Accept : Continue with the transaction.
Halt on Decline : Mark the transaction as cancelled.
Post-Authorization Flow
In the PostAuth flow, the FRM solution is called into action after the authorization has been completed by the payment processor. Once the transaction is authorized, the details are sent to the FRM solution for a second layer of validation. The FRM solution re-evaluates the transaction using the latest data available and cross-references it with historical patters and known fraud indicators. The PostAuth flow acts as a safety net to catch any suspicious or fraudulent transactions that might have slipped through during the PreAuth flow. If the FRM solution identifies a transaction as potentially fraudulent during the PostAuth flow, it is flagged for manual review. Manual review requires human intervention for either accepting or rejecting the payment. If accepted, the amount is captured by the payment processor. If rejected, the transaction is voided.
Possible actions based on the status
Continue on Accept : Continue with the transaction.
Halt on Decline : Mark the transaction as cancelled.
Approve / Decline on Review :
Hold the txn in manual review state. Merchants can list and review such transactions.
If approved, payment is captured
If declined, payment is voided
Note : If the connector doesn’t support manual capture, Post-Authorization manual review should be avoided during configuration setup for the respective connector.
Supported FRM Processors
Signifyd / Riskified
PreAuth
PostAuth
Cancel Transactions
Flag for Manual Review
Guaranteed Fraud Protection
Complete Chargeback Protection
Auth Rate Conversions
If your FRM processor of choice is not available in the above list, please put a new features request here.
FRM status and decisions
FRM connectors generally provide a decision based on rules / data models along with a risk score associated with the transaction. Some integrations require providing the model to be used explicitly. For example, Signifyd can be configured to respond with only scores, or decision + scores, etc. Fraud detection can be done via below methods
Rules: Uses static set of rules for deciding on the outcome
Scores: Uses a range of number for associating risk with the transaction
Decisions/recommendations: Uses ML data models for predicting and recommending the outcome
Chargeback guarantee: Uses ML data models for responding with a binary outcome (Accept vs Decline)
Currently, HyperSwitch offers only a single way of integrating with the underlying FRM connector.
Signifyd : Decision/Recommendation
Riskified : chargeback guarantee
How to get started?
Step 1: Log in to your Hyperswitch account.
Step 2: Navigate to the 'Fraud & Risk' tab and select the FRM processor you want to integrate.
Step 3: Configure payment methods and preferred actions for the enabled payment methods.
Step 4: Provide API credentials for the FRM processor.
Step 5: Once set up, head to the API Docs to integrate the FRM API and start testing payments with fraud checks.
FAQs
What are the prerequisites for integrating with the Hyperswitch FRM platform? Depending on the FRM processor of your choice, you may need to pass additional parameters regarding order fullfilment as a webhook to Hyperswitch. Please refer to the section here for more details.
Can I adjust my fraud prevention measures based on specific payment methods and connectors? Yes, the Hyperswitch FRM platform allows you to customize your fraud prevention measures by selecting between pre-authorization and post-authorization checks for each payment method for a processor and the corresponding action to be taken.
Last updated