Go to Administration, click on Settings, and then select Fraud.
The Fraud tab allows you to configure your Fraud Settings for Qualpay Products. The Fraud options that can be configured are Duplicate Transaction Blocking, Transaction Limits, Client IP Address Velocity, and Do Not Disturb. These two features can help prevent a carding attack.
Within the Fraud tab, you can View History of changes, Save Changes, and Reset to the default settings. There are additional fraud settings for Address Verification and Card Verification Values that can be configured in Payment Profiles And Settings.
Duplicate Transaction Blocking
Qualpay will reject a transaction within the duplicate window, regardless of which Qualpay Product is used to process the transactions. Duplicate Transaction Blocking helps prevent your customers from clicking submit multiple times when there is a potential Internet delay in processing. To use Duplicate Transaction Blocking, enter the Duplicate Window (in seconds) for your transactions.
Once the Duplicate Window time frame is set, the following fields can be selected for duplicate blocking:
- Account Number - defaulted on. To remove, click on the checkbox and select Save Changes.
- Transaction Amount - defaulted on. To remove, click on the checkbox and select Save Changes.
- Merchant Reference Number - defaulted off. To add, click on the checkbox and select Save Changes.
- Purchase ID - defaulted off. To add, click on the checkbox and select Save Changes.
Qualpay will reject transactions with amounts less than the minimum or greater than the maximum amount. These limits apply to any Qualpay Product used to process a transaction, except Virtual Terminal payments.
The following fields can be configured for transaction limits:
- Enter a transaction floor in the Reject if transaction amount is less than field and then select Save Changes.
- Enter a transaction ceiling in the Reject if transaction amount is greater than field and then select Save Changes.
Client IP Address Velocity
Qualpay will place a specific IP address in a block list for 24 hours should that IP address exceed the user-specified threshold (attempts) within the configured time frame. This block will persist for 24 hours even if the feature is disabled after the fact.
The following fields can be configured for Client IP Address Velocity:
- Enter the desired timeframe (in seconds) in the Timeframe field.
- Enter the desired threshold (attempts) that the system will allow before placing the IP address in a block list in the Threshold field.
- Select Save Changes.
Note: Client IP Address Velocity only applies to Qualpay Embedded Fields and Qualpay Payment Gateway at this time.
Do Not Disturb
Do Not Disturb will disable your payment processing capabilities for all Qualpay Products during a specified time frame. The Do Not Disturb feature is helpful if you know you will not be processing payments during the set timeframe.
- Specify the start time for the Do Not Disturb feature in the first row labeled From.
- Specific the end time for the Do Not Disturb feature in the second row labeled To.
- Select Save Changes.