|Worldpay AVS Question|
- how do you check further?
I'm pretty new to Worldpay and haven't used it for very long but managed to get a small order this morning with this little problem... -
WorldAlert result: WARNING
This transaction has been identified as potentially high risk. We strongly recommend further checks before fulfilment of an order....
Now, looking at my Worldpay Admin server it says the following as the customer is in Canada (Worldpay obviously doesn't do an AVS check on people from Canada!)
security code comparison - 0 (not supported)
postcode comparison - 1 (not checked)
address comparison - 1 (not checked)
card issue country/contact country comparison - 4 (not matched)
Is there any way I can check if this card matches the customers address etc WITHOUT having to contact the customer?
DONT SUPPLY IT.
If the Country code does not match there is a serious error. Neither can WorldPay check the other details - they always come back as not supported or not checked as they cannot be checked - they are trying to get the details from the wrong bank, their details will not be there.
Not 100%, but try infobel.com to help double check. Try an IP trace site, see if the source IP was from Canada or not (if you are not logging IP numbers with your order system, change it so it does).
One more trick, ring them. Hang up. You may find that the number does not even exist or is constantly an answer machine.
>>looking at my Worldpay Admin server it says the following
>>as the customer is in Canada
but the IP address used is not (or probably not) canadian, hence the 4 (not matched).
that is a definite "do not supply".
you'll probably find
check UK addresses etc at www.192.com - it's worth paying for. you also get the electoral roll etc there.
check addresses etc for other countries from infobel.com (reverse searches on phone numbers also available on infobel.com for USA)
if infobel doesn't do the country you need to check out, just search on a search engine for "white pages" plus the country name
check IP addresses at www.ripe.net or download an IP address checking script and use it in your callback
search on google and fast for the names / addresses / postcodes / email addresses etc that are given with the order - you might find them listed somewhere
join merchant911.org and early-warning.org.uk - other users will post their frauds to the lists so you can check against the lists. if you get a fraudulent order, post the details to the list yourself to help others out.
lots more you can do but no time to tell all .... just got time to tell you to switch over to pre-auth if you haven't already - you only complete genuine transactions, if you get a fraud you just ignore it, no money taken from the card, no transaction costs, no chargeback risk.
I had to deal with this sort of stuff at a past job of mine...
When a canada order came up I would call the credit card company merchant services number and tell them the account number of the card, they would then give me the phone number of the issuing bank.
Then all you have to do is call the bank and ask them to verify the account & address.
It usually works, but sometimes you run into trouble with individual bank policies.
Simply ask for a Code 10 check for your transaction to
They will check AVS manually for you. They will tell you whether the name and address on the credit card matches that of the invoice address. This request may take anywhere from 1 - 7 days.
In our experience, transactions that carry this sort of warning are highly likely to be fraudulent. In most cases, a hacker would have used the downloaded credit card details from a US person for shipment to a developing country in SE Asia, Eastern Europe and Latin America.
The only exceptions are the following which often turns out to be genuine
1. Persons residing in New Zealand often uses a credit card issued by an Australian bank
2. Persons residing in Canada or Puerto Rico often uses a credit card issued by a US bank
2. Persons residing in Ireland often uses a credit issued by a UK bank.
This bank holiday weekend my new tiny little store was hit by some nasty evil fraudsters... same IP addresses yet one minute they live in the USA, next in Manchester, England!
Makes me sick people can do this. But it's my own fault for not getting pre-auth set-up on Worldpay soon enough (this has now been requested....)
Derek, the Code10 check is a good idea (amazing that Worldpay have never told me this) - but with pre-auth you only have 5 days to process the transaction so if they can take up to 7 days it wouldn't be so great.
Has anyone noticed that Worldpay doesn't seem to do AVS checks on USA credit cards like the address comparison or Postcode. It does do the security (on some) and card issue country/contact country comparison. Or am I hopelessly wrong on that?
Hi, Worldpay will not check AVS for US banks. Actually, most Code10 results are returned within 48 hours. If they are not you should check the local telephone directory to see whether a person with such a name exists at such an address. This can be done easily for US residents by using Google. You can simply type the name of the person and the town he resides in, or just the telephone number. If that person is registered in their local telephone, it will show up in the search results.
Thanks Derek. I sent you a sticky mail ;)