Cardholder personalization
Rules
The following table provides information about cardholder personalization rules.| Rule Name | Rule Description |
|---|---|
MQ_CardholderAttemptedAuthTxnCountLast24HoursOver10 | Cardholder velocity on the attempted authorization transaction count. Rule triggers when the cardholder attempts more than 10 authorization transactions within a 24-hour period. This rule uses the MQ_CardholderAttemptedAuthTxnCountLast24Hours feature. |
MQ_CardholderTotalAttemptedAuthTxnAmountLast24HoursOver3000 | Cardholder velocity on the attempted authorization transaction amount. Rule triggers when the total amount associated with all attempted transactions by the cardholder within a 24-hour period is over 3000 units of the transaction currency. This rule uses the MQ_CardholderTotalAttemptedAuthTxnAmountLast24Hours feature. |
MQ_CardholderTotalApprovedMoneyOutTxnAmountLast24HoursOver3000 | Cardholder velocity on the approved money-out transaction amount. Rule triggers when the total amount associated with all approved money-out transactions by the cardholder within a 24-hour period is over 3000 units of the transaction currency. Money-out authorization transaction types include: - account.funding.auth_plus_capture- account.funding.authorization- authorization- authorization.atm.withdrawal- authorization.cashback- authorization.incremental- authorization.quasi.cash, pindebit- pindebit.atm.withdrawal- pindebit.authorization- pindebit.cashback- pindebit.quasi.cashThis rule uses the MQ_CardholderTotalApprovedMoneyOutAuthTxnAmountLast24Hours feature. |
MQ_CardholderTotalApprovedRefundTxnAmountLast24HoursOver3000 | Cardholder velocity on the approved refund transaction amount. Rule triggers when the total amount associated with all approved refund transactions by the cardholder within a 24-hour period is over 3000 units of the transaction currency. Refund transaction types include: - refund- refund.authorization- pindebit.refundThis rule uses the MQ_CardholderTotalApprovedRefundTxnAmountLast24Hours feature.Note: This rule will trigger on all authorization transactions if the cardholder has more than 3000 units of the transaction currency in the approved refund transaction amount within a 24-hour period. |
MQ_CardholderTotalApprovedMoneyInTxnAmountLast24HoursOver3000 | Cardholder velocity on the approved money-in transaction amount. Rule triggers when the total amount associated with all approved money-in transactions by the cardholder within a 24-hour period is over 3000 units of the transaction currency. Money-in transaction types include: - original.credit.auth_plus_capture- original.credit.authorization- gpa.credit.networkloadThis rule uses the MQ_CardholderTotalApprovedMoneyInAuthTxnAmountLast24Hours feature. |
MQ_CardholderTotalApprovedATMTxnAmountLast24HoursOver1000 | Cardholder velocity on the approved ATM withdrawal transaction amount. Rule triggers when the total amount associated with all approved ATM transactions by the cardholder within a 24-hour period is over 1000 units of the transaction currency. This rule uses the MQ_CardholderTotalApprovedATMTxnAmountLast24Hours feature. |
MQ_CardholderTotalApprovedQuasiCashTxnAmountLast24HoursOver1000 | Cardholder velocity on the approved quasi-cash transaction amount. Rule triggers when the total amount associated with all approved quasi-cash transactions by the cardholder within a 24-hour period is over 1000 units of the transaction currency. Quasi-cash transaction types include: - authorization.quasi.cash- pindebit.quasi.cashThis rule uses the MQ_CardholderTotalApprovedQuasiCashTxnAmountLast24Hours feature. |
MQ_CardholderDeclinedTxnCountLast24HoursOver10 | Cardholder velocity on declined transaction count. Rule triggers when the total count associated with all declined transactions by the cardholder within a 24-hour period is over 10. This rule uses the MQ_CardholderDeclinedTxnCountLast24Hours feature. |
MQ_CardholderDeclinedCashAccessTxnCountLast24HoursOver3 | Cardholder velocity on declined cash access transaction count. Rule triggers when the total count associated with all declined cash access transactions by the cardholder within a 24-hour period is over 3. This rule uses the MQ_CardholderDeclinedCashAccessTxnCountLast24Hours feature. |
MQ_CardholderAttemptedCNPAuthTxnCountLast24HoursOver10 | Cardholder velocity on the attempted card-not-present transaction count. Rule triggers when the cardholder attempts more than 10 card-not-present authorization transactions within a 24-hour period. This rule uses the MQ_CardholderAttemptedCNPAuthTxnCountLast24Hours feature. |
Features
The following table provides information about cardholder personalization features.| Feature Name | Feature Description |
|---|---|
MQ_CardholderAttemptedAuthTxnCountLast24Hours | Stores the transaction count associated with all attempted authorization transactions by the cardholder in the last 24 hours. Used by the MQ_CardholderAttemptedAuthTxnCountLast24HoursOver10 rule. |
MQ_CardholderTotalAttemptedAuthTxnAmountLast24Hours | Stores the total transaction amount associated with all attempted authorization transactions by the cardholder in the last 24 hours. Used by the MQ_CardholderTotalAttemptedAuthTxnAmountLast24HoursOver3000 rule. |
MQ_CardholderTotalApprovedMoneyOutAuthTxnAmountLast24Hours | Stores the total transaction amount associated with all approved money-out authorization transactions by the cardholder in the last 24 hours. Used by the MQ_CardholderTotalApprovedMoneyOutTxnAmountLast24HoursOver3000 rule. |
MQ_CardholderTotalApprovedRefundTxnAmountLast24Hours | Total transaction amount associated with all approved refund transactions by the cardholder in the last 24 hours. Used by the MQ_CardholderTotalApprovedRefundTxnAmountLast24HoursOver3000 rule. |
MQ_CardholderTotalApprovedMoneyInAuthTxnAmountLast24Hours | Stores the total transaction amount associated with all approved money-in transactions by the cardholder in the last 24 hours. Used by the MQ_CardholderTotalApprovedRefundTxnAmountLast24HoursOver3000 rule. |
MQ_CardholderTotalApprovedATMTxnAmountLast24Hours | Stores the total transaction amount associated with all approved ATM withdrawal transactions by the cardholder in the last 24 hours. Used by the MQ_CardholderTotalApprovedATMTxnAmountLast24HoursOver1000 rule. |
MQ_CardholderTotalApprovedQuasiCashTxnAmountLast24Hours | Stores the total transaction amount associated with all approved quasi-cash transactions by the cardholder in the last 24 hours. Used by the MQ_CardholderTotalApprovedQuasiCashTxnAmountLast24HoursOver1000 rule. |
MQ_CardholderDeclinedTxnCountLast24Hours | Stores the transaction count associated with all declined authorization transactions by the cardholder in the last 24 hours. Used by the MQ_CardholderDeclinedCashAccessTxnCountLast24HoursOver3 rule. |
MQ_CardholderDeclinedCashAccessTxnCountLast24Hours | Stores the transaction count associated with all declined cash access transactions by the cardholder in last 24 hours, such as cashback, quasi-cash, and ATM transactions. Used by the MQ_CardholderDeclinedCashAccessTxnCountLast24Hours rule. |
MQ_CardholderAttemptedCNPAuthTxnCountLast24Hours | Stores the transaction count associated with card-not-present transactions by the cardholder in the last 24 hours. Used by the MQ_CardholderAttemptedCNPAuthTxnCountLast24HoursOver10 rule. |
Common fraud characteristics
Rules
The following table provides information about common fraud characteristics rules.| Rule Name | Rule Description |
|---|---|
MQ_SmallValueTxnFollowedByLargeValueTxnWithin10Mins | Low-value transaction, followed by a high-value transaction. Rule triggers when a low-value transaction is followed by a high-value transaction within 10 minutes. This rule uses the MQ_LastSmallValueTxnTimeStamp feature. |
MQ_CardholderAttemptedConsecutiveSmallerAmtTxnsLast2HoursOver3 | Progressively smaller authorization attempts. Rule triggers when at least three consecutive transactions with progressively smaller amounts are attempted by the cardholder in a two-hour period. This rule uses the MQ_CardholderAttemptedAuthTxnAmountsLast2Hours and MQ_MaxConsecutiveSmallerAmountTxnLast2Hours features. |
MQ_CardholderAttemptedConsecutiveSameAmtTxnsLast2HoursOver3 | Same amount transactions. Rule triggers when at least three consecutive transactions for the same amount are attempted by the cardholder within a two-hour period. This rule uses the MQ_CardholderAttemptedAuthTxnAmountsLast2Hours and MQ_MaxConsecutiveSameAmountTxnLast2Hours features. |
MQ_CardholderAttemptedConsecutiveRoundAmtTxnsLast2HoursOver3 | Transactions in round amounts. Rule triggers when at least three consecutive transactions with round amounts are attempted by the cardholder within a two-hour period. This rule uses the MQ_CardholderAttemptedAuthTxnAmountsLast2Hours and MQ_MaxConsecutiveRoundAmountTxnLast2Hours features. |
MQ_TxnWithHighTxnRiskScore | Transaction with a network risk score above 90. Rule triggers when the transaction has a network transaction risk score above 90. |
Features
The following table provides information about common fraud characteristics features.| Feature Name | Feature Description |
|---|---|
MQ_LastSmallValueTxnTimeStamp | Stores the timestamp associated with the last low-value (less than five) transaction conducted by the cardholder. Used by the MQ_SmallValueTxnFollowedByLargeValueTxnWithin10Mins rule. |
MQ_CardholderAttemptedAuthTxnAmountsLast2Hours | Stores transaction amounts associated with all attempted authorization transactions by the cardholder in the last two hours. Used by the MQ_CardholderAttemptedConsecutiveSmallerAmtTxnsLast2HoursOver3 rule. |
MQ_MaxConsecutiveSmallerAmountTxnLast2Hours | Returns the maximum count of progressively smaller amount consecutive transactions attempted by the cardholder in the last two hours. Used by the MQ_CardholderAttemptedConsecutiveSmallerAmtTxnsLast2HoursOver3 rule. |
MQ_CardholderAttemptedAuthTxnAmountsLast2Hours | Stores transaction amounts associated with all attempted authorization transactions by the cardholder in the last two hours. Used by the MQ_CardholderAttemptedConsecutiveSameAmtTxnsLast2HoursOver3 rule. |
MQ_MaxConsecutiveSameAmountTxnLast2Hours | Returns the maximum count of consecutive same-amount transactions attempted by the cardholder in the last two hours. Used by the MQ_CardholderAttemptedConsecutiveSameAmtTxnsLast2HoursOver3 rule. |
MQ_CardholderAttemptedAuthTxnAmountsLast2Hours | Stores transaction amounts associated with all attempted authorization transactions by the cardholder in the last two hours. Used by the MQ_CardholderAttemptedConsecutiveRoundAmtTxnsLast2HoursOver3 rule. |
MQ_MaxConsecutiveRoundAmountTxnLast2Hours | Returns the maximum count of consecutive round-amount transactions attempted by the cardholder in the last two hours. Used by the MQ_CardholderAttemptedConsecutiveRoundAmtTxnsLast2HoursOver3 rule. |
Fraud attack
Rules
The following table provides information about fraud attack rules.| Rule Name | Rule Description |
|---|---|
MQ_SameAmountCNFDeclineTxnCountAtMerchantLast1HourOver20 | Potential BIN attack. Rule triggers when there have been more than 20 card-not-found declines for the same transaction amount at the merchant within a one-hour period. This rule uses the MQ_SameAmountCNFDeclineTxnCountAtMerchantLast1Hour feature. |
MQ_CNFDeclineTxnCountOver50PercentApprovedTxnCountLast1Hour | Potential BIN attack. Rule triggers when the card-not-found transaction declines are over 50% of the total approved transactions at the merchant within a one-hour period. This rule uses the MQ_CNFDeclineTxnCountAtMerchantLast1Hour and MQ_ApprovedTxnCountAtMerchantLast1Hour features. |
MQ_HighValueTxnWithin30MinsOfCardCreation | Account takeover fraud. Rule triggers when a high-value transaction (over 500 units of the transaction currency) is attempted by the cardholder within the first 30 minutes of card creation. |
MQ_HighValueTxnWithin30MinsOfCardModification | Account takeover fraud. Rule triggers when a high-value transaction (over 500 units of the transaction currency) is attempted by the cardholder within 30 minutes of card modification. |
MQ_HighValueTxnWithin30MinsOfTokenProvisioning | Account takeover fraud. Rule triggers when a high-value transaction (over 500 units of the transaction currency) is attempted by the cardholder within 30 minutes of token provisioning. |
MQ_HighValueTxnWithin30MinsOfUserModification | Account takeover fraud. Rule triggers when a high-value transaction (over 500 units of the transaction currency) is attempted by the cardholder within 30 minutes of user modification. |
Features
The following table provides information about fraud attack features.| Feature Name | Feature Description |
|---|---|
MQ_SameAmountCNFDeclineTxnCountAtMerchantLast1Hour | Stores the count of card-not-found declines at a merchant for same transaction amount in the last hour. Used by the MQ_SameAmountCNFDeclineTxnCountAtMerchantLast1HourOver20 rule. |
MQ_CNFDeclineTxnCountAtMerchantLast1Hour | Stores the count of card-not-found declines at a merchant in the last hour. Used by the MQ_CNFDeclineTxnCountOver50PercentApprovedTxnCountLast1Hour rule. |
MQ_ApprovedTxnCountAtMerchantLast1Hour | Stores the count of approved transactions at a merchant in the last hour. Used by the MQ_CNFDeclineTxnCountOver50PercentApprovedTxnCountLast1Hour rule. |
Merchant characteristics
Rule
The following table provides information about the merchant characteristics rule.| Rule Name | Rule Description |
|---|---|
MQ_HighCountOfTxnsByCardholderAtMerchantLast5Seconds | Transaction count at the merchant. Rule triggers when there have been at least three approved transactions at a particular merchant for a cardholder within a five-second period. This rule uses the MQ_CardholderApprovedTxnCountAtMerchantLast5seconds feature. |
Feature
The following table provides information about the merchant characteristics feature.| Feature Name | Feature Description |
|---|---|
MQ_CardholderApprovedTxnCountAtMerchantLast5seconds | Stores the approved transaction count at a merchant by the cardholder within five seconds. Used by the MQ_HighCountOfTxnsByCardholderAtMerchantLast5Seconds rule. |
Point of sale characteristics
Rule
The following table provides information about the point-of-sale characteristics rule.| Rule Name | Rule Description |
|---|---|
MQ_PanEntryModeMANUALOrCHIP_FALLBACK | Rule triggers when the authorization transaction has a PAN entry mode of MANUAL or CHIP_FALLBACK. |
Payment channel characteristics
Rules
The following table provides information about payment channel characteristics rules.| Rule Name | Rule Description |
|---|---|
MQ_HighValueEcommerceTxn | Ecommerce transaction. Rule triggers when there is an ecommerce transaction for over 3000 units of the transaction currency. |
MQ_HighValueCNPTxn | Card-not-present (CNP) transaction. Rule triggers when there is a card-not-present transaction for over 3000 units of the transaction currency. |
MQ_HighValueRecurringTxn | Recurring transactions. Rule triggers when there is a recurring transaction for over 500 units of the transaction currency. |
MQ_HighValueMOTOTxn | Mail order/telephone order (MOTO) transactions. Rule triggers when there is a MOTO transaction for over 500 units of the transaction currency. |
Rule suppression
Feature
The following table provides information about the rule suppression feature.| Feature Name | Feature Description |
|---|---|
MQ_RuleSuppressionEnabled | Dynamically suppress rules. You can use the MQ_RuleSuppressionEnabled boolean flag with any existing rule, and can leverage the boolean flag to check if rule suppression is enabled for the cardholder. |