| What are AVS/CVV2 and how do I configure them? |
Bluefin Gateway supports both AVS (Address Verification System) and CVV2 (Card Verification Value) screening.
AVS is a standard credit card processing protocol to verify the name, address, and ZIP code of the credit card user.
CVV2 is a widely-used security feature supported by most credit cards. The CVV2 number is the last 3 digits after the credit card number located on the back of a Visa, Mastecard, Discover Card, or 4 digits on the front of an American Express.
By entering these extra digits when making an online purchase, you can significantly reduce fraud by being nearly positive that the user is actually holding the credit card at the time of the order. Both AVS and CVV2 settings are fully customizable in the Bluefin Gateway.
When a transaction is approved by your bank network, but replies with an AVS or CVV2 code that you have not chosen to accept, the transaction will automatically be refunded.
- Refunded AVS failures are marked BAD ADDRESS on the transaction list
- Refunded CVV2 failures are marked BAD CVV2 on the transaction list
Note: Because AVS and CVV2 are performed after the authorization, funds may be held until batch settlement time.
Note If the transaction fails AVS or CVV2, the BAD ADDRESS or BAD CVV2 message will appear in the Virtual Terminal or Payment form so customers can correct the error.
To change AVS Settings:
- Choose FRAUD CONTOLS, Click AVS/CVV2
- Click the CONFIGURE button next to STEP 1: AVS
- By default, Blue Financial Corporation sets AVS to DFJMQVXYLWZABOP, which indicates that transactions where either the ZIP, Address, or both ZIP and Address match, the transaction will be approved. All other transactions will be voided.
Here is a list of all the possible settings for AVS on the system, which affect US Addresses and Zip codes:
DFJMQVXY - Address and ZIP code match
LWZ - ZIP code match, address is wrong
ABOP - Address match, ZIP code is wrong
KN - No match, address and ZIP code are wrong
U - No data from issuer/banknet switch
R - System unable to process
S - Address verification not supported
E - Error, AVS not supported for your business
? - Unrecognized (none of the above) response codes
_ - No AVS data (_ or blank space or null)
The system also supports certain responses for European addresses, generally in the UK and other parts of the European Union. More countries are compatible with this system each month. Here are the settings that can be configured for these countries:
C - (International) Invalid address and ZIP format
I - (International) Address not verifiable
G - (International) Global non-verifiable address
- Change the settings to suit your needs.
- Select Accept when you are done and the window will close.
- Go to Step 4 and Click APPLY to confirm the changes.
|
To change CVV2 Settings:
- Choose FRAUD CONTROLS, Click AVS/CVV2
- Click the CONFIGURE button next to STEP 2: CVV2
- By default, Blue Financial Corporation sets CVV2 to SUMP_, which means these responses will result in approved transactions:
S - Card has CVV2, customer says it doesn't.
M - CVV2 match.
P - CVV2 not processed.
U - No CVV2 data from issuer.
_ - No CVV2 data.
Other settings you can add or subtract are:
N - CVV2 does not match.
- Change the settings to suit your needs.
- Click Accept when you are done and the window will close.
- If you want to make sure that CVV2 is always required, check the box labelled "Require CVV2 entry on payment form"
- Go to Step 4 and click APPLY to confirm the changes.
Approval Logic:
Bluefin Gateway will approve the AVS/CVV2 responses based on your configuration set therein. It is important to note the logic behind the way that AVS/CVV2 work together.
Bluefin Gateway allows you to choose whether AVS/CVV2 work in an "AND" fashion or in an "OR" fashion. This means, whether you will require BOTH AVS "AND" CVV2 to be positive, or if you will accept either AVS "OR" CVV2 as postive.
To congifure this, goto Step 3 and select: Approve transactions that match either AVS or CVV2
(The default is to require both AVS and CVV2 to match. Check this box to enable the OR functionality which will allow either positive to make the transaction go through)
If this option is selected..
- An "M" (match) CVV2 code, regardless of AVS will be approved.
- An AVS code macthing the above selection, regardless of CVV2 will be approved.
NOTE: Some issuers may decline all transactions with invalid CVV2, regardless of this option.
(Please note this value is also called: Card Verification Value, Card Validation Value, CID, CVV2, CVC, CVV)
|
