5.3. Black, White And Loyalty Lists

Overview

There are 3 types of access control lists, which work as filter checks in Payment Gateway. Lists are being checked while processing the transaction when the respective filter gets applied. BWL screen is designed to manage white, black and loyalty customer lists. This screen is located in “Tools” -> BWL. It makes the process of putting the transactions’ attributes to respective lists faster and easier. It also has quick search which helps to find the exact transaction attribute added previously.

In order to select entries from list, specify project for corresponding lists from dropdown menu.

It is possible to show any specific category from a certain list by clicking it in Category list to the right.

Note

If it is required to migrate from old merchant account to new account, ask GitPay support manager to migrate existing BWL entries.

Black Lists

The first filter checking transaction attributes (email, IP, address, etc) is “Merchant black list”. It is possible to manage these attributes (excluding BIN) from the Order details screen. The attributes can have the following statuses:

• attribute is in black list

• attribute is not in black list

• attribute is in GitPay black list

If any transaction attribute matches attribute in the lists and respective filter is enabled at the Project’s level, the transaction status is set to Filtered and the reason for filtering is saved in the transaction data (see Error Codes in Transaction Filters section in integration documentation).

For blacklisting IP addresses, it is important to note that most customers have dynamic IP which can be possessed by different customers of the same Internet provider. Mobile Internet users change IP address each time a session is created. It is also known that customers using traffic compression services (e.g. Opera Mobile) come via IP address of the proxy server provided by the service, most of which are located in Europe. According to statistics, if IP address is denied for more than 10 hours, the filtering will be in 80% cases false positive. This is why it is not recommended to filter transactions by IP without proper control. It is highly recommended prior to adding IP address into the black list to check with the Internet provider what maximal period of IP address denial can be applied. It is also important to check if the given IP address is in any third-party anti-spam systems.

White Lists

White list allows to skip additional filter checks for transactions with attributes in this list. The only attributes for whitelisting are: a card number and a customer DNA.

Note

If the attribute is found in any white list the third-party fraud control systems’ checks are excluded either.

Loyalty Lists

Loyalty list is designed for merchants who work with the predefined set of customers. Database with customers can be managed on merchant side with PCI DSS certification, or on GitPay side. The system allows to manage the following several types of predefined clients lists such as names, emails, phones and etc.

If any transaction attribute does not match attribute in the lists and respective filter is enabled at the Project’s level, the transaction status is set to Filtered and the reason for filtering is saved in the transaction data (see Error Codes in Transaction Filters section in integration documentation).

One-time box can be checked for automatic removal of customer from loyalty list after their first payment.

Adding New Elements To BWL

To add new elements, click on the button. The type of the added criteria will be automatically identified. Ambiguous criteria type can be manually changed, as presented below. It is also possible to use button to switch between source and destination.

Importing Lists

In order to add many attributes to one of the lists at once, use import list feature.

For example, in order to add card number to list, the following order should be used for every line: (5555514066237247,12,2019) with ‘,’ delimiter between lines.

Some lists require a country code. Full list of country and state codes for lists upload is provided in integration documentation: country codes.

Note

In case of disconnect or other technical problems during the process, contact technical support.

Exporting To File

In order to export your data into CSV file, use export to file feature.

The data will be parsed according to set parameters.

Source card number and Destination card number export will be in 6+4 format. For complete data, please contact the support service.

Available Lists For Every Role

		Merchant
		by Project
		Black	White	Loyal
Source Card	Number
	6+4
	BIN
	Country
	Type
Destination Card	Number
	6+4
	Bin
	Country
	Type
Country	Billing
	IP-Address
Customer	Purpose
	IP-Address
	E-mail
	DNA
Other	E-mail domain
	E-mail + Source Card last 4
	E-mail + Source Card number
	E-mail + Source Card 6+4
	Customer Phone + Source Card number
	Purpose + Source Card number
	DNA + Source Card number

Comments

When adding new records to the BWL lists, optionally, comments can be attached.

When adding records from order page, automatically comment will be added with transaction id.

In order to display comment, point a cursor on «…» next to record in the list.

Order Details: Configuring BWL Lists

The attributes can also be added and removed from BWL on order details screen, as presented below:

• Press ADD TO LIST and select one of the shown lists:

• After selecting any list, select the criterion by which the card will be listed:

Blacklisted card will be shown in black colour:

Whitelisted card will be shown in green colour:

Card in loyalty list will be shown in GitPay colour:

• Several criteria can be chosen at the same time:

• Additional criteria can be added via section as shown below:

After adding criteria via section described above, parameters will have colours depending on the selected list: