Luminate Online has a suite of fraud prevention settings referred to as Velocity Fraud Controls. The basic strategy of a velocity approach is that it watches transactions as they come in looking for specifics patterns and spikes in certain kinds of activity over a defined period of time commonly known as carding runs. There are several different patterns for which velocity can monitor. All of the patterns look for a specific event to happen repeatedly over a specific given period of time. Below are the events that trigger each pattern that can be monitored for:
  • Authorized transactions by email - Successful transactions with the same email address
  • Authorized transactions by IP - Successful transactions from the same IP
  • Number of distinct credit cards used by email - Successful transactions with different/distinct credit cards with the same email address
  • Number of distinct credit cards used by IP - Successful transactions with different/distinct credit cards from the same IP
  • Declined transactions by email - Declined transactions with the same email address
  • Declined transactions by IP - Declined transactions from the same IP
  • Number of small donations by email - Successful transactions with the same email address where the transactions are at or below a specific dollar amount (as defined by the settings).
  • Number of small donations by IP - Successful transactions from the same IP where the transactions are at or below a specific dollar amount (as defined by the settings).
For each of the patterns mentioned above, there are a set of three sub-settings that are used specifically for the pattern in question. Those settings are (numbered for reference purposes only):
  1. Lockout time - This setting determines how long the problem IP(s) will be blocked once the pattern has been identified by the system from those IP(s). Transaction attempts during the lockout window will be recorded as declines and can thus cause it to be extended.
  2. Window time - This setting determines the window of time for which the pattern most occur in order for velocity to be triggered.
  3. Limit - The number of times the specific event has to occur in the window of time before the lockout time is triggered.

There are a few other relevant settings for Velocity:
  • IP white list - If you have a specific site (such as a call center) where many donations are inputted over a short period of time, you will need us to white list that site?s IP so that the transactions are not blocked by Velocity. This can be done via a single IP which is most common or by a range of IPs.
  • Email black list - If you have a consistent offender who fraudulently donates using the same email address over and over, we can black list the email address using this setting. We cannot black list an entire domain.
  • Email black list lockout time - Because Luminate Online does not directly block email addresses, the email black list actually blocks the IPs. IPs change, however, so we don't block that IP in perpetuity. This settings determines for long we block an IP which has become associated with an email in the black list.
  • Small authorizations amount - Per the last two patterns mentioned, there is a small authorization amount which will trigger those two patterns. This setting is for those settings.