Advanced Credit Card Number verification software
1. Overview
VCardCheck, a standalone program that you can use to verify credit card numbers in realtime.
VCardCheck is an advanced credit card number verification software that can verify all major cards including: American Express, MasterCard,Visa,Diners Club, Carte Blanche, JCB, Enroute and Discover.
VCardCheck uses the Realtime Antifraud Webservice( RAW) , a system integrated by a huge database of over 210,000 free e-mail domains, and BIN numbers (First 6 digits of the credit card number (e.g. 549099) from national and offshore banking institutions that computes with a propietary algorithm a “fraud score” ( in the 0 to 10 range) when validating a credit card.
To facilitate the integration with your application, the setup includes also the VCardCom Activex, VCardcom is lightweight ActiveX control that provides an advanced interface for credit card number verification. VCardCom can be used in ASP (Active Server Pages), Html pages and in standalone credit card software programs.
What is an Activex?:
An ActiveX control is an object that can be inserted in Web pages, Microsoft Visual Basic® applications, and other OLE-enabled documents and software applications. Webmasters can add the VCardcom Automation Server in any ASP pages to perform a fast credit card number verification before sending the information to the bank gateway.
The ActiveX control (OCX) can be used in any language and software that supports Activex Controls : Visual Basic, Visual C++, Borland C++, Delphi, etc.The installation script installs the Activex Control and sample code software in ASP, HTML and Visual Basic and a MFC (Microsoft Foundation Classes) program with the complete documentation and programmers guide.
1.1. Downloads
1.2. Registration
2. AntiFraud Interface
This feature requires a free license key and uses a webservice consisting of a huge antifraud database, with a table of over 210,000 free e-mail domains, and a table with thousands of BIN numbers from international financial institutions to calculate a “fraud score” of the credit card.
RU = Registered users can access BIN match output (Free registration)
PS = Paid Services returns geographical details. Free service returns distance estimate only.(50.000 Queries/$20)
PPS = Premium Paid Service returns binCountry and binName. (4.000 Queries/$20)
|
Input Field
|
Description
|
|
ip
|
Client IP Address (IP address of customer placing order)
|
|
domain
|
E-mail domain of customer’s email (e.g. hotmail.com, aol.com)
|
|
city, region, postal, country
|
Billing City/State/ZipCode/Country
|
|
bin
|
BIN number, first 6 digits of credit card that identifies the issuing bank(optional)
|
|
binName
|
Name of the bank which issued the credit card based on BIN number (optional)
|
|
binPhone
|
Customer service phone number listed on back of credit card. (optional)
|
|
custPhone
|
Area code and local exchange. (optional).
|
|
license_key
|
License Key, for registered users (optional). If not present, limit of 20 requests per day per IP address
|
|
|
Output Field
|
Format
|
Description
|
|
distance
|
rounded integer
|
Distance from IP address to Billing Location in kilometers (large distance = higher risk)
|
|
countryMatch
|
Yes or No
|
Whether country of IP address matches billing address country (mismatch = higher risk)
|
|
countryCode
|
two-letter ISO-3166 code
|
Country Code of the IP address
|
|
freeMail
|
Yes or No
|
Whether e-mail is from free e-mail provider (free e-mail = higher risk)
|
|
anonymousProxy
|
Yes or No
|
Whether IP address is Anonymous Proxy (anonymous proxy = very high risk)
|
|
binCountry
|
two-letter ISO-3166 code
|
Country Code of the bank which issued the credit card based on BIN number (PPS)
|
|
binMatch
|
Yes, No, NotFound, or NA
|
Whether country of issuing bank based on BIN number matches billing address country (RU)
|
|
binName
|
string
|
Name of the bank which issued the credit card based on BIN number (PPS)
|
|
proxyScore
|
decimal from 0 to 10
|
Likelihood of IP Address being an Open Proxy
|
|
spamScore
|
decimal from 0 to 10
|
Likelihood of IP Address being an Spam Source
|
|
score
|
decimal from 0 to 10
|
Overall Fraud Risk Factor based on outputs listed above
|
|
ip_region
|
two-letter ISO-3166-2/FIPS 10-4 code
|
Estimated Region of the IP address (PS,PPS)
|
|
ip_city
|
string
|
Estimated City of the IP address (PS,PPS)
|
|
ip_latitude
|
degrees
|
Estimated Latitude of the IP address (PS,PPS)
|
|
ip_longitude
|
degrees
|
Estimated Longitude of the IP address (PS,PPS)
|
|
ip_isp
|
string
|
ISP of the IP address
|
|
ip_org
|
string
|
Organization of the IP address
|
|
highRiskCountry
|
Yes or No
|
Whether IP address or billing address country is in Belarus, Bulgaria, Columbia, Egypt, Indonesia, Lebanon, Lithuania, Macedonia, Malaysia, Nigeria, Pakistan, Romania, Ukraine, or Yugoslavia
|
|
(RU) Only registered users can access BIN Match Output
(PS) Paid Services returns these geographical details. Free service returns distance estimate only.
(PPS) Only Premium Paid Services returns binCountry and binName.
3. Frequently Asked Questions:
3.1. Which are the Physical Standards:
ANSI X4.13, "American National Standard for Financial Services Financial Transaction Cards" defines the size, shape, and other physical characteristics. Most of it is of interest only to mechanical engineers. It defines the location and size of the magnetic stripe, signature panel, and embossing area. This standard also includes the Luhn formula used to generate the check digit for the PAN, and gives the first cut at identifying credit card type from the account number. (This part was expanded later in other standards.) Also, this standard identifies the character sets that can be used for embossing a credit card.
3.2. Which are the steps for credit card number validation
credit card verify
The first screening by the acquirer would be a "sanity" test, for valid merchant ID, valid Luhn check on PAN, expiration date not past, amount field within reason for type of merchant, etc. After that, a floor limit check will be done. Next, a "negative file" check would be done against a file of known bad cards. (This is essentially the same as the bulletin.) Then a "velocity file" check may be done. A velocity file keeps track of credit card usage, and limits are often imposed on both number of uses and total amount charged within a given time period.Transactions that "fail" one or more checks are denied by the acquirer (if the cause was due to form, such as bad PAN) or sent to the issuer for further checking.
3.3. What is AVS?
AVS (Address Verification Service) is a fraud prevention feature that checks your customer's address used for the purchase against the address used in their statements. AVS is only an indicator of potential fraudulent activity, since there are many reasons a customer's billing and shipping address could differ. It is up to the merchant to decline or accept a customer's payment if the AVS code indicates conflicting addresses. The AVS process includes: 1. Your customer fills out a payment form on your Web site with their credit card information including the billing address. 2. The processing network compares the billing address supplied online with the billing address on file at the credit card issuing bank. From this comparison, the processing network sends an AVS response code to CardService International.
4. Glossary
Cardholder: an individual to whom a credit card is issued. Typically, this individual is also responsible for payment of all charges made to that credit card. Corporate cc are an exception to this rule.
CC Issuer: an institution that issues ccs to cardholders.This institution is also responsible for billing the cardholder for charges. Often abbreviated to "Issuer".
CC Accepter: an individual, organization, or corporation that accepts ccs as payment for merchandise or services. Often abbreviated "Accepter" or "merchant".
Acquirer: an organization that collects (acquires) authorization requests from cc accepters and provides guarantees of payment. Normally, this will be by agreement with the Issuer of the cc in question. Many issuers are also acquirers. Some issuers allow other acquirers to provide authorizations for them, under pre-agreed conditions. Other issuers provide all their own authorizations.
5. Payment Services and Processing
An Internet Merchant Account is comprised of several entities, each serving a specific function to enable online transactions: the Merchant (you), a Merchant Service Provider and Payment Processor, and a Payment Gateway.
Merchant: The person (or entity) selling goods and/or services.
Merchant Service Provider: a merchant service provider enables you to accept and securely process ccs. Your merchant service providers initiates the set-up with a payment gateway, provides the ability for you to access and manage your account, and facilitates the deposit of funds you receive as payments. Once set-up, your Merchant Service Provider submits cc information through the electronic cc interchange system to the cardholders bank and returns the transaction results to your gateway.
Payment Gateway: A payment gateway allows you to submit and receive private information to and from the Payment Processor. In addition, your payment gateway provides you access to the results of all business transactions, confirmation of purchase to your customers and transaction reporting history.
When all the above elements are integrated and working together seamlessly, a typical transaction taking place through your new Internet Merchant Account will take on average only 2 to 3 seconds!
|
