Fraud Management: Response Mappings
Last updated:October 23, 2026
Draft reviewReview before publishing (remove this box before publishing)
- iovation is internal and must not be used. The Device ID fields table is kept, marked in red, at the end of the page.
- The rows marked "***" now point to Appendix A (REPORT codes, page 61) and Appendix B (ERR codes, page 63) of the CID. The link works as on the Field Mappings page: logged-in users only, see the notes there.
- In the response code table, one cell lists the result code in the PSP system together with a "Details" label in an unlabeled column. I kept the source layout.
This page lists how Fraud Management response fields and results appear in the Secure eCommerce Gateway response. For the request, see field mappings.
Response mapping
Fraud Management response fields passed to the merchant through the Secure eCommerce Gateway:
| Secure eCommerce Gateway response fields | Fraud Management response fields |
|---|---|
| TransactionId | TRANSACTIONID |
| RiskOrderId | ORDERID |
| RiskNeuralScore | NEURAL |
| REASON | |
| RiskReport *** | REPORT will contain codes from 0000 to 2000 |
| RiskFraudDescription*** | Will contain the Descriptions for REPORT codes |
| RiskRuleCategory | RCF |
| RiskFraudStatusCode *** | Either RECOMMEND OR ERR field will be mapped |
| RECOMEND will contain ACCEPT / CHALLENGE / DENY | |
| ERR will contain 901 /902 / 903 codes | |
| RiskFraudVirtualBin | VIRTBIN |
| RiskFraudCardClass | CARDCLASS |
| RiskFraudMaxTof | MAXTOF |
| RiskFraudMinTof | MINTOF |
| RiskFraudIPCity | IPCITY |
| RiskFraudRouteMethod | ROUTEMETHOD |
| RiskFraudAnonymizerStatus | ANONYMIZERSTAT |
| CARRIER | |
| RiskFraudConnectionType | CONNECTIONTYPE |
| RiskFraudIPPostalCode | IPPOSTALCD |
| RiskFraudDVEHitFlag | DVEHITFLAG |
| RiskFraudDVENumHits | DVENUMHITS |
| RiskFraudTREHitFlag | TREHITFLAG |
| RiskFraudTRENumHits | TRENUMHITS |
| RiskFraudCNBHitFlag | CNBHITFLAG |
| RiskFraudCNBNumHits | CNBNUMHITS |
| RiskFraudSDSHitFlag | SDSHITFLAG |
| RiskFraudSDSNumHits | SDSNUMHITS |
| RiskFraudTSWHitFlag | TSWHITFLAG |
| RiskFraudTSWNumHits | TSWNUMHITS |
| RiskFraudEWBHitFlag | EWBHITFLAG |
| RiskFraudCEAHitFlag | CEAHITFLAG |
| CPFStatus | CPFSTATUS |
| InputNameMatchPercentage | CPFMTCHPER |
| NameUniquenessScore | CPFNUNIQSC |
| FirstNameUniquenessScore | CPFFNUNIQSC |
| FirstAndLastNameUniquenessScore | CPFFLNUNIQSC |
| HasObitIndication | CPFOBITID |
| EKATANetScore | EKANETSCORE |
| EKATARiskScore | EKARISKSCORE |
*** The detailed REPORT codes are in Appendix A (Report Code Response Table) of the Fraud Management client documentation, and the ERR codes (901, 902 and 903) are in Appendix B (Error Code Response Table): CID, version 12.6 (log in to the developer portal to open this document)
CPF validation response mappings
These response fields are available in the connector details of the Secure eCommerce Gateway response message.
| Secure eCommerce Gateway response fields | Fraud Management | Description |
|---|---|---|
| CPFStatus | CPFSTATUS | Stores the code of the CPF status for the corresponding message (for example, CODE : 0, MESSAGE: CPF Validated). |
| InputNameMatchPercentage | CPFMTCHPER | If an input name is provided, it contains what is the match percentage between the input name and the person's official name. |
| NameUniquenessScore | CPFNUNIQSC | A numeric value ranging from 0 to 1, describing how unique is the person's full name compared to others. |
| FirstNameUniquenessScore | CPFFNUNIQSC | A numeric value ranging from 0 to 1, describing how unique is the person's first name compared to others. |
| FirstAndLastNameUniquenessScore | CPFFLNUNIQSC | A numeric value ranging from 0 to 1, describing how unique is the person's first and last name compared to others. |
| HasObitIndication | CPFOBITID | Flag indicating if there is a record of the person being deceased (obit). |
Response scenarios
| Transaction type | Connector response | Status in the PSP system | Details |
|---|---|---|---|
| RE | Accept | 000.300.100 Risk check successful | |
| RE | Deny | 100.400.142 Deny by Fraud Management | |
| RE | Challenge | 000.400.060 Transaction succeeded (approved at merchant's risk) | Challenge (Reject on Challenge: RIRO set to "false") |
| RE | Challenge | 100.400.142 Deny by Fraud Management | Challenge (Reject on Challenge: RIRO set to "true") |
Response codes
| Response code | Description | Mode | Trans status | Comments | |
|---|---|---|---|---|---|
| 100.400.142 | Deny by Fraud Management | Payment (PAY) | PAY (PAYMENT TRANSACTION): 100.400.142 RISK (RISK CHECK TRANSACTION): 100.400.142 | DENY | |
| 100.400.142 | Deny by Fraud Management | Standalone (STD) | RISK: 100.400.142 | ||
| 000.400.030 | Transaction partially failed (please reverse manually due to failed automatic reversal) | Payment (PAY) | PAY (PAYMENT TRANSACTION): 100.400.030 RISK (RISK CHECK TRANSACTION): 100.400.142 | DENY by Fraud Management and Reversal Generated by gateway was declined by Acquirer (Post-Auth) | |
| 000.400.060 | Transaction succeeded (approved at merchant's risk) | PAY | PAY: If the Acquirer is OK 000.400.060 If Acquirer is NOK, the acquirer resp is set. RISK: 000.400.090 (challenge) Case Manager OK: RISK 000.300.100 Case Manager not OK: RISK 100.400.142 | CHALLENGE (Reject on Challenge: RIRO set to "false" + Indicate Challenge status in payment response: RIRO set to "true") | |
| 000.400.090 | Transaction succeeded (please review manually due to external risk check) | STD | RISK: 000.400.090 | ||
| 100.400.148 | Payment void and transaction challenged by Fraud Management | PAY | PAY: 100.400.148 RISK: 000.400.090 | CHALLENGE (Reject on the challenge: RIRO set to "true" + Indicate Challenge status in payment response: RIRO set to "true") | |
| 000.400.090 | Transaction succeeded (please review manually due to external risk check) | STD | RISK: 000.400.090 | ||
| - | Acquirer Resp | PAY | PAY: Acquirer Resp RISK: 000.300.100 | ACCEPT | Will return the result code of the payment. |
| 000.300.100 | Risk check successful | STD | RISK: 000.300.100 |
Error and timeout scenarios
| Response code | Description | Mode | Trans status | |
|---|---|---|---|---|
| - | Acquirer Resp | PAY | PAY: Acquirer Resp RISK: 100.400.324 | System error (Reject on system error: RIRO set to "false") |
| 100.400.324 | Error on the external risk system. | STD | RISK: 100.400.324 | |
| 100.400.324 | Error on the external risk system. | PAY | PAY: 100.400.324 RISK: 100.400.324 | System error (Reject on system error: RIRO set to "true") |
| 100.400.324 | Error on the external risk system. | STD | RISK: 100.400.324 | |
| 000.400.080 | Transaction succeeded (please review manually because the service was unavailable). | PAY | PAY: 000.400.080 RISK: 100.400.325 | Communication error (Reject on comm. error: RIRO set to "false") |
| 100.400.325 | No response from Fraud Management. | STD | RISK: 100.400.325 | |
| 900.400.100 | Unexpected communication error with external risk provider. | PAY | PAY: 900.400.100 RISK: 100.400.325 | Communication error (Reject on comm. error: RIRO set to "true") |
| No response from Fraud Management. | STD | RISK: 100.400.325 | ||
| 100.400.500 | The risk system failed to produce a timely response. | PAY | PAY: 100.400.500 RISK: 100.400.500 | Timeout |
| 100.400.500 | The risk system failed to produce a timely response. | STD | RISK: 100.400.500 |
Device ID scans: response field mappings
Not for publicationInternal. Do not publish.
Refer for more details at Fraud Management Device Id for OPP COPYandPAY (iovation).
iovation is internal and must not be used. Keep this section in the draft, and remove it from the final document.
| Secure eCommerce Gateway response fields | Fraud Management | Description |
|---|---|---|
| IovationDeviceId | IOVDEVICEID | The identifier for the device |
| IovationTrackingNumber | IOVTRACKINGNUM | The Tracking Number assigned by Iovation to identify the report |
| IovationResult | IOVRSLT | Iovation recommendation for the transaction |
| IovationResultReason | IOVRSN | The reason associated with the rule that matched |
| IovationDeviceType | IOVDTYPE | Device Type |
| IovationRulesMatched | IOVRCNT | The number of rules hit |
| IovationRealIPAddress | IOVREALIP | The Real IP address. This is the best available IP information. Iovation uses its IP detection technology to try and uncover the user's actual IP address. If iovation is unable to detect an IP, then the Real IP value is the IP address provided by the subscriber. |
| IovationRealIPInternetService | IOVREALIPISP | The Real IP internet service provider detail. |
| IovationRealIPAddressProxy | IOVPROXY | Indicator or special attributes for the Real IP address. This can be satellite or proxy |
| IovationBrowserLanguage | IOVBLNG | Browser compilation language |
| IovationBrowserJavaEnabled | IOVCK | Whether JavaScript cookies are enabled |
| IovationBrowserFlashEnabled | IOVFLSH | Whether Flash is enabled |
| IovationBrowserJavascriptEnabled | IOVJS | Whether JavaScript is enabled |
| IovationTimeOnFile | IOVTOF | Device Time on File |
| IovationRealIPAddressCountry | IOVCNTRYCD | Device Country Code |
| IovationProfileComposite | IOVPROF | Device Profile Composite |
| IovationAccountCode | IOVACCOUNTCODE | This is set from a configured field, or defaults to theebCUSTID |
| IovationRulesScore | IOVRSCORE | A field containing the scores for up to the first 5 rules |
| IovationRulesReason | IOVRREASON | A field containing the reasons given for up to the first 5 rules |
| IovationRulesType | IOVRTYPE | A field containing the types returned for up to the first 5 rules |
| BehavioralIntent | INTENT | A score, between 0-100, that rates how genuine the customer interaction is. |
| FraudRingIndicator | FRI | A true/false value indicating whether the model indicates this appears to be a fraud ring. |
| IovationBrowserType | IOVBRWSRTYPE | Browser Name |
| IovationBrowserVersion | IOVBRWSRVRSN | Device details browser.version |
| IovationDeviceFirstSeen | IOVDEVICEFIRSTSEEN | Date/time the device was first seen by iovation. |
| IovationFlashInstalled | IOVFLSHINSTALLED | Whether Flash is installed. |
| IovationDeviceNew | IOVDEVICENEW | Whether the device has ever been seen by iovation. |
| IovationDeviceTz | IOVDEVICETZ | Device TimeZone |
| IovationIPAddressCity | IOVIPADDRCITY (TBC) | City associated with the Real IP address. |
| IovationIPAddressRegion | IOVIPADDRREGION | State/region name associated with the Real IP address. |
| IovationRealIPSource | IOVREALIPSRC | The source of the Real IP address. This may be iovation or subscriber. |