Risk management

RevenueProtect is Adyen's risk management system that allows you to minimize fraud without impacting genuine transactions for your users. In the system, all payments are assigned a fraud score based on the risk rules defined in your risk profiles. This fraud score is designed to protect your users from fraudulent transactions. If the total transaction score reaches or exceeds 100, the transaction is automatically blocked.

As your users cannot control risk management in Essentials, you must configure the risk settings for your platform and your users' merchant accounts in your Customer Area.

To set up or adjust RevenueProtect for your company and your users, you have to:

1. Configure risk settings
2. Create and assign risk profiles
3. Configure risk rules

Step 1: Configure risk settings

You can configure overall risk settings for your platform. For example, you can turn on risk for in-person payments, or set up additional payment methods to be checked by the risk system.

To view and configure risk settings:

1. Log in to your live Customer Area.
2. Go to Risk > Settings.

In case your users have different needs, you can also change the risk settings for specific merchant accounts:

1. Log in to your live Customer Area.
2. Switch to the appropriate merchant account.
3. Go to Risk > Settings.
4. Select the Override company settings checkbox in the sections you want to change.

Step 2: Create and assign risk profiles

Adyen assigns a default risk profile to all merchant accounts in your platform. This profile is generally based on the industry and country in which your user operates.

Risk profiles let you manage which risk rules to apply to payments made in a merchant account. As the platform, you are able to customize the risk profiles according to your user's business model and use cases, and assign different risk profiles to different users.

To create and configure risk profiles:

1. Log in to your live Customer Area.
2. Go to Risk > Risk profiles.
3. Select Create new profile.
4. In the Profile name, type a name for the new risk profile.
5. From the Based on profile dropdown, select the risk profile to use as the template for your new profile.
6. Select Create. Refresh the page to see your changes.

On the details page of a risk profile, you can:

• Assign the risk profile to a merchant account.
• Configure the risk profile settings.
• Configure risk rules.

Step 3: Configure risk rules

Each risk profile applies a different set of risk rules. RevenueProtect compares transactions to the risk rules defined in the profile, and increases the fraud score of the payment if a transaction breaks a rule.

Each rule has a risk score that you can configure. When the rule triggers, the score is added to the total risk score. If the total score reaches or exceeds 100, the transaction is automatically blocked.

Risk rules for RevenueProtect and Dynamic 3D Secure are configured at the company account level, with the option to overrule settings at the merchant account level. You can configure the following risk rules:

• Standard risk rules
  • Velocity: set thresholds on how often a shopper can attempt transactions.
  • Consistency: analyze provided shopper data and behavior for inconsistencies and fraud.
  • ShopperDNA: use shopper data and behavior to determine fraud. Requires RevenueProtect premium.
  • External: use data from third-party risk mitigation systems to determine fraud. These rules are only visible when you use external rules.
• Block and trust lists (Referrals)
  • Use lists of known good and bad shoppers to prevent fraudsters from making payments.
• Custom risk rules
  • Define custom rules, using custom risk fields or fields provided by Adyen, custom lists and custom list comparisons. Requires RevenueProtect premium.

To view and configure risk rules:

1. Log in to your live Customer Area.
2. Go to Risk > Risk profiles.
3. Select a risk profile.
4. Select the risk rule that you want to view or configure.