Quick start guide

Shield rules

Buckaroo Shield rules are managed in Configuration > Shield > Rules. All available rules are listed here.

The first tab shows Merchant rules. These are

• Recommendation rules. These are five default rules recommended by Buckaroo. They can be edited and/or deactived if needed.
• Merchant made custom rules. These are rules created by the merchant.

The second tab shows the mandatory rules. These are created and managed by Buckaroo. They apply to all merchants of Buckaroo.

Each rule displays the following information:

• Name. This is the name of the rule.
• Condition. This shows the contents of the condition
• Active. This shows whether the rule is active or not.

Creating a rule

Add a rule by clicking the + Rule button. The rule editor will open. Here you can specify one or more expressions and an action.

• By clicking on the pencil icon, a name can be set for the rule.
• Created. Shows the rules' creation date.
• Modified. Shows when the rule was last updated.
• Status. Shows the status of the rule. This can be active or inactive. Only active rules are used by Shield.

Expressions

• Create the first expression by selecting a datapoint or function on the left, followed by an relational operator, then end with any value or datapoint.
• Use the OR or AND operators to add additional expressions.
• Certain functions require additional parameters to be set. For example, if card numbers attempted from ClientIp is selected, a time interval needs to be specified (days, hours, minutes, DD:HH:MM).

In the following chapters, a more indepth explanation is given on data points and rules.

Action

At the end, an action must be chosen:

• Warn. A warning is given for the transaction.
• Refusal. The transaction is refused, or will be automatically refunded in the case of an After-The-Fact refusal
• Exempt. The transaction is exempted from Shield rules and lists

A rule can be saved by clicking Save. It will then be visible in the rule overview.

Managing block and trust lists

The list overview can be found in Configuration > Shield > Lists.

• Each data point has its own block and trust list.
• Custom lists can be managed by the merchant
• Global Lists are managed by Buckaroo and cannot be viewed or managed.

Each list displays the following information:

• Name of the list,
• Number of entries,
• Whether the list is active or inactive
• The specified action

The entries become visible by clicking on a list.

• Each entry shows the creation date (date of addition) and an option to delete.
• Click the + button to add a new entry.

The gear icon displayes the followin options:

• The list can be set to active or inactive. When activating, a choice must be made between the Warn or Refuse actions.
• Auto-blocklist. Activating this option lets Shield automatically add data to this list if data for this data point is found in any Warned or Refused transaction.
• Upload file. Use this option to upload multiple entries at once through a csv file.

Block data in the transaction details

• In the transaction details screen you will see the tab “Shield”.
• The tab displays all the data that can be added to its data point block list.
• Click the red icon to add or remove the data from its data point block list
• The listed data can be found in its data point block list: Configuration > Shield > Lists.

Manage email notifications

The settings for email notifications can be found under Configuration > Shield > Miscellaneous

• One or more email addresses can be entered here to receive notifications of Shield promotions.
• Separate notifications can be set based on the action taken: Warn, Refuse and Exempt.
• Multiple e-mail addresses can be entered, separated by a comma.
• The email notification will provide feedback on the transaction and the Shield action taken.

Push notification

{
  "Transaction": {
    "Key": "xxx",
    "Invoice": "iDEAL_0001",
    "ServiceCode": "ideal",
    "Status": {
      "Code": {
        "Code": 690,
        "Description": "Rejected"
      },
      "SubCode": {
        "Code": "S104",
        "Description": "Buckaroo Shield refused the payment after-the-fact due to suspected fraud. It will be refunded."
      },
      "DateTime": "2022-10-06T17:26:09"
    },
    "IsTest": true,
    "Order": null,
    "Currency": "EUR",
    "AmountDebit": 0.01,
    "TransactionType": "C021",
    "Services": [
      {
        "Name": "ideal",
        "Action": null,
        "Parameters": [
          {
            "Name": "consumerIssuer",
            "Value": "ABN AMRO"
          },
          {
            "Name": "transactionId",
            "Value": "0000000000000001"
          },
          {
            "Name": "consumerName",
            "Value": "John Smith"
          },
          {
            "Name": "consumerIBAN",
            "Value": "NL44RABO0123456789"
          },
          {
            "Name": "consumerBIC",
            "Value": "RABONL2U"
          }
        ],
        "VersionAsProperty": 2
      },
      {
        "Name": "Shield",
        "Action": null,
        "Parameters": [
          {
            "Name": "Action",
            "Value": "Refuse"
          },
          {
            "Name": "Check",
            "Value": "Fraudulous IBANs"
          },
          {
            "Name": "Details",
            "Value": "DataPoints.Iban = \"NL44RABO0123456789\""
          }
        ]
      }
    ],
    "CustomParameters": null,
    "AdditionalParameters": null,
    "MutationType": 1,
    "RelatedTransactions": null,
    "IsCancelable": false,
    "IssuingCountry": null,
    "StartRecurrent": false,
    "Recurring": false,
    "CustomerName": "J. de Tèster",
    "PayerHash": "XXX",
    "PaymentKey": "XXX",
    "Description": "Test transaction X"
  }
}

If Shield has taken an action on a transaction, this information will be included in the transaction push.

Three fields are provided by default: Action, Check and Details.

• The Action field indicates which action has been taken
• The Check field displays the name of the rule or list
• The Details field specifies the condition of the rule or list.