Card Integration Rule Example
This section explains how rule authoring can be used to write rules around the Restrict/Permit actions for cards, and the different card action entry values that are created in the
FRAUD_HOTLIST_ENTRY
table for their related hotlists.
This example rule advises the authorization system to approve transactions with MCC present in the
SYSTEM_PERMIT_MCC
hotlist. The rule is written in the Decision Ruleset of the Credit 2.5 Authorization-Posting project.
Rule Narrative
If the transaction PAN is present in the
SYSTEM_PERMIT_MCC
hotlist, and if the
MCC
from transaction is in the list of allowed MCC, set the authorization recommendation to
APPROVE
the transaction.
Rule Code
In the Free Form Editor, this rule can be written as follows:
value is a string;
serviceId is a string;
serviceId = Left(CRTRAN25.pan, 19);
if (GetLookupListValue("SYSTEM_PERMIT_MCC",serviceId,value) = 1) then
{
if (Match_String_Trim(value,CRTRAN25.mcc,1) <> 0) then
{
SendAuthAdvice(APPROVE);
}
}
Components
Conditional statements:
GetLookupListValue("SYSTEM_PERMIT_MCC",serviceId,value) = 1
is a successful lookup of the transaction PAN (serviceId
) in theSYSTEM_PERMIT_MCC
hotlist, which returns allowed MCC in the value field.Note: Quotation marks are required for string values.Match_String_Trim(value,CRTRAN25.mcc,1) <> 0
is a case-insensitive match that looks up if the transaction MCC is in the list of allowed MCC (value
) corresponding to the transactionserviceId
. The function returns0
if the transaction MCC is not found in theSYSTEM_PERMIT_MCC
hotlist for theserviceId
from the transaction.
The possible values for Restrict/Permit actions in these statements are shown in the following table.
![]() | Note: All value strings should be in uppercase letters.
|
Card Action Status | Table Name | value String |
---|---|---|
Restrict All | SYSTEM_RESTRICT
|
"ALL"
|
Restrict PIN | "PIN"
|
|
Restrict Signature | "SIGNATURE"
|
|
Full Permit |
SYSTEM_PERMIT_FULL
|
"FULL"
|
Partial Permit (MCC) |
SYSTEM_PERMIT_MCC
|
One or more four-digit numeric-only codes, comma-separated |
Partial Permit (Merchant Country) |
SYSTEM_PERMIT_MER_COUNTRY
|
One or more three-digit numeric-only codes, comma-separated |
Partial Permit (Merchant State) |
SYSTEM_PERMIT_MER_STATE
|
One or more two-digit alphanumeric-only codes, uppercase, comma-separated |
Partial Permit (Rules) |
SYSTEM_PERMIT_RULES
|
One or more strings of exact rule names, uppercase, comma-separated |
Action statement:
- The then portion of the rule calls the SendAuthAdvice function, with the keyword value APPROVE.
Function:
- SendAuthAdvice sends a message to the authorization system with the recommended action.