How Do Recurly's Fraud Velocity Filters Work?

If enabled, Recurly employs a simple fraud velocity filter for all transactions before they are sent to your payment gateway for processing. While this filter doesn't guarantee the complete elimination of fraud, it significantly reduces the possibility of large volumes of fraudulent transactions.

Our fraud velocity filters monitor the following activities from the same IP address:

• The number of transactions created.

• The number of new subscriptions created.

• The number of billing information update attempts submitted.

Importance of Providing Customer IP Address: Since some of our fraud velocity filters are based on IP rules, it's crucial that you provide your customer's actual IP address for each transaction. If no IP address is provided, or if a local address (such as "127.x.x.x" or "10.x.x.x") is submitted, Recurly cannot accurately detect fraudulent behavior using these velocity filters.

Configurable Thresholds and Whitelisting: The default thresholds for the fraud filter are:

• Up to 10 billing information updates in the past 24 hours (per IP address).

• Up to 10 new subscriptions created in the past hour (per IP address).

• Up to 20 transactions in the past hour (per IP address).

If you are signing up a large number of clients from a specific IP address, you can whitelist that IP address under Configuration > Site settings in the Recurly Admin Console. This allows transactions from that specific IP address to bypass the fraud velocity filters.

Resetting the Fraud Filter: The fraud filter can be manually reset for a specific account. To do this, pull up the declined account in the Recurly Admin Console and click the "Reset Fraud Filter" button on the right-hand side of the account page.