• How to know if Fraud Management Essentials (FME) is enabled for your merchant ID (MID)?
• How to confirm that Fraud Management Essentials (FME) is inspecting your transactions?
• What to look for if Fraud Management Essentials (FME) is not inspecting your transactions?
• How to see why Fraud Management Essentials (FME) may be rejecting orders?
• Required Data Fields
• Special Notes
  • Secure Acceptance users
  • IP Address
  • Authorize.net
  • Smart Authorization
• How to learn more?

How to know if Fraud Management Essentials (FME) is enabled for your merchant ID (MID)?

You will know that the FME product is enabled for your MID because you will see the "Fraud Management" section in the left menu bar of the Business Center.

1. Log into the Business Center. 
2. In the left navigation panel look for a section called “Fraud Management”. 
3. If you find this section, then FME is enabled for your MID.  If you do not find the section, then FME is not enabled. 
4. If you do not find this section, then FME is not enabled for your MID and it should be please contact Cybersource support. 

How to confirm that Fraud Management Essentials (FME) is inspecting your transactions?

1. Log into the Business Center.
2. In the left navigation panel, click on Transaction Management > Transactions 
3. Locate some recent authorization or sale transactions 
4. In the Applications column, you will see the Cybersource services that were executed with that transaction. 
5. You should see an application called “Decision Manager”.   
   • Note that the application will be titled Decision Manager (DM) regardless of whether you are using FME or Decision Manager.  This is not indicative of an error. 
6. If you do not see the application called “Decision Manager” with your authorization or sale transactions, that is an indicator that FME is not inspecting your transaction.  See the section of this document titled “What to look for if FME is not inspecting your transactions. 

What to look for if Fraud Management Essentials (FME) is not inspecting your transactions?

If FME is not inspecting your transactions: 

• Validate that you are sending the required data fields (see section of this document titled Required Data Fields) 
• Validate that you have ticked the Decision Manager option in your Secure Acceptance profile (see section of this document titled Enabling FME for Secure Acceptance users). 
• Validate that you do not have the Smart Authorization product enabled for your MID (see section of this document titled Special note for former users of the Smart Authorization product). 
• Validate that your authorization or sale transactions do not include the value “decision_manager_enabled=no”.  If this is the case, then FME will not inspect that transaction.  If you do not know whether this value is set to “no”, contact Cybersource support. 

How to see why Fraud Management Essentials (FME) may be rejecting orders?

FME will decision your orders according to the rules that you configure. 

• In some cases, your instance of FME will come with default rules.  You may use these default rules, change them, or disable them entirely.  For information on how to do this, see the “How to learn more” section of this document. 

To understand why FME rejected an order: 

• Locate that order in Order Search.  For information on how to do this, see the “How to learn more” section of this document. 
• Look for the panel titled “Decision Manager Results”. 
• Look for the subheading “Rule Evaluation”. 
• Under this subheading you will see the rules that were triggered for this order. 
• In this case, the AVS Mismatch rule triggered, with the decision of “Review”. 
• However, the “Billing-IP Country Mismatch” rule also triggered, and the decision was “Reject”.  Therefore, FME rejected the transaction. 

Required Data Fields

FME and DM both require that the following fields are present in your authorization or sale transaction: 

• Billing Address 
• Billing Email 

If you do not include these fields, then the transaction will fail. 

Note that these fields are not required for an authorization or sale transaction if you are using the Cybersource payment gateway and you are not using FME.  When you enable FME, these fields will become required. 

Below is a sample request and response object that shows the response in the event that Billing Address and Billing Email fields are missing from the request: 

For more about Cybersource Payment API, visit https://developer.cybersource.com/ 

Special Notes

Enabling FME for Secure Acceptance users 

If you accept orders using Secure Acceptance, you must enable FME in your Secure Acceptance (SA) profile: 

1. Log into the Business Center. 
2. In the left navigation panel, navigate to Payment Configuration > Secure Acceptance Settings. 
3. In your SA profile, tick the “Decision Manager” option.  This will cause FME to inspect all of your authorization and sale transactions. 
   • Note that this option will be titled Decision Manager (DM) regardless of whether you are using FME or Decision Manager.  This is not indicative of an error. 

IP Address

FME will allow you to configure velocity rules related to IP address.  These are useful for stopping a bot (card testing/enumeration) attack. 

Note that there could be situations where the same IP address is associated with many (or all) of your orders, such as if your orders originate from a call center.  In that case, you will see that your orders are rejected because of the IP Address velocity rule.  To resolve this situation, you should disable this rule. 

Merchants from Authorize.net using Cybersource and FME

For merchants who are familiar with the Advanced Fraud Detection Suite (AFDS) on Authorize.net, there are some differences between FME and AFDS to be aware of: 

• AFDS does not require the fields Email and Billing Address, whereas FME does (see the Required Fields section of this document) 
• AFDS allows you to hold orders review prior to the authorization.  FME will send orders to the process for authorization, even if the order decision is Review. 

Smart Authorization Merchants

Note that the product “Smart Authorization” (SmartAuth) and FME cannot be deployed on the same MID.  If you are a user (or former user of Smart Authorization) make sure that you call Cybersource Support and have Smart Authorization disabled.   

You will know that you have the SmartAuth product if you see “Smart Auth Settings” under the Payment Configuration section in the left navigation panel.

How to learn more?

1. Study the Merchant Training modules found in the Business Center under Support > Training

2. Review the FME User Guide found in the Business Center under Fraud Management > Guides

3. Review the Fraud Management Essentials (FME) Quick Start Guide found in the Support Center.