Last updated 10 months ago

Blocklists

One of the most effective ways to prevent friendly or criminal fraud is through the use of blocklists.

What are blocklists?

Blocklists are lists of attribute values that are permanently barred from buying from you. Rebilly has various blocklists each relating to one of the following attributes:

  • Customer IP address - IP address of the customer making the purchase;
  • Customer email - Email address of the customer making the purchase;
  • Customer ID - The Rebilly “customerId” of the customer making the purchase;
  • Payment card - The card number of the payment card being charged;
  • Payment card BIN - The Bank Identification Number of the payment card being charged;
  • Device fingerprint - A string holding information about the software and the device used by the customer making the purchase;
  • Country - The country of the customer making the purchase and/or of the charged payment card’s billing address;

When a customer attempts to make a purchase from you with a credit card or fingerprint that has been flagged on your blocklist, the transaction is blocked from being sent to the payment gateway altogether.

No permanent blocklist

When configuring a blocklist with a TTL (time to live), they will become not permanent. They’re typically used to block weak attributes temporarily — like residential IP addresses, which change frequently.

How does Rebilly use blocklists?

When Rebilly encounters an event that would result in a new Transaction, the blocklists are examined to see if any match can be found on the entity’s relevant attributes. If a match is detected, the operation is aborted to avoid any damage to your business. In the event where blocklisted attributes match on a Subscription during its renewal, it will be canceled.

How does blocklisting benefit my business?

One of the most effective ways to prevent friendly or criminal fraud is through blocklisting. Once you’ve identified patterns and scenarios that generate disputes or other unwanted outcomes, you can add the relevant values to your attribute blocklists to stop further damage to your business.

Managing blocklists in Rebilly

The Rebilly app offers multiple ways of entering blocklist items: through our Rules Engine or through dedicated Blocklist endpoints in our app. This section will cover basic blocklist management, which can be summed up as adding or removing items from your blocklists.

How to add a blocklisted item in the app

From the Automations page, select the “Blocklist” section then click on “Add Blocklist Item”. Next, you will be asked to select the blocklist type and enter the blocklisted item. You can always go back to the Blocklist section to view and edit blocklisted items.

add blocklist item

How to add a temporary blocklist item in the app

Follow the instruction to create a blocklisted item, then when it comes time to choose the TTL (Time to live), enter the number of seconds. The minimum required value is 30 seconds.

time to live

How to create a blocklist entry using the rules engine

Blocklist items can also be added automatically from our Rules Engine. Check out the Rules Engine help section to become familiar with setting up rules.

Here are the system events that currently support blocklist actions:

  • Dispute Created
  • Transaction Processed
  • Risk Score Changed

To create a blocklisting rule, go to “Automations”, choose the “Rules Engine” page, and select “Core Events”.

rules engine

On the list of events, select the event you want your rule to apply to. In this example, we will create a “Dispute Created” blocklist rule. Once on the “Dispute Created” page, click the “Add Rule” button.

dispute created

From there, define your rule information and conditions. In the “Actions” section, click on the button “Add Action” and select “Blocklist”.

blocklist action

Don’t forget to save your new rule. The blocklist will be automatically created when the conditions for this rule match. All actions will run unless they are toggled off. To view, edit, and delete your rule, go back to the “Dispute Created” page and click on the appropriate icons next to the rule name.

edit rule

What’s next?