APPENDIX

Information and Reply

Codes
D

These tables list the codes that appear in the case details window.

Address Verification Codes

Because several codes have the same meaning, and all codes are valid for all merchants,
any code can appear.

When you populate billing street address 1 and billing street address 2, Visa
Platform Connect concatenates the two values. If the concatenated value
exceeds 40 characters, Visa Platform Connect truncates the value at 40
characters before sending it to Visa and the issuing bank. Truncating this value
affects AVS results and therefore might also affect risk decisions and
chargebacks.

Table 46 AVS Codes

Code Description
A Partial match: street address matches, but 5-digit and 9-digit postal codes do not match.
B Partial match: street address matches, but postal code is not verified. Returned only for
Visa cards not issued in the U.S.
C No match: street address and postal code do not match. Returned only for Visa cards
not issued in the U.S.
D&M Match: street address and postal code match. Returned only for Visa cards not issued in
the U.S.
E Invalid: AVS data is invalid or AVS is not allowed for this card type.
F Partial match: card member’s name does not match, but billing postal code matches.
G Not supported: issuing bank outside the U.S. does not support AVS.
H Partial match: card member’s name does not match, but street address and postal code
match. Returned only for the American Express card type.
I No match: address not verified. Returned only for Visa cards not issued in the U.S.

Decision Manager User Guide | 251

 Appendix D Information and Reply Codes

Table 46 AVS Codes (Continued)

Code Description
K Partial match: card member’s name matches, but billing address and billing postal code
do not match. Returned only for the American Express card type.
L Partial match: card member’s name and billing postal code match, but billing address
does not match. Returned only for the American Express card type.
M See the entry for D & M.
N No match: one of the following:
 Street address and postal code do not match.
 Card member’s name, street address, and postal code do not match. Returned only
for the American Express card type.
O Partial match: card member’s name and billing address match, but billing postal code
does not match. Returned only for the American Express card type.
P Partial match: postal code matches, but street address not verified. Returned only for
Visa cards not issued in the U.S.
R System unavailable.
S Not supported: issuing bank in the U.S. does not support AVS.
T Partial match: card member’s name does not match, but street address matches.
Returned only for the American Express card type.
U System unavailable: address information unavailable for one of these reasons:
 The U.S. bank does not support AVS outside the U.S.
 The AVS in a U.S. bank is not functioning properly.
V Match: card member’s name, billing address, and billing postal code match. Returned
only for the American Express card type.
W Partial match: street address does not match, but 9-digit postal code matches.
X Match: street address and 9-digit postal code match.
Y Match: street address and 5-digit postal code match.
Z Partial match: street address does not match, but 5-digit postal code matches.
1 Not supported: one of the following:
 AVS is not supported for this processor or card type.
 AVS is disabled for your CyberSource account. To enable AVS, contact CyberSource
Customer Support.
2 Unrecognized: the processor returned an unrecognized value for the AVS response.
3 Match: address is confirmed. Returned only for PayPal Express Checkout.
4 No match: address is not confirmed. Returned only for PayPal Express Checkout.
5 No match: no AVS code was returned by the processor.

Decision Manager User Guide | 252

 Appendix D Information and Reply Codes

Card Verification Numbers

Table 47 CVN Codes

Code Description
D The transaction was determined to be suspicious by the issuing bank.
I The CVN failed the processor's data validation check.
M The CVN matched.
N The CVN did not match.
P The CVN was not processed by the processor for an unspecified reason.
S The CVN is on the card but was not included in the request.
U Card verification is not supported by the issuing bank.
X Card verification is not supported by the payment card company.
1 Card verification is not supported for this processor or card type.
2 An unrecognized result code was returned by the processor for the card
verification response.
3 No result code was returned by the processor.

Risk Factor Codes

Code Description
A Excessive address change. The customer changed the billing address two or more times in the last six
months.
B Card BIN or authorization risk. Risk factors are related to credit card BIN and/or card authorization checks.
C High number of account numbers. The customer used more than six credit cards numbers in the last six
months.
D Email address impact. The customer uses a free email provider, or the email address is risky.
E Positive list. The customer is on your positive list.
F Negative list or negative history. The account number, street address, email address, or IP address for this
order appears on your negative list or negative history.
G Geolocation inconsistencies. The customer’s email domain, phone number, billing address, shipping
address, or IP address is suspicious.
H Excessive name changes. The customer changed the name two or more times in the last six months.
I Internet inconsistencies. The IP address and email domain are not consistent with the billing address.
N Nonsensical input. The customer name and address fields contain meaningless words or language.
O Obscenities. The customer’s input contains obscene words.

Decision Manager User Guide | 253

 Appendix D Information and Reply Codes

Code Description
P Identity morphing. Multiple values of an identity element are linked to a value of a different identity element.
For example, multiple phone numbers are linked to a single account number.
Q Phone inconsistencies. The customer’s phone number is suspicious.
R Risky order. The transaction, customer, and merchant information show multiple high-risk correlations.
T Time hedge. The customer is attempting a purchase outside of the expected hours.
U Unverifiable address. The billing or shipping address cannot be verified.
V Velocity. The account number was used many times in the past 15 minutes.
W Marked as suspect. The billing or shipping address is similar to an address previously marked as suspect.
Y Gift Order. The street address, city, state, or country of the billing and shipping addresses do not correlate.
Z Invalid value. Because the request contains an unexpected value, a default value was substituted. Although
the transaction can still be processed, examine the request carefully for abnormalities in the order.

Information Codes

Address Information Codes

Code Description
COR-BA The billing address has corrected elements or can be normalized.
COR-SA The shipping address has corrected elements or can be normalized.
INTL-BA The billing country is outside of the U.S.
INTL-SA The shipping country is outside of the U.S.
MIL-USA The address is a U.S. military address.
MM-A The billing and shipping addresses use different street addresses.
MM-BIN The card BIN (the first six digits of the number) does not match the country.
MM-C The billing and shipping addresses use different cities.
MM-CO The billing and shipping addresses use different countries.
MM-ST The billing and shipping addresses use different states.
MM-Z The billing and shipping addresses use different postal codes.
UNV-ADDR The address is unverifiable.

Decision Manager User Guide | 254

 Appendix D Information and Reply Codes

Internet Information Codes

Code Description
FREE-EM The customer’s email address is from a free email provider.
INTL-IPCO The country of the customer’s IP address is outside of the U.S.
INV-EM The customer’s email address is invalid.
MM-EMBCO The domain in the customer’s email address is not consistent with the country in the billing
address.
MM-IPBC The customer’s IP address is not consistent with the city in the billing address.
MM-IPBCO The customer’s IP address is not consistent with the country in the billing address.
MM-IPBST The customer’s IP address is not consistent with the state in the billing address. However, this
information code may not be returned when the inconsistency is between immediately adjacent
states.
MM-IPEM The customer’s email address is not consistent with the customer’s IP address.
RISK-EM The customer's email domain (for example, mail.example.com) is associated with higher risk.
UNV-NID The customer’s IP address is from an anonymous proxy. These entities completely hide the IP
information.
UNV-RISK The IP address is from a risky source.
UNV-EMBCO The country of the customer’s email address does not match the country in the billing address.

Customer Lists Information Codes

Code Description
CON- The order triggered both a positive and negative list match. The result of the positive list match
POSNEG overrides that of the negative list match.
NEG-ACRB The transaction was automatically marked as a creditback and is on the negative list.
NEG-AFCB The transaction was automatically marked as a fraud chargeback and is on the negative list.
NEG-ANFCB The transaction was automatically marked as a non-fraud chargeback and is on the negative list.
NEG-ASUSP The transaction was automatically marked as suspected fraud and is on the negative list.
NEG-BA The billing address is on the negative list.
NEG-BCO The billing country is on the negative list.
NEG-BIN The credit card BIN (the first six digits of the number) is on the negative list.
NEG-BINCO The country in which the credit card was issued is on the negative list.
NEG-BZC The billing postal code is on the negative list.
NEG-CC The credit card number is on the negative list.
NEG-CPF The CPF or CNPJ identification number is on the negative list.
NEG-CRB The transaction was marked as a creditback and is on the negative list.
NEG-EM The email address is on the negative list.

Decision Manager User Guide | 255

 Appendix D Information and Reply Codes

Code Description
NEG-EMCO The country in which the email address is located is on the negative list.
NEG-EMDOM The email domain (for example, mail.example.com) is on the negative list.
NEG-FCB The transaction was marked as a fraud chargeback and is on the negative list.
NEG-FP The device fingerprint is on the negative list.
NEG-HIST The transaction is related to a previous suspect transaction.
NEG-ID The customer’s account ID is on the negative list.
NEG-IP The IP address (for example, 10.1.27.63) is on the negative list.
NEG-IP3 The network IP address (for example, 10.1.27) is on the negative list. A network IP address
includes up to 256 IP addresses.
NEG-IPCO The country in which the IP address is located is on the negative list.
NEG-NFCB The transaction was marked as a non-fraud chargeback and is on the negative list.
NEG-PEM A passenger’s email address is on the negative list.
NEG-PH The phone number is on the negative list.
NEG-PID A passenger’s account ID is on the negative list.
NEG-PIP The proxy IP address is on the negative list.
NEG-PPH A passenger’s phone number is on the negative list.
NEG-SA The shipping address is on the negative list.
NEG-SCO The shipping country is on the negative list.
NEG-SID The Smart ID is on the negative list.
NEG-SUSP The transaction was marked as suspected fraud and is on the negative list.
NEG-SZC The shipping postal code is on the negative list.
NEG-TIP The true IP address is on the negative list.
POS-TEMP The customer is on the temporary positive list.
POS-PERM The customer is on the permanent positive list.
REV-BA The billing address is on the review list.
REV-BCO The billing country is on the review list.
REV-BIN The credit card BIN (the first six digits of the number) is on the review list.
REV-BINCO The country in which the credit card was issued is on the review list.
REV-BZC The billing postal code is on the review list.
REV-CC The credit card number is on the review list.
REV-CPF The CPF or CNPJ identification number is on the review list.
REV-CRB The transaction was marked as a creditback and is on the review list.
REV-EM The email address is on the review list.
REV-EMCO The country in which the email address is located is on the review list.
REV-EMDOM The email domain (for example, mail.example.com) is on the review list.
REV-FCB The transaction was marked as a fraud chargeback and is on the review list.

Decision Manager User Guide | 256

 Appendix D Information and Reply Codes

Code Description
REV-ID The customer’s account ID is on the review list.
REV-IP The IP address (for example, 10.1.27.63) is on the review list.
REV-IP3 The network IP address (for example, 10.1.27) is on the review list. A network IP address
includes up to 256 IP addresses.
REV-IPCO The country in which the IP address is located is on the review list.
REV-NFCB The transaction was marked as a non-fraud chargeback and is on the review list.
REV-PEM A passenger’s email address is on the review list.
REV-PH The phone number is on the review list.
REV-PID A passenger’s account ID is on the review list.
REV-PIP The proxy IP address is on the review list.
REV-PPH A passenger’s phone number is on the review list.
REV-SA The shipping address is on the review list.
REV-SCO The shipping country is on the review list.
REV-SID The Smart ID is on the review list.
REV-SUSP The transaction was marked as suspected fraud and is on the review list.
REV-SZC The shipping postal code is on the review list.
REV-TIP The true IP address is on the review list.

Phone Information Codes

Code Description
MM-ACBST The customer’s phone number is not consistent with the state in the billing address.
RISK-AC The customer's area code is associated with higher risk.
RISK-PH The U.S. or Canadian phone number is incomplete, or one or more parts of the number are risky.
TF-AC The phone number uses a toll-free area code.
UNV-AC The area code is invalid.
UNV-OC The area code and/or the telephone prefix are/is invalid.
UNV-PH The phone number is invalid.

Decision Manager User Guide | 257

 Appendix D Information and Reply Codes

Global Velocity Information Codes

The velocity information codes with the suffix -CC refer to credit card and direct debit
account numbers.

Code Description
VEL-ADDR Different billing and/or shipping states (U.S. and Canada only) have been used several times with
the credit card number and/or email address.
VEL-CC Different account numbers have been used several times with the same name or email address.
VEL-NAME Different names have been used several times with the credit card number and/or email address.
VELS-CC The account number has been used several times during the short tracking interval.
VELI-CC The account number has been used several times during the medium tracking interval.
VELL-CC The account number has been used several times during the long tracking interval.
VELV-CC The account number has been used several times during the very long tracking interval.
VELS-EM The customer’s email address has been used several times during the short tracking interval.
VELI-EM The customer’s email address has been used several times during the medium tracking interval.
VELL-EM The customer’s email address has been used several times during the long tracking interval.
VELV-EM The customer’s email address has been used several times during the very long tracking interval.
VELS-FP The device fingerprint has been used several times during the short tracking interval.
VELI-FP The device fingerprint has been used several times during the medium tracking interval.
VELL-FP The device fingerprint has been used several times during the long tracking interval.
VELV-FP The device fingerprint has been used several times during the very long tracking interval.
VELS-IP The IP address has been used several times during the short tracking interval.
VELI-IP The IP address has been used several times during the medium tracking interval.
VELL-IP The IP address has been used several times during the long tracking interval.
VELV-IP The IP address has been used several times during the very long tracking interval.
VELS-SA The shipping address has been used several times during the short tracking interval.
VELI-SA The shipping address has been used several times during the medium tracking interval.
VELL-SA The shipping address has been used several times during the long tracking interval.
VELV-SA The shipping address has been used several times during the very long tracking interval.
VELS-TIP The true IP address has been used several times during the short interval.
VELI-TIP The true IP address has been used several times during the medium interval.
VELL-TIP The true IP address has been used several times during the long interval.

Decision Manager User Guide | 258

 Appendix D Information and Reply Codes

Suspicious Data Information Codes

Additional suspicious data information codes are listed in Appendix A of the Cybersource
Decision Manager Device Fingerprinting Guide.

Code Description
BAD-FP The device is risky.
INTL-BIN The credit card was issued outside of the U.S.
MM-TZTLO The device's time zone is inconsistent with the country's time zones.
MUL-EM The customer has used more than four different email addresses.
NON-BC The billing city is nonsensical.
NON-FN The customer’s first name and last name are identical.
NON-LN The customer’s last name is nonsensical.
OBS-BC The billing city contains obscenities.
OBS-EM The email address contains obscenities.
OBS-FN The customer’s first and last names contain obscenities.
OBS-LN The customer’s middle or last name contains obscenities.
RISK-AVS The combined AVS test result and normalized billing address are risky, such as when the AVS
result indicates an exact match, but the normalized billing address is not deliverable.
RISK-BC The billing city has repeated characters.
RISK-BIN In the past, this payment card BIN has shown a high incidence of fraud.
RISK-DEV Some of the device characteristics are risky.
RISK-FN The customer’s first and last names contain unlikely letter combinations.
RISK-GEO Indicates a suspicious combination of geographic location elements.
RISK-LN The customer’s middle or last name contains unlikely letter combinations.
RISK-PIP The proxy IP address is risky.
RISK-SD The inconsistency in billing and shipping countries is risky.
RISK-TB The day and time of the order associated with the billing address is risky.
RISK-TIP The true IP address is risky.
RISK-TS The day and time of the order associated with the shipping address is risky.

Decision Manager User Guide | 259

 Appendix D Information and Reply Codes

Excessive Identity Changes

These codes represent excessive identity changes. You receive an information code when
more than two identity changes occur.

Customer identity refers to one or more of these elements: account and phone numbers,
and billing, shipping, email, and IP addresses.

Additional excessive identity change information codes are listed in Appendix A of the
Cybersource Decision Manager Device Fingerprinting Guide.

Code Description
MORPH-B The same billing address has been used several times with multiple customer identities.
MORPH-C The same account number has been used several times with multiple customer identities.
MORPH-E The same email address has been used several times with multiple customer identities.
MORPH-I The same IP address has been used several times with multiple customer identities.
MORPH-P The same phone number has been used several times with multiple customer identities.
MORPH-S The same shipping address has been used several times with multiple customer identities.

Decision Manager User Guide | 260

 Appendix D Information and Reply Codes

Fraud Score Identity Information

These codes represent both positive and negative customer identity behavior and are
designed to track changes in identity over a period of time. They are generated using
customer identity elements such as account number and email.

Two sets of information codes are provided; ID-M codes are based on your own
transaction data and ID-X codes are based on global transaction data.

Code Description
Merchant Fraud Score Identify Information Codes
ID-M-NEG Correlation with past negative behavior.
ID-M-POS Correlation with past positive behavior.
ID-M-HNEG Correlation with past negative behavior is high.
ID-M-HPOS Correlation with past positive behavior is high.
ID-M- Correlation with past behavior not available due to no history.
NoHistory
Global Fraud Score Identify Information Codes
ID-X-NEG Correlation with past negative global behavior.
ID-X-POS Correlation with past positive global behavior.
ID-X-HNEG Correlation with past negative global behavior is high.
ID-X-HPOS Correlation with past positive global behavior is high.
ID-X-NoHistory Correlation with past global behavior not available due to no history.

Device Behavior Information Codes

The device behavior codes indicate auto-complete, auto-fill, disabled keyboard or mouse,
mouse off page, and copy and paste behavior.

In order to use device behavior information codes for mobile applications, you
must use SDK version 6.1 or later.

Table 48 Device Behavior Information Codes

Code Description
Auto-Complete
AC-ADDR Auto-completed address information
AC-CC Auto-completed credit card information
AC-EMAIL Auto-completed email

Decision Manager User Guide | 261

 Appendix D Information and Reply Codes

Table 48 Device Behavior Information Codes (Continued)

Code Description
AC-NAME Auto-completed name
AC-PASSWORD Auto-completed password
AC-PHONE Auto-completed telephone number
AC-USERNAME Auto-completed user name
AutoCompleteDetected Auto complete detected
Auto-Fill
AF-ADDR Auto-filled address information
AF-CC Auto-filled credit card information
AF-EMAIL Auto-filled email
AF-NAME Auto-filled name
AF-PASSWORD Auto-filled password
AF-PHONE Auto-filled telephone number
AF-USERNAME Auto-filled user name
AutoFillDetected Auto fill detected
Keyboard or Mouse Disabled
KeyMouseDisabled Keyboard or mouse detection disabled
Mouse Off Page
MOP-ADDR Mouse-off-page address information
MOP-CC Mouse-off-page credit card information
MOP-EMAIL Mouse-off-page email
MOP-NAME Mouse-off-page name
MOP-PASSWORD Mouse-off-page password
MOP-PHONE Mouse-off-page telephone number
MOP-USERNAME Mouse-off-page user name
MouseOffPageDetected Mouse off page detected
Copy and Paste
PASTED-ADDR Pasted address information
PASTED-CC Pasted credit card information
PASTED-EMAIL Pasted email
PASTED-NAME Pasted name
PASTED-PASSWORD Pasted password
PASTED-PHONE Pasted telephone number
PASTED-USERNAME Pasted user name
PasteDetected Paste detected

Decision Manager User Guide | 262