Sandbox related questions can be found here.

Sandbox FAQ

What is the difference of `id` and `seon_id`?

Do you have a test environment?

If we manually flag a group of IPs under our demo account, will they be flagged in the entire system? And will they be flagged when the system goes live?

Is there a limit on characters during rule creation?

What is a data breach?

How we charge and bill you for using SEON.

Billing and pricing FAQ

Do we have to pay for each use of the Device Fingerprinting SDK?

Does using the Device fingerprinting module come with an additional cost?

Are the APIs billed by call or by a unique identifier?

Do we have to pay for sending device information from our front end?

Are we charged for the Fraud API calls in a sandbox account?

Can I check my current balance and API-request costs?

Questions and answers about using the SEON admin panel.

Admin Panel FAQ

How can I report a disposable email address/domain?

How do I use the manual page & batch testing?

How do I set up rules?

Does the interval of 1 month during rule creation equal to 30 days?

Can you confirm how the 'total amount saved' is calculated in the dashboard?

Is it possible to change the transaction presentation list view without having permission for the general settings change?

I am trying to filter for the related transactions that have triggered a specific rule, how to do this?

Cancel your subscription from the Admin Panel.

How can I cancel my subscription?

What browsers does SEON support?

Rules FAQ

Is there a limit of sentences that can be added under the same rule?

Do you have a manual that describes all the rules?

Is there any way we can use SEON to classify players by risk? For example, is there a risk classification system that already exists within SEON?

What happens if I have a rule that sets the State to Review and at the same time I have a rule that sets a score? Does the State rule override the Decline from the score?

Should we send in all transactional information that we capture, including failed deposits?

What does the Medium-Risk and High-Risk Threshold number represent?

I have a rule that only modifies the score, not the state. Is there a way to test it?

Is there a quick way to duplicate rules?

Does SEON help with self-exclusion?

How can I filter for transactions by a specific rule they triggered?

Features FAQ

Is it possible to leave a comment when bulk uploading a blacklist file?

How can I whitelist a user?

Where can I see if a DECLINE transaction was reviewed?

How can we configure 2 different webhooks for test & prod?

While there is an IP or Email score greater than 0, the amount is not added to the total of the Fraud score, how is this possible?

What is a normal list?

We would like to store the user_id in order to have it as a reference later, how should we do this?

Is there an easy way to duplicate rules?

If the email, which is already known to us, had been labelled as a fraud by some other merchant, would we get any notification about that?

Does SEON support IPv6 addresses?

How often is the IP database updated?

Is SEON capable of providing a fraud score for a user without us passing an email address?

What are some examples for the line: "Fraud Prevention service Fee (Fraud+Email requests in March): Email+Fraud API" ?

How we should use Fraud API if we need device data only?

I am trying to filter for all transactions that have triggered a specific rule. Do I have to use the "applied rule" sub-filter? I am trying to filter for all transactions that have triggered "User's user_address_hash". 

How does password_hash matching work?

Can you monitor PoS and ATM transactions?

Are you able to sort the results by Score successfully once the filter is applied?

Is there a way to delete a file uploaded to blacklist/whitelist?

Is it possible to change the transaction presentation list view without having privilege to the general settings change?

Is there a way to see applied rule statistics not only for the most used rules, but also for a certain rule?

Can we somehow recover data from our transactions?

How can we activate the Card widget in SEON?

If there isn't a way to verify payment provider accounts, can we at least have info if such an account has already been requested for verification?

Are you able to block a high volume of traffic from certain countries? 

Does the Fraud API provide verification for Paysafe accounts?

Does SEON collect and store full-size profile images during data enrichment, and can I access these?

Is SEON PCI DSS compliant?

Is sending card hashes to SEON PCI DSS compliant?

Is sending 8, 9 digit BINs to SEON PCI DSS compliant?

Miscellaneous FAQ

What is 2FA and how does it work in SEON?

What is public data and how does SEON use it?

How do we verify if a social profile is real and not just a newly created holding account?

How easy is it for fraudsters to adjust their techniques around SEON's fraud detection solution?

Do you support LDAP user authentication?

Is your solution cloud-based, or can we deploy and maintain it on our own platform?

Our Customer Success team can help you in deleting your account.

How can I delete my account?

Dive into the details of SEON's AML and KYC tools.

AML API

What is AML API?

How does AML API work?

Does AML API have global coverage?

What is 6AMLD?

How does monitoring work?

Will I get notifications of monitoring changes?

Can I use AML API results in rules?

Blacklisting and whitelisting items, flagging suspicious transactions and creating custom lists.

Lists and flagging

We had been getting fraudulent orders before joining SEON. Is it possible to blacklist those emails and IP addresses?

Is it possible to add combined conditions to the blacklist? (e.g. Email + IP address)

Is it possible to blacklist a card hash directly on the transaction details page?

If I manually flag a group of IPs on a trial account in the Sandbox environment, will they be flagged in the whole system and when the system goes live?

Would we get a notification if an email already known to us had been flagged as fraud by another merchant?

Is there a possibility of editing a record on the blacklist (for example, adding a comment)?

Is there a way to delete a file uploaded to the blacklist/whitelist?

Is there any restriction to the type of data points we can use in SEON?

Questions related to APIs, Device Fingerprinting, and integrating SEON.

Integration

Where can I see all the input fields, are there any examples? Can I add custom fields as well?

Is there a possibility to edit a record at blacklist (for example to add a comment)?

How can we integrate a third party identity verification software in SEON?

Do you use any 3rd party providers for email/phone data enrichment?

What is the JavaScript CDN?

Our servers are located in North America, do you have a mirror nearby?

Would I be able to initiate a Fraud API call client-side?

Is it enough to use JS seon.saveSession once per call?

What is an open port, how can it help detecting fraud?

Do IP addresses need to be whitelisted for API access on SEON?

Where can I get the license_key I need?

We're getting a lot of "All APIs +Device, normal Fraud API calls for deposits and withdrawals", but not many "Email+Fraud API+Device". Why is that?

Can you provide a CSP-Settings which is needed to be done here for your script to work properly?

Unauthorised access, account hacking/takeover, whatever you call it, it is a nuisance. How can you prevent it?

If we send a transaction to SEON, will it appear immediately in the dashboard or is there a delay?

Is there a limit as to how often checks are performed?

Should we send session_id alongside with the session or can we ignore the session_id and not send it?

How is the card hash calculated? What data is fed into the hashing?

What is the maximum timeout for both APIs? (Fraud API & Phone API)

Where can I find our API key?

What is the maximum length of request parameters?

What should the 'device_id' contain and is it a mandatory field?

Which version value should we use for the different APIs?

In order to obtain the most accurate fraud score does having the card details make a big difference?

What happens in case the device fingerprinting module is called yet no session payload is sent in the request?

How long does it usually take for the JSAgent to load?

Does the JS Agent v4.0 work with the Fraud API v1.0?

Does it cost extra to use the 'include' parameter to receive additional API information (history, flags, id)?

One of your API endpoints is asking for password_hash. How important is this and what would you expect the method of hashing the password is?

How does the PUT endpoint work?

Is there a way to get raw data that SEON has received or stored?

How is the user ID generated?

Is there a difference between sandbox and prod key?

We are currently using v1 of the Fraud API. Is there any good reason to upgrade it to v2?

What would be the current equivalent of email_details.email_exists?

What is the name of the purchase and registration API methods?

Is it possible to use the same key for 2 different websites, if so what are the differences between using the same or a separate key?

Should the AAP be called by API or by the backend system?

Should the seon.saveSession() be called in order to get the fingerprints for a successfully configured session_id with the Javascript agent?

Do we leave the public key on JS v4, that we are using on the v3?

If we would like to check transactions in crypto currencies, is it possible to send transaction_amount as xx.xxxxxxxxx (lots of digits after .)? And transaction_currency like BTC, etc.?

Device info is not being picked up for certain customers and transactions. Is it because the device info call is made after the Fraud API-call on customer registration or sign in?

Can we provide our merchants the possibility to mark transactions with the Label API directly?

What is the "Label API" used for?

If we use SDK on app side instead of JS agent, should we send true for 'javascript' in Fraud API call?

What action_type is the best to use when a user adds a new email address to their account?

Is there a built in API against spamming in SEON? What do we do in the case of API abuse on the frontend?

How long do you store data as default at SEON?

Does SEON track virtual numbers and disposable, temporary phone numbers?

What are harmful IPs?

What devices are included in the Device Fingerprinting feature?

How many digits can you check for Card BINs?

How is encryption handled in SEON?

What does SEON look for to check spoofing under suspicious browser profiles?

What makes certain browsers high-risk?

Which browser extensions can I use to test the device fingerprinting module?

How do you decide which browsers are fraudulent?

Is it possible to expand on the current fields with additional data points?

What does "Customer is using a datacenter ISP" mean?

Which fingerprinting hash should I use to determine whether two accounts belong to the same person?

Can the APIs get data about the user's age?

Is there documentation about the device fingerprinting and the different hashes?

What does "device hash" mean exactly?

What is the standard expected information to share that you need when it comes to crypto transactions?

Are you able to detect if someone is preventing port scans?

When the email is not deliverable should we consider that the email address doesn't exist?

When should we call device fingerprinting?

Which APIs should we run at registration?

How should we use Fraud API if we only need device data?

How does password hash matching work?

Do we need to provide an email address for SEON to assign a Fraud Score for a user?

Where can I see all input fields, are there any examples? Can I add custom fields as well?

Is there a field in the Fraud API where a Paysafe account number can be passed?

In order to verify additional user details such as phone number, address, and bank account we have used the action_type 'verification'. Does it matter which one will be used, and if so, is there a better one?

Can we recover data from our past transactions in SEON?

Is there a retry logic in place for failed webhook deliveries?

Does your service simply accept or decline requests based on the data we send? Or do you provide a detailed response?

Can we access the payload only through the Admin Panel?

The Fraud API has both the State and the Score in the response, but other APIs don't. Why is that?

FAQ