#### Composing Rules for Anti-Fraud Filter

The list of rules in a fraud filter is shown under the Rules List tab of a fraud filter properties. The list of rules displays the following:

- Title. A rule alphanumeric identifier that does not affect a rule functionality, it is just for your reference. You can assign a rule name while creating or rename a rule later, at any moment.
- Plug-in. The fraud plug-in used in a rule. The fraud plug-in can be selected for a rule once and for all, while creating a rule. If you want to use another plug-in in a fraud filter, you should create a new rule that uses this plug-in. If you do not want to use a fraud plug-in in a filter, then either deactivate a rule or delete it.
- Active. Shows whether a rule is used for fraud check (active) or not. Green tick means that a rule is active and used for checking, red cross means that a rule is currently disabled and thus is ignored and does not used for checking. You can activate or disable a rule at any moment, by editing a rule properties.
- Action. An action to be performed in case a rule condition is fulfilled, i.e., a fraud plug-in response corresponds to a rule condition. One of the following actions can be assigned to each rule in a fraud filter:
  - Alert. In case a rule condition is fulfilled, fraud points defined by you for a rule will be scored to an order and in case after this an order total fraud score exceeds a filter threshold score, such an order will be put in the Documents for Approval queue, otherwise, an order passes to the next rule (if any) in a filter.
  - Reject. In case a rule condition is fulfilled, an order will be put in the Documents for Approval queue immediately without respect to an order total score. This action is used in Account Registration and Login filters.
  - Bonus. In case a rule condition is fulfilled, fraud points defined by you for a rule will be taken from an order score, so an order total score will be decreased and such an order will get more chances to pass through the fraud check.
  - Need Approval. In case a rule condition is fulfilled, an order is placed into the Anti-Fraud Manager Checklist and waits for manual approval. No points are scored.
  - Approval. In case a rule condition is fulfilled, an order passes a rule with Approved result. No points are scored.
  - Alert External Score. Use score returned by the plug-in.
  - Bonus External Score. Use score returned by the plug-in.

    Note: As the external score is selected, the Score field becomes inactive. At the same time, you can specify the score correction factor in the Points to be scored per one point received from external Anti-Fraud system field. Important: The Dummy anti-fraud plug-in does not check if the usage of external score is enabled in the plug-in configuration, so please make sure that the plug-in score is enabled if you select to use the external score for the Dummy plug-in.

- Score. The number of points scored or taken from an order depending on an action set for a rule.

  If you have selected the lug-in that returns a fraud score (for example Fraud Guardian or Dummy plug-in in a synchronous mode), then the following additional options are available

- Points to be scored per one point received from external Anti-Fraud system. Here you specify the score correction factor in case you use the score returned by the pug-in.

To activate or disable a rule in a filter:

1. Select a filter.
2. Select the Rules List tab from the set of a filter properties.
3. Select a rule.
4. Click the Edit button.
5. Check or clear the Active box to activate or disable a rule respectively and then save changes.

To add a rule to a fraud filter:

1. Select a filter by clicking on its Title.
2. Select the Rule's Table tab from a filter properties that appear on the screen. The list of rules included in the filter (if any) appears on the screen.
3. Click the Create New Rule button.
4. Select the plug-in to be used in a rule by setting the option button to one of the conditions under one of the fraud plug-ins.

   Note: It is possible to select only one fraud plug-in per rule.

5. Click the Next button.
6. Adjust the rule configuration by filling the form that appears:
   1. You can enter a rule name into the Title field. By default, this field is pre-filled with the name of the condition you have selected on the previous step. You can leave the default title or type another name you consider more convenient.
   2. From the Action drop-down menu, please select an action to be performed in case a fraud plug-in response corresponds to the condition selected. Please note that actions differ depending a condition selected. For example, if you have selected the condition like "Customer e-mail is in the Black List" (which means that fraud is quite possible) you will be offered to select either Alert or Reject action. If you select the condition like "Customer phone number is not in the Black List" (which means that an e-mail is OK), you will be offered to select the Bonus action.
   3. Enter the number of points to be scored to or taken off an order depending on the rule condition fulfillment into the Score field.

      Note: The corresponding fraud filter threshold score is shown below the Score field. Please, set the rule score accordingly.

   4. To use the check defined by the rule, check the Active box. If the Active box remains clear, the rule will be not used for the chain of checks defined for the filter.
7. Click the Save button.

Please send us your feedback on this help page