ePlatform – Equifax · Page 6 E-Platform Equifax Authentication FPS GOLD 1 Overview The following...

Institution Guide

ePlatform – Equifax Risk Management Solution

Platform Department

This page intentionally left blank.

_____________________________________________________________________________________________ FPS GOLD ePlatform Equifax Authentication Page 3

TABLE OF CONTENTS 1 Overview ............................................................................................................................................... 6

2 Input Data ............................................................................................................................................. 7

3 Equifax Process .................................................................................................................................... 8

3.1 General Information ..................................................................................................................... 9

3.2 The Process (Equifax Process Flowchart) ................................................................................ 11

4 Pending Online Applications/FPS GOLD Process ............................................................................. 17

5 Assessment ........................................................................................................................................ 18

Appendix A: Reason Codes ........................................................................................................................ 21

Appendix B: Error Fields for Standard Field Checks .................................................................................. 28

CONFIDENTIAL

_____________________________________________________________________________________________ Page 4 E-Platform Equifax Authentication FPS GOLD

COPYRIGHT © 2009, 2010 DHI Computing Service, Inc. 1525 West 820 North Provo, Utah 84601 (801) 373-8518 www.fps-gold.com ALL RIGHTS RESERVED 1/2010

CONFIDENTIAL

This document is the property of DHI Computing Service, Inc., d.b.a. FPS GOLD

®. No part of this document may be

reproduced or transmitted in any form or by any means, electronic or mechanical, for any purpose, without permission from FPS GOLD. Please honor all copyright laws regarding trademarks and registered trademarks in this document.

_____________________________________________________________________________________________ FPS GOLD E-Platform Equifax Authentication Page 5

ePlatform Equifax Authentication Equifax

® authentication is an add-on product that can be purchased and included with the ePlatform

™

deposit account opening product. Equifax resources enable your institution to automatically check the identities of new deposit account applicants via the Internet. The following documentation contains both FPS GOLD and Equifax product features and functions. FPS GOLD interfaces with two Equifax products: eIDverifier and eIDcompare. These products evaluate the applicants’ personal information for a new deposit account.Responses are sent back to FPS GOLD and used to complete the account opening process. The options you select on the FPS GOLD

® ePlatform

Setup form determine how these products are utilized by your institution.

The following documentation focuses on eIDverifier. Any differences with eIDcompare will be noted. Note: Parts of this document have been taken with permission from the Equifax eIDverifier

® US Customer

Implementation Guide.

ePLATFORM EQUIFAX AUTHENTICATION


1 Overview The following diagram illustrates a simplistic view of the authentication process.

(A) A prospective customer enters information for a new account in the application on your bank’s Web site. The first name entered is deemed the primary applicant and eIDverifier is used for this applicant. The personal data entered is submitted and FPS GOLD completes a check on the data prior to sending it to Equifax. This is an initial validation of data and includes data formats, incomplete or missing data, and invalid data. The application cannot move forward until all errors are corrected. (B) Once all the errors in the data are corrected, FPS GOLD sends the information to Equifax DHI eIDVerifier Web Service. (C) Equifax processes the data and generates results (see the ID Verification Process section). (D) The Equifax results are used to calculate a decision about the applicant, then FPS GOLD calculates a decision for the application. The criteria used are based on assessment selections your institution makes on the FPS GOLD ePlatform Setup Form. (E) The information can be viewed in Pending Online Applications, found on the CIM GOLD > Customer Relationship Management > Pending Online Applications screen.

This process continues for each additional co-applicant using the eIDcompare product.

Web Applicant

(A)

DHI eIDVerifier

(B)

Equifax (C)

Assessment (D) Pending Online Applications (E)

The DHI eIDVerifier Web Service is the communication between FPS GOLD and Equifax as well as the application and Pending Online Applications.



2 Input Data Key data is collected during the application process. Each applicant is reviewed individually, reviewing first the primary applicant and then each co-applicant. FPS GOLD and Equifax require the following data elements for eIDverifier and eIDcompare:

Name (first and last)

Current address (street address, city, state, ZIP code)

Social Security Number (SSN)

Primary applicant’s home phone

Date of birth

How long at this address* *Note: The How Long At This Address value is entered and interpreted in months. The physical address of the applicant is used as the current address on Equifax. If the length of months entered in the How Long At This Address field is less than 24, a Previous Address section is added to the application page that requires the entry of an additional previous address. All of this information is captured and saved by FPS GOLD in Pending Online Applications.

There are also several optional fields. If you require additional fields , FPS GOLD can add them to your form. Any data submitted by the user is used in the validation process. Equifax requires the primary applicant to fill in more required fields than co-applicants. The field checking is a combination of FPS GOLD and Equifax evaluations.



3 ID Verification Process During the ID Verification process, Equifax evaluates the applicant’s information and obtains results. The following diagram shows how applicant information flows through the eIDverifier process, indicating the critical points at which a transaction could potentially fail. It also displays the path for pass and fail transactional conditions, the point at which these conditions are reported to the consumer, and how processing activity is logged. The pass/fail conditions are respective to this process and are not the same as the overall assessment. Refer to the Pending Online Applications section for more clarification.

Note: eIDverifier is used in the following scenario.. The process follows these steps:

1. Application data is entered. 2. FPS GOLD performs data validation checks, including age greater than 18, ZIP code, and data

formats. 3. Equifax disclosure is presented (primary applicant only).

a. If the customer agrees to the Equifax disclosure, the process continues and performs the Equifax standard field checks.

b. If the customer does not agree to the Equifax disclosure, the following messages are sent back to the applicant.

i. Warning Message: Disagreeing will discontinue your entire application. Are you sure you want to proceed? - If the applicant continues they are sent the following message (this message is customizable).

ii. Application Termination Message: Your application has been discontinued because we required that you agree to the disclosure. You are welcome to apply again when you can agree to the disclosure. If the applicant disagrees, the application status is saved as Cancel in Pending Online Applications. The Last Page field indicates the application was cancelled at the disclosure section and the information entered on the application before the cancellation is saved in Pending Online Applications (name, address, etc.).



Equifax Process Flow/eIDverifier View

3.1 General Information The assessment values from Equifax are stored and viewable in Pending Online Applications. In the following explanation, the Pending Online Applications field name is included in parentheses.

Transaction Status (Transaction Status (from Equifax)) - This status shows where in the Equifax process the applicant ended. Codes are as follows:

Code A indicates that the applicant completed all applicable Equifax processing. Reason codes may be present.

(*)Codes F, V, and P are failed statuses indicating that the entire Equifax process did not complete. If the Transaction Status is any of these codes, there will also be associated reason codes. Error fields (in the error message) for F or V indicate the error that caused the failure.

Code R indicates that the applicant is in a review status. This is the result of an OFAC hit. Refer to the specific OFAC reason code.



Code X and E indicate that the Equifax processing did not complete successfully. If an X or E status is assigned, the applicant final decision (Pending Online Applications) reflects an exception status. This results in an exception for the final application score. No Equifax data will be available.

Reason Codes (Reason Codes (from Equifax)) – The values in this field indicate any processing errors or messages encountered during the authentication process. Reason codes may fail an applicant. Combinations of reason codes can be used to pass, review, or fail an applicant. Reason codes are part of the decision process.

Appendix A contains a listing from the Equifax eIDverifier

® US Customer Implementation Guide of reason

code possibilities. The codes are listed in the point of the process they can occur and follow the general flowchart process.

Error Fields (Error Message (from Equifax)) – If the Transaction Status field indicates a Standard Field Check status, there will be an error(s) field code to indicate the error type that caused the failed status. Appendix B contains a listing of error fields. Possible Final Applicant/Application Decisions are:

Exception (Transaction Status X or E) – an FPS GOLD-generated decision

Cancel (Transaction Status C) – an applicant-generated decision

Incomplete Authentication (Transaction Status F, P, or V) – an FPS GOLD-generated decision

Review (Transaction Status R) – an Equifax-generated decision

Fail (Transaction Status N/F) – an Equifax-generated decision

Pass (Transaction Status Y/P) – an Equifax-generated decision Refer to the Pending Online Banking section to see how applicant/application decisions are viewed.

Status/Decisions not Based on Authentication Assessment are:

Exception Decision: If an unexpected error occurs at anytime during the authentication process (e.g., a loss of communication with Equifax or an unexpected response from Equifax), the applicant decision will become either an X (Equifax) or an E (FPS GOLD). This does not discontinue the application process, but the authentication process did not take place which may cause the Application Final Decision to result in an Exception status. These applications should be reviewed.

o Note: There is an institution option that can be set to enable a message that allows applicants to resubmit their application once if the exception is X (Equifax) and the quiz has not yet been given.

Cancel Decision: Applicants are given the opportunity to cancel their application several times during the authentication process. If applicants click the <Cancel> or <Quit> button, the application is given a Cancel status. The Last Page field indicates the application was cancelled at a particular section and the information entered on the application before the cancellation is saved in Pending Online Applications > Account Information tab.

Incomplete Authentication Decision: This decision is based on the first three phases of the authentication process. Possible reasons for this include:

o the applicant did not supply enough data, o the data was not correctly formatted, or o there were other issues with the supplied data.

This Incomplete Authentication Decision is a good reason to deny an application during the account opening process.



3.2 The Process (Equifax Process Flowchart) Standard Field Checks After FPS GOLD validates the data, Equifax validates it too. Data is checked for formatting, incomplete and missing information, etc. If this section of authentication fails, the returned error message indicates where in the process the failure occurred. If the process fails at this point, the Transaction Status field will have an F – SFC failure message indicating that the errors were never corrected and the Equifax flow did not continue. The return messages for incomplete or incorrect input data continue until the data is corrected and accepted. Applicants cannot get beyond this part of the authentication process until all errors are corrected. Retries are unlimited and no reason codes are returned. Applicants can click the <Cancel> to quit the application (resulting in a Cancel status). If an application is cancelled, the Last Page field indicates the application was cancelled at a particular section and the information entered on the application before the cancellation is saved in Pending Online Applications (name, address, etc.).

Applicant Final Decision (Pending Online Applications) – Incomplete Authentication Note: If you receive a failure in this section of the process, notify FPS GOLD.

Key fields in Pending Online Applications have the following result with this failure. Pending Online Applications:

Transaction Status (From Equifax) = F

Strategy Decision = Blank

Error Message (From Equifax)

Applicant Final Decision (From FPS GOLD) = Incomplete Authentication

Final Application Decision (From FPS GOLD) = Incomplete Authentication If the application passes Standard Field Checks, it continues to Application Verification.

Application Verification This is an optional level of authentication that FPS GOLD has elected to use. Equifax uses a variety of sources to verify that the data is considered reasonable. For example, they can determine that the SSN was a valid number in the year of applicant’s birth, the address is not on a hot address list, and the phone area code matches the ZIP code. A one-time retry is allowed if an error is detected. (A retry is not allowed for birth dates, Social Security numbers, or Hot Address errors.) If the data errors are not corrected on the retry, Equifax ends the authentication process and indicates the failure in the Transaction Status field in Pending Online Applications.

Note: FPS GOLD verifies that applicants are 18 years or older prior to sending the information to Equifax. If the primary applicant fails this authentication, the entire application is failed. The Transaction Status field contains a “V,” sending the application with an Incomplete Authentication decision to FPS GOLD. If a co-applicant fails the authentication, you can (based on setup options):

clear the failed applicant from the application and add a new a co-applicant,

clear the failed applicant from the application without adding a new co-applicant, or

continue with the failed co-applicant. If the Transaction Status field contains the V–AV correction or failure message, the following reason codes were assigned (these reason codes stop the authentication process).

Under the age of 18 (Reason Code 04)

Hot Address (Reason Code 22)

Invalid or hot SSN (Reason Code 03)



Refer to the Reason Code section for all applicable reason codes for Application Verification. The Reason Code field in Pending Online Applications lists each of the reason codes Equifax returns for the application. Other Application Verification reason codes may be assigned that are either informational (do not result in an incomplete status) or can be part of the risk strategy (pass/fail). Application Termination Message: We're sorry, but we could not validate your identity. Please contact the bank for further assistance. Thank you. This message can be customized. Note: This message should be customized.

Applicant Final Decision (Pending Online Applications) – Failed. Key fields in Pending Online Applications have the following result with this failure.

Transaction Status (From Equifax) = V


Reason Codes (From Equifax) = (Refer to the Reason Code section)


Final Application Decision (From FPS GOLD) = Incomplete Authentication

Address Standard – Current (From Equifax)

Address Standard – Previous (From Equifax)

Address Standard – DL (From Equifax)

The Address Standard values are S - address standard, F – failed address standardization, N – didn’t try to standardize address.

If the application passes Application Verification, it continues to Pattern Recognition.

Pattern Recognition To detect multiple authentication attempts by the same consumer, pattern recognition algorithms are applied to each transaction. Duplicate attempts are not conclusively fraudulent, but this situation is flagged so appropriate decisions can be made about whether the repeated attempts are a result of consumer error or attempted fraud. The pattern recognition process uses various fields provided by the consumer to detect the number of times the same consumer has applied for authentication within a given period of time. Pattern Recognition is employed as follows, based on the customer’s configuration:

If the same consumer (address ignored) attempts authentication more than once within a 72-hour period across the entire customer base, the following occurs:

o During the first and second authentication attempts within a 72-hour period, the customer receives a set of dynamically-generated quiz questions.

o During the third authentication attempt within a 72-hour period, a Fraud Failure message is returned to the customer and no quiz questions are provided. This continues for each subsequent attempt until 72 hours have elapsed since the last authentication attempt.

o Once 72 hours have elapsed since the last authentication attempt, the customer receives a new set of dynamically-generated quiz questions, as if authenticating for the first time.

If the same address (with a different or blank Social Security number) is used to attempt authentication more than two times within a 90-day period within the same configuration, a warning message is returned to the customer and processing continues. The warning message contains 1 or 3 reason codes indicating that 3-5 attempts, 1-20 attempts, or greater than 10 attempts have been made to authenticate during a 90-day period.

If the same address (with a different last name) is used to attempt authentication more than two times within a 90-day period within the same configuration, a warning message is returned to the customer and processing continues. The warning message contains 1 or 3 reason codes indicating that 3-5 attempts, 6-10 attempts, or greater than 10 attempts have been made to authenticate during a 90-day period.



If reason code 07 is assigned, the Transaction Status field contains a P – pattern recognition message and the Equifax process stops. The Reason Code field in Pending Online Applications lists each of the reason codes Equifax returns for this application. Other pattern recognition reason codes may be assigned that are either informational (do not result in an incomplete status) or can be part of the risk strategy (pass/fail).

If the primary applicant fails this authentication, the entire application is failed. The Transaction Status field contains a “P,” sending the application with an Incomplete Authentication decision to FPS GOLD. If a co-applicant fails the authentication, you can (based on setup options):

clear the failed applicant from the application and add a new a co-applicant,

clear the failed applicant from the application without adding a new co-applicant, or

continue with the failed co-applicant.

Applicant Final Decision (Pending Online Applications) – Incomplete Authentication. Note: FPS GOLD uses Equifax’s default velocity counters.

Key fields in Pending Online Applications have the following result with this failure:

Transaction Status (From Equifax) = P


Reason Codes (From Equifax) = 07 - Pattern recognition match found


Final Application Decision (From FPS GOLD) = Incomplete Authentication Application Termination Message. We're sorry, but we could not validate your identity. Please contact the bank for further assistance. Thank you. This message can be customized. Note: This message should be customized.

Note: Standard Field Checks, Application Verification, and Pattern Recognition are the only authentication points that can result in an Equifax status of Incomplete Authentication.

If the application passes Pattern Recognition, it continues in the authentication process.

Decision: Review Equifax OFAC (Add-on Product) Both eIDverifier (primary) and eIDcompare (co-applicant) run OFAC. If there is a hit, it results in an automatic review status in the Strategy Decision field for the applicant. To view the hit refer to the reason codes found in Pending Online Applications or for a complete list of reason codes refer to Appendix A.

If the application passes Equifax OFAC verification, the assessment of the applicant is complete. Equifax now calculates a decision for the applicant.

Decision: Pass or Fail Fraud Check Several different data sources are used in this section of authentication and several fields are used to display the results of the Fraud Check in Pending Online Applications. The Fraud Check authentication results in a pass or review status. The transaction status is an “A” or “S,” indicating that all authentication processes completed. Fraud Victim Model Reason Code Configuration is a critical component and is part of the FACT ACT. This section includes customers who place alerts on their credit because of either being a victim of fraud or are concerned about becoming a victim. This helps restrict the credit that is issued in their name.



Reason codes dealing with Fraud Victim Model Reason Code Configuration appear in the Reason Code field in Pending Online Applications.

Reason Code 33 – Fraud Victim Warning present / information has been blocked due to identity theft. This stops the process and no quiz questions are given. The interactive quiz score is equal to 0.

Reason Code FX – Fraud Victim “Long Term Fraud Alert.” This stops the process and no quiz questions are given. The interactive quiz score is equal to 0.

Reason Code 53 – Consumer Requested Security Freeze. This stops the process and no quiz questions are given. The interactive quiz score is equal to 0.

Reason Code FH – Suspicious Incoming Data. This stops the process and no quiz questions are given. The interactive quiz score is equal to 0.

Reason Code 39 – California Law AB 655 – Inquiry address does not match the one on credit file. The address State field on either the input or credit file is equal to California. This does not stop the process and the interactive quiz is used.

Reason Code FV – Fraud Victim “Temporary Fraud Alert.” This does not stop the process and the interactive quiz is used.

Reason Code FN – Military Duty Alert. This does not stop the process and the interactive quiz is used.

Reason Code FT – California Resident Fraud Victim. This does not stop the process and the interactive quiz is used.

There is consumer contact information that can be used to contact customers if their credit history is accessed. This is located in Pending Online Applications on the Contact Information tab and can be looked at if the reason codes indicate the customer has a fraud alert on their credit. If contact information is available, customers can be personally contacted for verification. Refer to the Contact Information section in the Pending Online Applications section for more information. Refer to the Interactive Query – IQ section in this section to learn how the quiz is applied.

Transaction Status = A (authentication completed) uses the following results in assessing whether an applicant is put in a status of pass or review.

Transaction Status (From Equifax) = A

Fraud Assessment Score (OS) = 0 (bad), 1–8 (highest to lowest risk). This score indicates the likelihood of the consumer application presenting fraudulent information. If the score is zero, it indicates that customer-defined fraud-indicating reason codes and velocity-counter thresholds (pattern recognition) were met with the transaction.

Fraud Indicator (FI) = W—Warning, V—Victim of Fraud, B—Both Warning and Victim of Fraud. If this field is blank, then there is no fraud warning.

o W—Warning Address-related and telephone potential fraud warnings are found. For example,

the applicant’s address belongs to a U.S. Postal Office (PO) street address or a mail receiving service.

Multiple validation attempts are being conducted using the same address and the consumer’s address cannot be validated on any trusted third-party data sources.

o V—Victim Potential fraud in connection with the applicant’s Social Security number (a

warning code is returned). Applicant’s information may be tied to the true name fraud or a fraud victim. Applicant’s address matches an address in the EAS Hot Address database. Multiple fraud warnings are detected in connection with a consumer record. Multiple authentication attempts are being made by the same consumer.

o B—Both Warning and Victim of Fraud

Fraud Index Score (II) = Valid values are 0–999 and 0 is the best score. The Fraud Index score determines how likely the ID provided could be associated with ID-fraud activity. It populates whenever one or more data sources have been accessed with a transaction. It does not guarantee that the identity exists.



Match Assessment (MA) = 0, A–G. 0 is the worst and A is the best. These indicate the data sources used to validate the applicant’s identity. They are as follows:

o 0—Name and address cannot be verified on any data source. o A—Name and address verified on all data sources. o B—Name and address verified on primary and secondary data sources. o C—Name and address verified on primary and tertiary data sources. o D—Name and address verified on primary data source. o E—Name and address verified on secondary and tertiary data sources. o F—Name and address verified on secondary data source. o G—Name and address verified on tertiary data source.

Reason Codes (From Equifax) = Refer to the Reason Code section. Interactive Query Quiz This quiz is always provided to the primary applicant (eIDverifier). The only exceptions to this are reason codes associated to the Fraud Victim Model (33, FX, 53, FH). If any of these reason codes are detected, the quiz is not presented and the Interactive Query score is zero. The Interactive Query is a set of questions that helps to further identify the primary applicant. Most are questions about the applicant’s Social Security number that the applicant should be able to answer. This is based on the information gleaned from Equifax and other sources. Six is the maximum number of questions. Equifax determines the number of questions presented to the consumer based on overall authentication results. The quiz questions can be real data or simulated data and can be extracted from the applicant’s credit or personal data.

Assessment Results (Pending Online Applications): o Interactive query score (QQ) = “0,” “1–100” (treated as a percentage). o Number of quiz questions (0–6) o Reason Codes – refer to the Reason Code section

Note: In eIDcompare, the product used for co-applicants, the assessment result fields for the Interactive Query will be blank. If the application passes Fraud Check, it continues to Equifax OFAC verification.

Equifax Final Assessment of Applicant (Strategy Decision) The Strategy Decision (From Equifax) field displays “Pass,” “Review,” or “Fail” as a result of Equifax’s final assessment. Failures in the transaction status (Transaction Status field equal to “F,” “V,” or “P”) result in an automatic failure. Transaction statuses of “A” or “S” receive an assessment based on the Equifax level 2 risk strategy, which is a medium-risk tolerance.

Level 2 Risk Strategy

Flags all transactions that result in a pure no hit from all three data sources using reason codes for further review.

Flags all transactions that have a match assessment (MA) equal to 0 and reason code 36 is present (the address cannot be validated on any source) for further review.

Flags all transactions that have a statistical score less than 3 for further review.

Flags all transactions that have a Fraud Indicator of either V (victim) or B (both victim and warning) for further review.

Flags all transactions with a quiz score (QQ) less than 30 (answered some questions correctly) for further review.

Flags all transactions that have any of the eID level 2 reason code combinations, including at least one of the reason code combinations in column A and B for further review.



Reason Codes (RC) Column A Column B

10, 11, 13, 14, 16, 17 36

10, 11, 13 85, 86, 87, 88, 89, 90, 91, 93, 98, 99

14, 16, 17 87, 88, 89, 91, 93, 98, 99

23 47, 49, 87, 92

36 87, 88, 89, 91, 93, 98, 99

FH N/A

Note: Refer to the Pending Online Applications section for applicant final decision and final application decision. This is the actual decision used in processing the application in Pending Online Applications.



4 Pending Online Applications/FPS GOLD Process Pending Online Application accesses and displays the application information submitted from the Internet for opening a new account. The eID Information section of Pending Online Applications displays information pertaining to the Equifax authentication process and results.

Note: The Pending Online Application training guide explains this product in its entirety. This document focuses on the eID Information section.

Most of the information found on the eID Information tab of Pending Online Applications is explained in the Equifax Process section. This section concentrates on the layout of the screen and additional FPS GOLD fields not previously mentioned.

eID Information Tab

The eID Information tab displays the assessment results for each applicant in Pending Online Applications. Use the scroll bars to view each applicant’s data in its entirety. No data on the eID Information tab can be altered.

The eID Information list view displays the raw Equifax assessment results for each applicant. Highlight an applicant in the eID Information list view to view the applicant’s information in detail with decoded assessment values on the Results tab.



5 Assessment The final application decision from FPS GOLD is calculated by using the lowest applicant final decision score and assigning that to the entire application. The application is only as strong as its weakest link. Once the final application decision is determined, it appears in the Applicant Final Decision (From FPS) field on the Pending Online Applications > Application Detail tab > eID Information tab in CIM GOLD. The decision is also displayed in the eID Decision column on the Pending Online Applications > Summary List tab in CIM GOLD. The final decision is based on the following hierarchy:

1. Cancel 2. Incomplete Authentication 3. Exception 4. Fail 5. Review 6. Pass

Summary List Tab



Applicant Final Decision (From FPS) The individual applicant’s final decision is determined by FPS GOLD using three options. These options are part of the Online Banking Client Setup Form. The option selected by your bank is applied to all applications.

1. Use the Equifax Strategy Decision with no alterations. The Equifax Strategy Decision is discussed in the Equifax Process section. This is the default used if no option is selected on the Online Banking Client Setup Form.

2. Use the Equifax Strategy Decision in combination with additional reason code(s) to evaluate application with review or fail decisions.

3. Disregard the Strategy Decision of Equifax and customize the value (weight) placed on the Equifax Assessment results and reason codes. This applies only to transaction statuses of A or S.

If an application is in a review status, it is strongly recommended to review not only the assessment results but also the reason codes. If an application is in a fail status, it can still be reviewed and opened.

The Consumer ID (from FPS) and Transaction Key (From Equifax) fields on the Pending Online Applications > Application Detail tab > eID Information tab in CIM GOLD are used if there is a need to contact Equifax. Equifax uses the information in these fields to locate the applicant. Application assessment and decision information resides solely in Pending Online Applications, except the information in the Final Application Decision (From FPS), Applicant Final Decision (From FPS), and Strategy Decision (From Equifax) fields, which are available in GOLDWriter.

Contact Information If one of the reason codes used for fraud alert (33, FX, 53, FH, 39, FV, FN, or FT) is found and if consumer contact data is found, it is displayed on the Pending Online Applications > Application Detail tab > eID Information tab > Contact Information tab in CIM GOLD. This allows you to personally contact the applicant to determine if the application should be processed.



Contact Information Tab

There is a maximum of two contact points (if available). Also, the type of alert (E—Long Term, L—Temporary, or M—Military) is displayed in the Alert Type field.



Appendix A: Reason Codes

This is a listing from the Equifax eIDverifier® US Customer Implementation Guide of reason code

possibilities. The codes are listed in the point of the process they can occur and follow the general flowchart process.

Authentication Process Reason Codes The table below contains reason codes by authentication process.

Reason Code

Description

Application Exception 00 Application exception either initiated by client or application

Standard Field Checks 01 Failed standard fields checks

Application Verification 02 Driver’s license format does not correspond to state of issue

03 SSN does not meet verification criteria

04 Age does not meet verification criteria

05 Address Standardization Warning present for current address

06 Address Standardization Error present for current address

08 Area code does not correspond to state on the current address

22 Match on the Hot Address database

23 WARNING: Inquiry Social Security number is issued prior to inquiry date of birth. Thorough verification suggested.

34 Address Standardization Warning present for former address

35 Address Standardization Error present for former address

37 Address Standardization Warning present for driver’s license address

38 Address Standardization Error present for driver’s license address

T0 Area code does not correspond to input phone number exchange

OFAC Screening 01 There was a hit on OFAC. The subject was categorized as a Foreign Terrorist

Organization by OFAC.

02 There was a hit on OFAC. The subject was categorized as a Specially Designated Narcotics Trafficker by OFAC.

03 There was a hit on OFAC. The subject was categorized as a Specially Designated Foreign Narcotics Trafficker by OFAC.

04 There was a hit on OFAC. The subject was categorized as a Specially Designated Global Terrorist by OFAC.

05 There was a hit on OFAC. The subject was categorized as a Specially Designated Terrorist by OFAC.

06 There was a hit on OFAC. The subject was categorized as being related to Weapons of Mass Destruction by OFAC.

07 There was a hit on OFAC. The subject was categorized as being related to Palestinian Legislative Council by OFAC.

08 There was a hit on OFAC. The subject was categorized as Property Currently Blocked.

09 There was a hit on OFAC. The subject was categorized as Patriot Act Blocked Pending Investigation.

OD OFAC transactions could not be processed due to the data source being inaccessible.

ON The customer is configured for OFAC but there was no hit on OFAC for the transaction.

OU There was a hit on OFAC but the OFAC category is not among the list of categories currently recognized by eID.



Reason Code

Description

Pattern Recognition 07 Pattern recognition match found

10 Elevated use of address by different individuals detected

11 Moderate use of address by different individuals detected

13 High use of address by different individuals detected

14 Elevated use of address by different individuals detected

16 Moderate use of address by different individuals detected

17 High use of address by different individuals detected

Data Sourcing – Primary Data Source 36 No verifiable match found on any consumer provided address

39 Inquiry address does not match primary data source. This only applies to California addresses and complies with California Law AB 655.

42 Primary data source unavailable

45 No identity located or poor match on primary data source

48 Identity located on primary data source is a good match

51 Identity located on primary data source is an adequate match

54 Identity located on primary data source is a possible match

A6 Verifiable match found on consumer’s current address

A7 Verifiable match found on consumer’s former address

A8 Verifiable match found on consumer’s driver’s license address

FA Input addresses, including current and former, did not match any of the addresses contained in the primary data source

Data Sourcing – Secondary Data Source 72 Secondary data source unavailable

75 Identity not located or poor match found on secondary data source

78 Identity located on secondary data source is a good match

81 Identity located on secondary data source is an adequate match

82 Driver’s license number not validated

84 Identity located on secondary data source is a possible match

Data Sourcing – Tertiary Data Source 57 Tertiary data source unavailable

60 Identity not located or poor match found on tertiary data source

63 Identity located on tertiary data source is a good match

64 Phone number not validated

66 Identity located on tertiary data source is an adequate match

69 Identity located on tertiary data source is a possible match

Data Sourcing – Multiple Data Sources 36 Address not verified

43 First name not validated

44 Last name not validated

47 Social Security number not validated

49 Date of birth not validated

Data Sourcing – Internal Data Sources T1 Inquiry phone number is a land line

T2 Inquiry phone number is a mobile/cellular phone service

T3 Inquiry phone number is a paging service

T4 Inquiry phone number is a mobile radio service

T5 Inquiry phone number cannot be classified

Fraud Check – Primary Data Source 33 Fraud victim indicator warning present / information has been blocked due to identity

theft



Reason Code

Description

53 Consumer requested security freeze / information not available on data source

FH Information from inquiry has been identified by the consumer as fraudulent / information not available from the primary data source

FN Military duty alert. Manual review strongly advised.

FT California resident fraud victim. Manual review strongly advised.

FV Fraud victim (temporary fraud alert). Manual review strongly advised.

FX Fraud victim (long-term fraud alert). Manual review strongly advised.

23 WARNING: Inquiry Social Security number is issued prior to inquiry date of birth. Thorough verification suggested.

85 WARNING: Social Security number has never been issued by the Social Security Administration. Thorough verification suggested.

86 WARNING: Social Security number has been reported misused. Thorough investigation suggested.

87 WARNING: Inquiry address has been associated with more than one name or Social Security number. Thorough investigation suggested.

90 WARNING: Social Security number is issued to a person who has been reported deceased. Thorough investigation suggested.

91 WARNING: Inquiry address is a telephone answering service. Thorough investigation suggested.

92 WARNING: Social Security number issued by the Social Security Administration within the last five years. Thorough investigation suggested.

93 WARNING: Inquiry address is a state/federal prison or detention facility. Thorough investigation suggested.

94 Inquiry did not result in any phone, address, or SSN warnings

95 WARNING: Telephone number has been reported misused. Thorough investigation suggested.

96 WARNING: Telephone number is a telephone drop number. Thorough investigation suggested.

97 Fraud warning data source unavailable

98 WARNING: Inquiry address has been reported misused. Thorough investigation suggested.

99 WARNING: Possible true name fraud. Thorough investigation suggested.

AA WARNING: Possible Individual Taxpayer Identification Number (ITIN). Thorough investigation suggested.

Quiz – Trade Line Quiz 09 Quiz was answered correctly with maximum number of questions

12 Quiz had maximum number of questions but one or more was answered incorrectly

15 Quiz was answered correctly with average number of questions

18 Quiz had average number of questions but one or more was answered incorrectly

21 Quiz was answered correctly with minimal number of questions

24 Quiz had minimal number of questions but one or more was answered incorrectly

27 Quiz was answered correctly with maximum number of questions

30 Quiz had maximum number of questions but one or more was answered incorrectly

Quiz – Non-trade Line Quiz (Alternative Quiz) AB Real street address question unanswered

AC Real street address question answered correctly

AD Simulated street address question unanswered

AN Simulated street address question answered incorrectly

AX Real street address question answered incorrectly

AY Simulated street address question answered correctly

CB Real city of residence question unanswered

CC Real city of residence question answered correctly



Reason Code

Description

CD Simulated city of residence question unanswered

CN Simulated city of residence question answered incorrectly

CX Real street city of residence answered incorrectly

CY Simulated city of residence question answered correctly

DB Real driver’s license expiration date question unanswered

DC Real driver’s license expiration date question answered correctly

DX Real driver’s license expiration date question answered incorrectly

EC All employer questions answered correctly

EX One or more employer questions answered incorrectly

HC All household questions answered correctly

HX One or more household questions answered incorrectly

IB Real driver’s license state of issuance question unanswered

IC Real driver’s license state of issuance question answered correctly

IX Real driver’s license state of issuance question answered incorrectly

KB Real county of residence question unanswered

KC Real county of residence question answered correctly

KD Simulated county of residence question unanswered

KN Simulated county of residence question answered incorrectly

KX Real county of residence question answered incorrectly

KY Simulated county of residence question answered correctly

LB Real last four digits of SSN question unanswered

LC Real last four digits of SSN question answered correctly

LD Simulated last four digits of SSN question unanswered

LN Simulated last four digits of SSN question answered incorrectly

LX Real last four digits of SSN question answered incorrectly

LY Simulated last four digits of SSN question answered correctly

MB Real middle/former name question unanswered

MC Real middle/former name question answered correctly

MD Simulated middle/former name question unanswered

MN Simulated middle/former name question answered incorrectly

MX Real middle/former name question answered incorrectly

MY Simulated middle/former name question answered correctly

NB Real telephone number question unanswered

NC Real telephone number question answered correctly

ND Simulated telephone number question unanswered

NN Simulated telephone number question answered incorrectly

NX Real telephone number question answered incorrectly

NY Simulated telephone number question answered correctly

PC All personal property questions answered correctly

PX One or more personal property questions answered incorrectly

SB Real SSN state of issuance question unanswered

SC Real SSN state of issuance question answered correctly

SX Real SSN state of issuance question answered incorrectly

Address Validation Reason Codes The ability to validate a consumer’s address is a critical component of the authentication process. Equifax provides additional notification of the quality of the consumer-supplied address to the data sources used in our process. Addresses are considered verified or unverified based on the supplier or method by which the address is received. The table below provides address validation reason codes, descriptions, and default outcomes.



Reason Code

Description Comparison Address

Reason Code Definition Default Outcome

36 The consumer-supplied address did not match a verified address on any data source

Input current address

Input current address does not match a verified address on any data source

Pass to quiz

39 Identity is located, but the address provided by the applicant does not match any address appearing within the primary data source

Input current address

If the consumer supplied current address does not match the primary data source address and the consumer supplied current address’s state is “CA” – California or a state code on the associated primary data source file is “CA,” then reason code 39 is generated. This reason code addresses California Las AB 655.

Set Fraud Assessment Index (OS) to zero, skip to quiz, and proceed to assessment. This is configurable.

FA Input addresses, including current and former, do not match any of the addresses in the primary data source

Input current and former address

A substantial address variance exists between the input current or former address and the list of addresses in the primary data source. If the customer transaction contains the current and former addresses, both addresses must match an address in the primary data source.

Pass to quiz

Special Handling Reason Codes There are a few conditions detected in a consumer’s record that trigger automatic failures by Equifax and force manual authentication for the protection of the consumer. These conditions are listed in the table below.

Reason Code

Description Assessment Implication

00 Application exception Exception Message returned

01 Failed standard field checks. Failed standard field checks for required/optional and improperly formatted input knapsack fields.

SPC Failure Message returned. Manual authentication not required.

03 SSN/SIN does not meet verification criteria. Failed SSN verification due to fraudulent SSN, deceased SSN, or un-issued SSN.

Application Verification (AV) Failure Message returned

04 Age does not meet verification criteria. Failed age verification due to age (calculated from date of birth) being less than or greater than the customer-specified minimum age.


06 Address standardization error present for current address. Failed address verification due to error code returned from address standardization indicating that the current address could not be standardized. The address is not considered usable as presented.




Reason Code


07 Pattern recognition match found. When an applicant attempts authentication more than 2 times within 72 hours, the application is considered problematic and a potential attempt at fraud.

Fraud Failure Message returned

22 Address has been associated with reported fraud activity. Identifies a match on the Hot Address database maintained by Equifax. The input address is associated with reported fraud activity.


33 Fraud victim warning present/information has been blocked due to identity theft. The consumer has previously contacted the credit agency and indicated that their credit information has been used by someone else in the commission of fraud. The consumer has requested that this fraud indicator be placed on their file to avoid any future incident.

Completion Message returned. Fraud Assessment Index is automatically scored a zero. This reason code is configurable.

35 Address standardization error present for former address. Failed address verification due to an error code returned from address standardization indicating that the former address could not be standardized. The address is not considered usable as presented.


38 Address standardization error present for driver’s license address. Failed address verification due to an error code returned from address standardization indicating that the driver’s license address could not be standardized. The address is not considered usable as presented.


39 Inquiry address does not match primary data source. This accommodates compliance with California Law AB 655 in cases of California addresses.

Completion Message returned. Fraud Assessment Index is automatically scored a zero by default. This reason code is configurable.

53 Consumer requested security freeze/information unavailable on data source

Completion Message returned. Fraud Assessment Index automatically scored a zero.

FV Fraud victim (temporary fraud alert) Completion Message returned. Fraud Assessment Index is automatically scored a zero by default. This reason code is configurable.

FX Fraud victim (long-term fraud alert) Completion Message returned. Fraud Assessment Index is automatically scored a zero by default. This reason code is configurable.

FN Military duty alert Completion Message returned. Fraud Assessment Index is automatically scored a zero by default. This reason code is configurable.



Reason Code


FT California resident fraud victim Completion Message returned. Fraud Assessment Index is automatically scored a zero by default. This reason code is configurable.

FH Information from the inquiry has been identified by the consumer as fraudulent/information unavailable from the primary data source

Completion Message returned. Fraud Assessment Index automatically scored a zero.

Note: Reason codes 00, 01, 53, and FH are not configurable. Reason codes 06, 35, and 38 are configurable by special means.

Additional Reason Codes Additional reason codes not listed above appear in the table below.

Reason Code

Reason Code Verbiage Definition

TB Real telephone service type question unanswered

Real telephone service type question presented to customer, but unanswered

TC Real telephone service type question answered correctly

Real telephone service type question presented to customer answered correctly

TX Real telephone service type question answered incorrectly

Real telephone service type question presented to customer answered incorrectly



Appendix B: Error Fields for Standard Field Checks

This is the complete list of error fields used for Standard Field Checks.

CODE DESCRIPTION FN First Name

MI Middle Name/Initial

LN Last Name

DB Date of Birth

SN Social Security Number

SF Suffix

DS Driver’s License State

DL Driver’s License Number

EM E-mail Address

IP IP Address

SA Current Address Street

CT Current Address City

ST Current Address State

ZP Current Address ZIP

FS Former Address Street

FC Former Address City

FA Former Address State

FZ Former Address ZIP

OA Other Address Street

OC Other Address City

OS Other Address State

OZ Other Address ZIP

DA Driver’s License Address Street

DC Driver’s License Address City

DZ Driver’s License Address ZIP

HP Home Phone Number

Date post:	06-Mar-2021
Category:	Documents
Upload:	others
View:	4 times
Download:	0 times

ePlatform – Equifax · Page 6 E-Platform Equifax Authentication FPS GOLD 1 Overview The following...

Documents