Risk Manager Payment FAQ

What do the sections in the Risk Manager payment card mean?

Here is the payment card info you will see displayed in Risk Manager. 

What is a billing or shipping mismatch?

A billing shipping mismatch usually happens when the postcode entered by the buyer on an online payment card information form does not match the postcode for the shipping address entered on the form.

Here are the different possibilities that can cause bill/ship mismatches in Risk Manager:

Key:

• Shipping form postcode: Customer manually enters the shipping postcode in a form of the website. 

• Payment information form postcode: Customer manually enters the payment information, including the postcode attached to their card. This postcode is identical to what the bank has on file for the card. 

• Billing same as shipping: Customer can check this optional checkbox that is (sometimes) shown on some eCommerce websites.

• Billing info form postcode: Customer manually enters their billing postcode in a form on the website.

Why does my payment say “match” on the website but not in Risk Manager?

When Risk Manager is analysing online payments, it looks at two specific forms: the shipping form and the payment card information form. Risk Manager does not take into account the information filled in the billing form. This can sometimes cause a discrepancy between what Square views as a mismatch and what an eCommerce business would view as a mismatch.

To enter information in the billing form, sometimes a customer is given the option to select the Billing is same as shipping checkbox.

If the customer checks the checkbox to say that shipping and billing match:

• In this case, if the postcode on the customer payment card matches the shipping postcode, then Risk Manager will show a match.

• If the customer enters a different postcode on the payment information form than on the shipping information form, Risk Manager will show a billing/shipping mismatch, even if the customer checks “shipping and billing match.”

If the customer does not select the checkbox and manually enters their information:

• If a customer does not click the checkbox and manually enters a postcode in the shipping form that matches the postcode in the payment information form, then Risk Manager will show a match, even if the postcode they enter in the billing form is different.

• If the customer does not click the checkbox, and manually enters matching postcodes in the billing and shipping form, but the postcode is different than in the payment information form, then Risk Manager will show a mismatch, even though the eCommerce website might say “match.”

Why does Risk Manager not check the postcode in the billing address form?

Risk Manager does not rely on the billing address form for several reasons, the most important being that the billing postcode entered on the payment information form is a better indicator of potential fraud. Whether or not a website has a separate billing form is dependent on the checkout experience of each website. 

While we do not use the billing address form to calculate risk match/mismatch, you can still see that information as appears in the customer details card.