Velocity Controls and Filters

The E-xact Gateway provides built-in tools to help you mitigate fraud, prevent accidental duplicate charges, and control transaction flow before a request is even sent to the issuing bank.

These settings—which include Velocity Controls, Restrictions, and Security Filters (AVS/CVV)—can be configured within the Realtime Payment Manager (RPM).

To configure these settings, log into the RPM, navigate to Admin -> Terminals, and select the appropriate Terminal from your list.


Velocity Controls

Velocity controls are threshold settings that determine the acceptable limits for transaction processing within a specific time period. If a transaction attempts to process outside of these defined thresholds, the gateway will block it internally and return an ETG (E-xact Transaction Gateway) Error.

The following Velocity Controls are available:

  • Minimum Sale $: The lowest acceptable amount for a single transaction. Any transaction that falls below this amount will not be processed.
  • Maximum Sale $: The highest acceptable amount for a single transaction. Any transaction that exceeds this amount will not be processed.
  • Day Volume $: The maximum total dollar amount permitted across all transactions processed through your terminal in a single day. If an incoming transaction would push your daily total above this threshold, the transaction will not be processed.
  • Day Card Usage $: This setting limits the total dollar amount that can be charged to a single credit card within one day.

Restrictions

Similar to Velocity Controls, Restrictions allow you to set strict behavioral limits to protect your merchant account from processor penalties and fraudulent automated attacks.

1. Duplicate Checking

Duplicate checking monitors your account for identical transactions processed within a specified time frame. If a duplicate is detected, it will be automatically denied by the E-xact system to prevent double-charging a customer.

A transaction is flagged as a duplicate if it occurs within the configured time window and the following fields are exactly the same:

  • Gateway ID
  • Transaction Type
  • Credit Card Number
  • Amount

2. Refund Restrictions

To protect your merchant account balance, Refund Restrictions limit the number of refunds and the total dollar amount that can be refunded on any given day.

  • You can define a maximum Refund Count per day.
  • You can define a maximum Dollar Amount for refunds per day.

If either of these thresholds is exceeded, the gateway will block any subsequent refund attempts until the daily limit resets.


Security Filters (AVS & CVV)

In addition to transaction velocity, you can configure your RPM Terminal settings to reject transactions based on mismatches in Address Verification (AVS) or Card Verification Value (CVV/CVD/CVC).

📘

Note on Filter Configurations

Mismatched AVS or CVV data will only result in a declined transaction if you have the corresponding filter explicitly checked inside your RPM Terminal Administration settings. Otherwise, the transaction may still approve but will return a warning indicator in the response payload.

CVV2 Filters

CVV filters verify the 3- or 4-digit security code on the back of the credit card (or front, for Amex). You can configure the gateway to block transactions if the issuer returns specific mismatch codes.

CVV Response CodeRPM Filter Name / Description
MCard is authentic (Match)
NCVV2 does not match
PCard expiration not provided or card does not have valid CVD code
SMerchant indicated that CVV2 is not present on card
UCard issuer is not certified and/or has not provided encryption keys

AVS (Address Verification) Filters

AVS filters verify the billing address and ZIP/Postal code provided by the customer against the information on file with the card issuer. You can configure the gateway to reject transactions for various AVS responses.

AVS CodeDescription & Explanation
XExact match: 9-digit ZIP
YExact match: 5-digit ZIP (Street Address and 5-digit ZIP Code match)
APartial match: Street Address matches, ZIP Code does not
WPartial match: ZIP Code matches, Street Address does not
ZPartial match: 5-digit ZIP Code match only
NNo match: No Address or ZIP Code match
UUnavailable: Address information is unavailable for that account number, or the card issuer does not support
GService not supported: Non-US Issuer does not participate
RRetry: Issuer system unavailable, retry later
EError: Not a mail or phone order
SService not supported