Skip to main content

Definition

The Global Fraud Policy (GFP) drives pass/fail outcomes and machine-readable failure reasons in the evaluation object returned by Prove Platform APIs (for example POST /v3/complete). GFP classifies each transaction into one or more of the following categories:
CategoryEvaluates
IdentificationConsistency of personal details (for example name, address, date of birth, national identifier).
AuthenticationWhether the claimant matches the identity and phone possession signals.
ComplianceRegulatory and program requirements for the industry and use case.
RiskFactors outside identification and authentication (for example behavioral or carrier-related signals).

Response examples

Representative evaluation payloads from POST /v3/complete. Pass
{
  "success": true,
  "next": {
    "done": "done"
  },
  "evaluation": {
    "authentication": {
      "result": "pass"
    },
    "identification": {
      "result": "pass"
    }
  }
}
Fail (with failureReasons)
{
  "success": false,
  "next": {
    "done": "done"
  },
  "evaluation": {
    "authentication": {
      "result": "fail",
      "failureReasons": {
        "9161": "Very short tenure association between phone number and identity.",
        "9171": "Potential injection attack due to 2 identities both with short tenure association to the phone number.",
        "9180": "No phone ownership confirmed using 4 elements."
      }
    },
    "identification": {
      "result": "fail",
      "failureReasons": {
        "9001": "Identification isn't confirmed using 4 elements."
      }
    }
  }
}

Failure reason codes

CodeCategoryDescription
9001IdentificationIdentification isn’t confirmed using 4 elements.
9003IdentificationIdentity isn’t found
9004IdentificationIdentification isn’t confirmed using 4 elements with secondary source.
9005IdentificationIdentification isn’t confirmed using 4 elements with more than 1 source.
9011IdentificationIdentification isn’t confirmed using less than 4 elements.
9012IdentificationSSN doesn’t match.
9013IdentificationBirth Date doesn’t match.
9014IdentificationName doesn’t match.
9015IdentificationAddress doesn’t match.
9081IdentificationSSN is issued before the birth date.
9082IdentificationAddress is a correctional facility.
9083IdentificationDeceased indicator is present for individual.
9100AuthenticationPhone possession incomplete. Occurs when /validate is called before the Mobile Auth or OTP possession flow completes.
9101AuthenticationPhone number doesn’t match Prove Key. Rebind required.
9131AuthenticationIndicates the phone number is at a higher risk for fraud due to being listed as a non-mobile line on the Override Services Registry (OSR).
9132AuthenticationThis phone number is listed on a public website with the contents of its text messages posted publicly to allow a user to bypass phone possession check controls.
9133AuthenticationThe phone isn’t trusted based on the SIM Key Trust Score.
9134AuthenticationThe phone isn’t trusted because it’s a non-fixed VoIP number.
9135AuthenticationPotential account takeover (ATO) due to recent SIM Swap under 24 hours.
9136AuthenticationPotential ATO due to recent Port under 24 hours.
9137AuthenticationPotential ATO due to call forwarding enabled for phone number.
9161AuthenticationShort tenure association between phone number and identity.
9162AuthenticationShort tenure association between phone number and identity.
9163AuthenticationPotential recycled phone fraud due to a high number of identities associated to phone number with a newer owner present.
9164AuthenticationPotential recycled phone fraud due to identity having no recent association to phone number and a phone disconnect event is observed after the phone association.
9165AuthenticationPotential recycled phone fraud due to a newer owner observed and a phone disconnect event is observed after the phone association.
9166AuthenticationAddress is a correctional facility.
9167AuthenticationDeceased indicator is present for individual.
9168AuthenticationPerson verification was performed indicating phone ownership isn’t verified
9171AuthenticationPotential injection attack due to 2 identities both with short tenure association to the phone number.
9172AuthenticationPotential injection attack due to 3 identities all with short tenure association to the phone number.
9173AuthenticationPotential injection attack due to 4 identities all with short tenure association to the phone number.
9174AuthenticationPotential injection attack due to 5 or more identities all with short tenure association to the phone number.
9175AuthenticationNo active identity can be associated with the phone number.
9176AuthenticationThe phone number and identity is strongly associated negative bot activity.
9177AuthenticationNo information can be found for the identity or phone number.
9180AuthenticationNo phone ownership confirmed using 4 elements.
9181AuthenticationNo phone ownership confirmed using less than 4 elements
9201ComplianceAnti-Money Laundering (AML) alerts are present for this identity.
9301RiskNo historical behavioral activity.
9302RiskSuspicious large amount recent of activity.
9303RiskUnusual amount of recent carrier phone number change events.
9304RiskSuspicious large amount recent of activity across different identity attributes.