Discussions
Stopping or blocking Verbal Authorizations at the Gateway level?
We have seen a recent increase in the number of fraudulent orders exploiting a gap in our systems allowing these orders to be submitted to NetSuite using the CyberSource Gateway. The way in which the Gateway and NetSuite are configured for this type of error (Verbal Auth. required) is to capture the order (in NS's own words = "...is by design, so you can possibly save the sale when contacting the customer..."), put it into a payment hold status, then make you contact customer for other payment options or to have them clear the flag on their card.
This type of Gateway error prevents the flow to our anti-fraud tool called Decision Manager. There is no way to fulfill these orders as an Authorization was never made. Our solution was to put in place a SuiteScript to prevent these orders from generating licenses (we're a software company), and to then Close each line (thus closing the order). The hope is that if you no longer receive licenses they will stop trying this type of fraudulent order.