Risk and control: stop bad payments before they cost you

In Omno your rules decide who pays, how, and how much. Every transaction is scored for risk before it is processed. Customer rules allow or restrict providers and methods by customer tag and volume thresholds, risky customers can be blocked fully or from specific methods, limits cap amounts and volumes per provider and method, custom field validation catches bad input before it reaches a provider, and custom decline messages tell customers what to do next.

Updated

Verification levels: new customers stay on conservative routes; verified customers reach more providers. Examples. Values are illustrative.

In 30 seconds

  • Every transaction is scored for risk before it is processed.
  • Customer rules, customer blocking and limits per provider and method decide who pays, how, and how much.
  • Blacklists and blocked cards are shared across partner merchants, so fraud stopped at one shop is stopped at all of them.
  • 4 min read
  • 8 features
  • 6 settings you control
Talk to us

What it does

Fraud scoring
Every transaction is scored for risk before it is processed, so a risky payment can be stopped before any provider sees it.
Customer rules
Allow or restrict providers and methods by customer tag and volume thresholds.
Customer blocking
Block a risky customer fully, or only from specific methods.
Limits
Set amount and volume caps per provider and per method.
Custom field validation
Catch bad input, such as a malformed phone number or ID, before it reaches a provider and turns into a decline.
Custom decline messages
Tell customers clearly what to do next when a payment is declined, instead of a generic error.
Card blocking and shared blocklists
Block cards linked to fraud or chargebacks. Blacklists and blocked cards are shared across partner merchants, with full data protection.
Verification levels and customer groups
Restrict each provider to customers at given verification levels and groups, sent on the request from your own systems.
On this page5 sections

How do fraud scoring, customer rules and limits work together?

Every transaction gets a risk score before it is processed. Your rules decide what happens at each score, from letting the payment through to stopping it before any provider sees it. Customer rules add what you know about the customer. You tag customers and set volume thresholds, and the rules allow or restrict providers and methods for each tag, so a new customer above a volume threshold can be kept to the methods you choose while a trusted repeat customer sees every method.

Customer blocking handles the clear cases. A customer can be blocked fully, or only from the methods where they caused trouble. Limits put a ceiling on exposure: amount and volume caps per provider and per method, so one provider or one method never carries more risk than you chose.

Two smaller controls stop avoidable declines. Custom field validation checks the data a customer types, such as a phone number or a national ID number, before it reaches a provider that would reject it. Custom decline messages replace a generic error with a clear next step, such as trying another method, so a declined customer is more likely to complete the purchase.

How do verification levels and customer groups control routing?

Every payment request can carry two pieces of context about the customer: the customer groups they belong to and their customer verification levels (KYC levels in the API). Both come from your systems; Omno does not run KYC. You decide what a group means, such as new, VIP or under review, and you decide how verification maps to levels, often based on results from your identity verification provider.

Omno matches that context against the rules on each provider. A provider that requires verified customers is removed for a customer who has not passed verification. A provider reserved for VIP customers is removed for everyone else. Routing then runs only on the providers that remain. This matters because acquirers and local method providers have different appetites. Some will accept new, unverified customers in a high-risk category. Others will only take verified repeat customers, and sending them anything else raises their decline and dispute rates and puts the relationship at risk.

The same rules apply to payouts. A merchant can require a higher verification level before allowing payouts through a given provider, which supports anti-money-laundering controls without extra code.

How do card blocking and shared blocklists reduce losses?

Card blocking is the simplest control and one of the most useful. When a card is linked to fraud or a chargeback, you block it, and further attempts with that card stop before they reach a provider. That protects your chargeback ratio and keeps the provider from seeing repeated bad attempts. With multi-merchant management, the same card can be blocked across your brands.

Fraud rarely stops at one shop. Omno lets partner merchants share their blacklists and blocked cards, with full data protection, so a card that one merchant blocked after fraud or a chargeback is refused at the others too. Each merchant decides what it shares and keeps control of its own lists.

What changes versus a single PSP?

A single PSP applies its own risk rules to all your traffic. You cannot tell it to treat verified customers differently from unverified ones, unless it offers that feature, and you cannot send risky segments to a provider better suited to them because there is only one. When its risk model tightens, your approval rate falls and you cannot route around it.

With Omno, risk becomes part of routing. You match each customer segment to the providers that want that segment. You stop known bad cards before any provider sees them. You give finance and risk teams separate permissions through role-based access control, so routing and blocking changes are made by the right people and leave a trail.

Why do risk controls matter for cross-border merchants?

Card schemes and issuers watch fraud and disputes closely. Visa’s Acquirer Monitoring Program combines fraud and dispute signals into one ratio per merchant, and acquirers pass the pressure on to merchants with high ratios. Keeping chargebacks and fraud low is therefore a condition of keeping card acquiring at all.

Verification-aware routing, card blocking and shared blocklists work on the causes. They keep unverified customers away from providers that will not tolerate them, stop repeat fraud across shops, and give acquirers a clear record of how each payment was handled.

Merchants in regulated and high-risk sectors face their own requirements, such as which methods may be offered in a market or to a customer with a given verification status. Rules like these are easiest to enforce in the routing layer: if a provider or method is not allowed for a market or a customer status, it is never offered. Combined with the transparency logs, that gives compliance teams evidence of what was allowed, what was blocked and why.

Illustrative webhook for a payment stopped by card blocking before it reached a provider. Field names are simplified.json
{
  "event": "payin.status_changed",
  "transaction_id": "tx_0f7d3b55",
  "status": "DECLINED",
  "psp": null,
  "reason": "card_blocked",
  "amount": 200.00,
  "currency": "NGN",
  "customer_id": "customer-88301",
  "customer_groups": ["new"],
  "kyc_levels": ["level_1"]
}

Settings you control

Risk score thresholds
Decide what happens to a payment at each risk score before it is processed.
Eligibility by verification level
Choose the minimum customer verification level each provider accepts for payments and for payouts.
Customer rules and limits
Assign providers, methods, volume thresholds and amount caps to each customer tag, provider and method.
Decline messages
Write the message a customer sees for each kind of decline.
Blocked cards
Add or remove blocked cards and review the attempts that were stopped.
User roles and permissions
Define which staff can change risk settings and which can only view them.
Developer guide

Frequently asked questions

Can I block a customer from one method but not others?

Yes. A risky customer can be blocked fully, or only from specific methods, while the rest of their payment options stay available.

How do verification levels affect which PSP a customer can use?

Each provider can be restricted to customers at certain verification levels. The merchant sends the customer's levels on the request, and Omno removes providers whose rules do not match before routing runs. A customer who has not finished verification only sees providers that accept that status.

Does Omno score transactions for fraud?

Yes. Every transaction is scored for risk before it is processed, and your rules decide what happens at each score. Around the score sit customer rules, customer blocking, limits, card blocking and shared blocklists. Omno does not run KYC itself. Many merchants use a dedicated fraud or identity verification provider and pass its result, or the token it issued, to Omno through customer groups and verification levels.

What are shared blocklists?

Blacklists and blocked cards that partner merchants share through Omno, with full data protection. A card blocked for fraud at one merchant is refused at the others before it reaches a provider.

Can a blocked card still be used on another of my brands?

Card blocking is managed in the orchestration layer, so with multi-merchant management you can apply blocks across the brands you operate. Check the dashboard settings for how blocks are scoped.

it will.

Tell us where your payments fail. We will show you how routing changes the outcome.

esc
↑↓ to move ↵ to open All results