# Parameters source: https://developer.mastercard.com/identity-insights-for-accounts/documentation/parameters/index.md ## Identity Insights for Accounts Request Parameters {#identity-insights-for-accounts-request-parameters} ### Device Request {#device-request} | **Device Request Parameters** | **Description** | **Child Elements** | |-------------------------------|-----------------------------------------------------------------------|--------------------| | ip | The IPv4 or IPv6 address associated with the account sign-up attempt. | NA | ### Device Details {#device-details} | **Device Insights** | Required inputs to receive Device insights | |--------------------------------------------|----------------------------------------------------------------------| | device.score.deviceRisk | userAgent, timeZone, language, screenWidth, screenHeight, IP address | | device.details.deviceBrowserIpTzDifference | timeZone, IP address | | device.details.devicePhoneEmailFirstSeen | userAgent, timeZone, language, screenWidth, screenHeight, IP address | | device.details.deviceIpEmailFirstSeen | userAgent, timeZone, language, screenWidth, screenHeight, IP address | ### User Request {#user-request} | **User Request Parameters** | **Description** | **Child Elements** | |-----------------------------|----------------------------------------------------------------------------------------------|-----------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------| | account | Data points related to the account | * **hashedAccountId:** The hashed identifier associated with the account sign-up. Please use the same identifier when submitting another query for the same account sign-up. * **signupTime:** The timestamp associated with the account sign-up. Timestamp must be in UTC timezone and data format YYYY-MM-DD HH:MM. | | name | The full name of the person. | NA | | email | The email address of the person. Note: This field is required only if phone is not provided. | NA | | phone | Phone number including country hint (only the number is required). | * \*\*countryHint:\*\*The ISO-3166 alpha-2 country code of the phone number. See:[ISO-3166](https://www.nationsonline.org/oneworld/country_code_list.htm) * **number:** The phone number in E.164 or local format. The default country calling code is +1 (USA). | | address | Full address including country, state, and postal code. | * \*\*streetLine1,2:\*\*The first line of the *street* part in the structured address. *(Cannot be longer than 1000 characters.)* * **city:** The name of the city in the structured address. *(Cannot be longer than 500 characters.)* * **state:** The state code of the structured address. * **postalCode:** The postal code of the structured address. *(Cannot be longer than 100 characters.)* * **country:** The ISO-3166 alpha-2 country code of the address. See:[ISO-3166](https://www.nationsonline.org/oneworld/country_code_list.htm) | ## Identity Insights for Accounts Response Parameters {#identity-insights-for-accounts-response-parameters} The response contains User Insights. Please refer to [Data Dictionary](https://static.developer.mastercard.com/content/identity-insights-for-accounts/IIA+Synergy+Data+Dictionary.pdf) for more details on response descriptions. | **Identity Insights for Accounts Response Parameters** | **Description** | **Child Elements** | |--------------------------------------------------------|---------------------------------------------------------------------------------------------------------------------------------|--------------------| | requestRefId | The generated unique web transaction identifier. Same value as X-MC-Correlation-ID in header response. | NA | | insights | List of the types of insights returned. | Detailed Below | | warnings | An array containing warning messages. | NA | | alerts | An alert generated when processing the request. *example:Limited Identity Insights are available to comply with applicable law* | NA | ### User Insights {#user-insights} | **User Insights Response Parameters** | **Description** | **Child Elements** | |---------------------------------------|------------------------------------------------------------------|-----------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------| | scores | Scores that were calculated by analyzing the provided user data. | * **identityRisk:** Comprehensive identity risk score with a higher score indicating a riskier account sign-up.
* **reasonCode:** Reason code explanation value for the identity risk score based on data provided. Possible values are: \* High Severity : AA-AP \* Medium Severity : JA-JF \* Low Severity : RA-RP | | details | More granular details of the user insights. | Detailed Below | ### User Details {#user-details} | **User Details Response Parameters** | **Description** | **Child Elements** | |--------------------------------------|----------------------------------------------------|----------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------| | email | Results from analyzing a particular email address. | * **valid: \*\* True if the email address is valid.** * ****domainCreationDate:** The date when the email domain was created. Format is YYYY-MM-DD.** * ****firstSeenDays:** Count of days since the email was first observed in the Identity Network. If the element has not been observed before, will be 0.** *** **mailboxVelocity:** Number of times email has been seen in last 180 days. * **isDisposable:** True if the email domain is disposable. Disposable emails are generally associated with fraudulent activities. If true, this is one of the strongest risk indicators and the transaction should be flagged for further review. * **emailRiskScore:** Comprehensive risk score associated with email address with higher score indicating risker individual. A number between 0 and 1 rounded to 3 decimal places..** * ****matchToName:** The match status between either of the input names (person or business) and the queried entity. Possible values are:* not-found* match \* no-match | | phone | Results from analyzing a particular phone number. | * **valid: \*\* True if the phone number is valid.** * ****lineType:**The line type of the phone number.* landline - Traditional wired phone line.* fixed-voip - VOIP-based fixed line phones.* mobile - Wireless phone line.* voicemail - Voicemail-only service.* toll-free - Callee pays for call.* premium - Caller pays a premium for the call-e.g. 976 area code. \* non-fixed-voip - Skype, for example. \* other - Anything that does not match the previous categories. * **carrier:** The company that provides voice and/or data services for the phone number. Carriers are returned at the MVNO level. * **countryCode:** The [ISO-3166](https://www.nationsonline.org/oneworld/country_code_list.htm) alpha-2 country code of the address. * **lastSeenDays:** Count of days since the phone was last observed in the Identity Network. If the element has not been observed before, will be 0. * **emailFirstSeenDays:** Count of days since the combination of phone and email was first observed in the Identity Network. If that combination has not been observed before, firstSeenDays will be 0. * **matchToName:** The match status between either of the input names (person or business) and the queried entity. Possible values are: \* not-found \* match \* no-match * **matchToAddress:**The match status between the input phone and the input address.* match - Phone location matches input address line 1, address line 2, city, state, and postal code.* postal-match - Phone location postal code matches input address postal code.* zip4-match: - Phone location postal code zip+4 matches input address postal code zip+4.* city-state-match: - Phone location city and state matches input address city and state. \* metro-match: - Phone location is in the same metro area as input address. \* country-match - Phone location country matches input address country. \* no-match: - Phone location does not match input address. | | address | Results from analyzing a particular address. | * **validityLevel: **The most granular level to which the address could be validated. Ex.If the address was only valid to the city level (but not to the house level), it would return "valid_to_city".* missing_address - An input address was not provided.* invalid - The input address is not valid.* valid - The input address is valid.* valid_to_country - The input address could only be validated to the country level. This means the country of the input address is valid, but the other elements of the input address were unable to be confirmed as valid or invalid. \* valid_to_city - The input address was validated to the city level. This means the country, state, city, and postal code of the input address are valid, but the street, house number, and subpremise of the input address were unable to be confirmed as valid or invalid. \* valid_to_street - The input address was validated to the street level. This means the country, state, city, postal code, and street of the input address are valid, but the house number and subpremise of the input address were unable to be confirmed as valid or invalid. \* valid_to_house_number - The input address was validated to the street and house number level. This means the country, state, city, postal code, street, and house number of the input address are valid, but the subpremise of the input address was unable to be confirmed as valid or invalid. \* valid_to_house_number_missing_apt - The input address was validated to the street and house number level. This means the country, state, city, postal code, street, and house number of the input address are valid, but the subpremise of the input address was missing and thus unable to be confirmed as valid or invalid. * **matchToName:** The match status between either of the input names (person or business) and the queried entity. Possible values are: \* not-found \* match \* no-match | ### IP Insights {#ip-insights} | **IP Insights Response Parameters** | **Description** | **Child Elements** | |-------------------------------------|--------------------------------------------------------------------|-----------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------| | scores | Scores that were calculated by analyzing the provided device data. | * \*\*ipRisk: \*\* Comprehensive risk score associated with an IP address, with a higher score indicating a riskier individual. A number between 0 and 1 rounded to three decimal places. | | details | Results from analyzing the provided IP address. | * **risk:** True if the IP address is considered risky, based on multiple IP data points and velocity calculations. * **lastSeenDays:** Count of days since the IP was last observed in the Identity Network. If the IP has not been observed before, will be 0. * **geoLocationCountryCode:** The [ISO-3166](https://www.nationsonline.org/oneworld/country_code_list.htm) alpha-2 country code of the location of the IP address. * **geoLocationSubdivision:** More granular detail about the IP address location. * **phoneDistance:** The distance (in miles) between the IP address and the phone number. * **addressDistance:** The distance (in miles) between the IP address and the physical address. * **isProxy:** An indicator that specifies if the IP address is suspected to be a proxy. * **proxyRiskClass:** A measure of the risk level associated with the category of the proxy IP. \* High: Confirmed TOR node or Hosted VPN IP with TOR like behavior patterns \* Medium: Hosted VPN or Web Browser \* Low: OS provided or Corporate VPN | ### Device Insights {#device-insights} | **Device Insights Response Parameters** | **Description** | **Child Elements** | |-----------------------------------------|--------------------------------------------------------------------|-------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------| | score | Scores that were calculated by analyzing the provided device data. | * \*\*deviceRisk: \*\* Risk score associated with the consumer device, with a higher score indicating a riskier individual. A number between 0 and 1 rounded to three decimal places. | | details | More granular details of the device insights. | * **browser:** The name of the browser used to authorize your product or service. * **platform:** The device platform used to authorize your product or service. * **deviceType:** The device type used to authorize your product or service. * **deviceBrowserIpTzDifference:** The difference between the browser's time zone and the IP's time zone. * **deviceIpEmailFirstSeen:** Count of days since the consumer device, the email, and the IP was first observed in the network. If they have not been observed together before, first seen days will be 0. * **devicePhoneEmailFirstSeen:** Count of days since the consumer device, the email, and the phone was first observed in the network. If they have not been observed together before, first seen days will be 0. | ### Reason Codes {#reason-codes} | **High Severity** | | **Medium Severity** | | **Low Severity** | | |-------------------|-------------------------------------------------|---------------------|---------------------------------------------|------------------|------------------------------------------------| | **Reason code** | **Description** | **Reason code** | **Description** | **Reason code** | **Description** | | AA | Consumer Identity is suspicious | JA | New Consumer or not sufficient information | RA | Consumer Trust Established across all elements | | AB | Increased Risk associated with Email | JB | Medium Risk Signals associated with Email | RB | Established Credibility for Email | | AC | Increased Risk associated with Email \& IP | JC | Medium Risk Signals associated with Address | RC | Established Credibility for Email \& IP | | AD | Increased Risk associated with Email \& Address | JD | Medium Risk Signals associated with Phone | RD | Established Credibility for Email \& Address | | AE | Increased Risk associated with Email \& Phone | JE | Medium Risk Signals associated with Name | RE | Established Credibility for Email \& Phone | | AF | Increased Risk associated with Email \& Name | JF | Medium Risk Signals associated with IP | RF | Established Credibility for Email \& Name | | AG | Increased Risk associated with IP | | | RG | Established Credibility for IP | | AH | Increased Risk associated with IP \& Phone | | | RH | Established Credibility for IP \& Phone | | AI | Increased Risk associated with IP \& Address | | | RI | Established Credibility for IP \& Address | ## Disclaimers {#disclaimers} This model is designed to be an informational tool only. This model is provided as a rough estimate of authentication-based risk decisioning performance. The analysis performed by this model is a series of general estimates which are based upon the underlying information and assumptions now available. That information may change over time, and the analysis would need to be updated to reflect those changes for the analysis to be useful. The assumptions regarding authorization rates are hypothetical and there can be no guarantee that they will be achieved. Actual results may vary substantially from the figures shown. Mastercard accepts no responsibility for any losses arising from any use of or reliance upon any calculations or conclusions reached using this Model. MASTERCARD MAKES NO REPRESENTATIONS OR WARRANTIES OF ANY KIND, EXPRESS OR IMPLIED, INCLUDING (A) THE IMPLIED WARRANTIES OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE, TITLE, AND NON-INFRINGEMENT; (B) RELATING TO THE PERFORMANCE OF SMART AUTHENTICATION OR USE OF RISK INFORMATION; (C) THAT USE OF SMART AUTHENTICATION OR RISK INFORMATION SHALL BE UNINTERRUPTED OR ERROR-FREE; OR (D) CONCERNING THE ACCURACY, QUALITY, RELIABILITY, SUITABILITY, OR EFFECTIVENESS OF THE RISK INFORMATION OR ANY OTHER DATA, RESULTS, CONTENT, OR OTHER INFORMATION OBTAINED OR GENERATED BY COMPANY THROUGH ITS USE OF SMART AUTHENTICATION OR ANY RISK INFORMATION. SMART AUTHENTICATION, RISK INFORMATION, AND OTHER MASTERCARD IP IS PROVIDED "AS IS, " WITH ALL FAULTS, KNOWN AND UNKNOWN. THE COMPANY ASSUMES THE ENTIRE RISK ARISING OUT OF ITS USE OF SMART AUTHENTICATION AND ITS USE OF THE RISK INFORMATION UNDER ALL APPLICABLE LAWS, INCLUDING THOSE RELATING TO PRIVACY AND DATA PROTECTION, BANKING, CREDIT, AND ANTI-DISCRIMINATION.