# Parameters
source: https://developer.mastercard.com/identity-insights-for-transactions/documentation/parameters/index.md
## Identity Insights for Transactions Request Parameters {#identity-insights-for-transactions-request-parameters}
| **Device Type** | **Required inputs to receive Device Insights** |
|--------------------|------------------------------------------------------------------------------|
| Browser/Hybrid App | IP, User-Agent, Language, Timezone, Screen Width, Screen Height, Color Depth |
| OS Native App | IP, User-Agent, Language, Timezone, Screen Width, Screen Height |
| **Request Parameters** | **Description** | **Child Elements** |
|--------------------------|------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------|--------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------|
| purchaseDate | The purchase date in format YYYYMMDDHHMMSS | NA |
| purchaseAmount | The amount of the transaction in the currency's basic unit. If the purchase amount is USD 123.45, the element will contain the value 12345. | NA |
| purchaseCurrencyExponent | The purchase currency exponent. If the purchase amount is USD 123.45, then the exponent will contain 2. | NA |
| purchaseCurrency | The currency of the transaction amount, as an ISO-4217 currency code. See: [ISO-4217](https://www.nationsonline.org/oneworld/currencies.htm) | NA |
| merchantName | The name of the business. | NA |
| merchantCountryCode | The ISO-3166 numeric country code of the merchant associated with the transaction. See: [ISO-3166](https://www.nationsonline.org/oneworld/country_code_list.htm). | NA |
| mcc | The Merchant Category Code associated with the transaction. | NA |
| ipAddress | IPv4 address is represented in the dotted decimal format of 4 sets of decimal numbers separated by dots. The decimal number in each set is in the range of 0 to 255. IPv6 address is represented as eight groups of four hexadecimal digits, each group representing 16 bits (two octets. The groups are separated by colons (:). | NA |
| userAgent | The user-agent string of the consumer device attempting to authorize your product or service. The user-agent must represent the HTTP client of the service consumer with details on the software originating the request. | NA |
| timeZone | Time-zone of the consumer device. The timezone must be a number of the time-zone offset, in minutes, from the date based on current host system settings to UTC. | NA |
| screenWidth | The screen width of the consumer device attempting to authorize with your product or service. | NA |
| screenHeight | The screen height of the consumer device attempting to authorize with your product or service. | NA |
| language | The language of the consumer device. The language must be a string representing the language version as defined in BCP-47. | NA |
| colorDepth | The device screen color depth value. | NA |
| endCustomerRefId | The End Customer Reference identifier is used during the reseller transaction request. | NA |
| model | Mobile device manufacturer and model * Android: Build.MANUFACTURER + " " + Build.MODEL returns the mobile device manufacturer and model, For example,"samsung SM-G960U1" * iOS: utsname machine returns the device model, For example, "iPhone10.4". Note: Apple as a manufacturer is not included because it is the same for all iOS devices. | NA |
| majorOsVersion | Major operating system version. | NA |
| minorOsVersion | Minor operating system version. | NA |
| acquirerMerchantId | The merchant ID that the transaction was processed under, as assigned by the acquirer. | NA |
| acquirerBin | The BIN (Bank Identification Number) of the acquirer. | NA |
| cardHolderName | The full name of the person. | NA |
| secondaryName | The full name of the person. | NA |
| primaryEmail | The primary email of the contact. | NA |
| secondaryEmail | Secondary email to contact if primary details are not reachable. | NA |
| accountDetails | Details of account. | \*\*Child Elements of AccountDetails: * **accountNumber:** Unique identifier for the primary account number of the card. * **cardLast4:** The last four digits of the card number. * **cardExpiryDate:** The expiry year and month of the card in YYMM format. * **cardBin:** The first digits of the card number. |
| mobilePhone | Cardholder Mobile Phone number. | \*\*Child Elements of mobilePhone * \*\*cc:\*\*Country code * **subscriber:** Subscriber section of the number |
| homePhone | Cardholder Home Phone number. | \*\*Child Elements of homePhone * \*\*cc:\*\*Country code * **subscriber:** Subscriber section of the number |
| workPhone | Cardholder Work Phone number. | \*\*Child Elements of workPhone * \*\*cc:\*\*Country code * **subscriber:** Subscriber section of the number |
| billingAddress | Cardholder Billing Address. | \*\*Child Elements of billingAddress * \*\*addressLine1:\*\*The first line of the street part in the structured address. * \*\*addressLine2:\*\*The second line of the street part in the structured address. * **addressCity:** The name of the city in the structured address. * **addressState:** The state code of the structured address. * **addressPostCode:** The postal code of the structured address. * **addressCountry:** The ISO-3166-1 numeric country code of the billing or shippingaddress requested by the cardholder. See:[ISO-3166](https://www.nationsonline.org/oneworld/country_code_list.htm). |
| shippingAddress | Cardholder Shipping Address. | \*\*Child Elements of shippingAddress * \*\*addressLine1:\*\*The first line of the street part in the structured address. * \*\*addressLine2:\*\*The second line of the street part in the structured address. * **addressCity:** The name of the city in the structured address. * **addressState:** The state code of the structured address. * **addressPostCode:** The postal code of the structured address. * **addressCountry:** The ISO-3166-1 numeric country code of the billing or shippingaddress requested by the cardholder. See:[ISO-3166](https://www.nationsonline.org/oneworld/country_code_list.htm). |
## Identity Insights for Transactions Response Parameters {#identity-insights-for-transactions-response-parameters}
The response contains Device and Individual Insights.
Please refer to [Data Dictionary](https://static.developer.mastercard.com/content/identity-insights-for-transactions/SynergyData+Dictionary+-+IIT.pdf) for more details on response descriptions.
| **Identity Insights for Transactions Response** | **Description** | **Child Elements** |
|-------------------------------------------------|------------------------------------------------------|--------------------|
| id | The generated unique identifier. | NA |
| deviceInsights | The insights details associated with the device. | Detailed Below |
| individualInsights | The details associated with the individual insights. | Detailed Below |
### Device Insights {#device-insights}
| **Device Insights Response** | **Description** | **Child Elements** |
|---------------------------------|----------------------------------------------------------------------------------------------------------------------------|-----------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------|
| DeviceInfo | This field contains information related to the consumer device used to authorize with your product or service. | * **deviceType:** The device type used to authorize your product or service. * **browser:** The name of the browser used to authorize your product or service. * **platform:** The device platform used to authorize your product or service. |
| deviceRisk | Describes risk associated to the device being used in the transaction | * **score:** A 0-1 score (rounded to three decimal places) associated with the device. |
| deviceIpTzDifference | The difference between the browser's time zone and the IP's time zone | NA |
| deviceIpFirstSeenDays | Number of days since the device and IP were first seen in our network | NA |
| deviceIpPaymentFirstSeenDays | Number of days since the device, IP and the account number associated to the payment method were first seen in our network | NA |
| deviceIpEmailFirstSeenDays | Number of days since the device, IP and email address were first seen in our network | NA |
| deviceEmailPaymentFirstSeenDays | Number of days since the device, email address and the account number were first seen in our network | NA |
### Individual Insights {#individual-insights}
| **Individual Insights Response** | **Description** | **Child Elements** |
|----------------------------------|------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------|----------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------|
| warnings | An array containing warning messages. | NA |
| workPhone | The line type of the phone number. | * **matchToName:** The match status between either of the input names (person or business) and the queried entity. Possible values are: \* not-found \* match \* no-match * **valid:** True if the phone number is valid.. * **lineType:** The line type of the phone number. \* landline - Traditional wired phone line. \* fixed-voip - VOIP-based fixed line phones. \* mobile - Wireless phone line. \* voicemail - Voicemail-only service. \* toll-free - Callee pays for call. \* premium - Caller pays a premium for the call-e.g. 976 area code. \* non-fixed-voip - Skype, for example. \* other - Anything that does not match the previous categories. * **phoneNumberCarrier:** The company that provides voice and/or data services for the phone number. Carriers are returned at the MVNO level. |
| alerts | Returns a list of fields affected in the rare case of a partial data outage; otherwise it will be empty. In the case of a partial data outage, it is recommended to use the partial response in the real-time transaction model and use the alerts field data for diagnostics in post transaction. *example:Limited Identity Insights are available to comply with applicable law* | NA |
| PrimaryEmail | A primary email contact. | * **matchToName:** The match status between the input name and the queried entity. * **domainCreationDate:** The date when the email domain was created. Format is YYYY-MM-DD. * **valid:** True if the email address is valid. * **firstSeenDays:** Count of days since the email was first observed in Identity Network. If the email has not been observed before, firstSeenDays will be 0. * **lastSeenDays:** Number of days that have passed since the email address was last seen. * **mailboxVelocity:** Number of times email has been seen in last 180 days. * **isDisposable:** True if the email domain is disposable. Disposable emails are generally associated with fraudulent activities. If true, this is one of the strongest risk indicators and the transaction should be flagged for further review. * **emailRisk:** Comprehensive risk score associated with an email address. * **score:** Comprehensive risk score associated with an email address, with a higher score indicating a riskier individual.A number between 0 and 1 rounded to three decimal places.
|
| IP | IP address of a network. | * **billingAddressDistance:** The distance (in miles) between the IP address and the physical address. * **connectionType:** Ip Connection type description. Possible values are: \* cable-dsl \* corporate \* cellular \* dialup * **lastSeenDays:** Number of days that have passed since the IP address was last seen. * **shippingAddressDistance:** The distance (in miles) between the IP address and the physical address. * **providerDetails:** This field contains information related to the consumer device service provider used to authorize with your product or service. \* ipCarrier - The service provider used by the consumer device when attempting to authorize with your product or service. \* country - The country where the consumer device is located when attempting to authorize with your product or service. \* city - The city where the consumer device is located when attempting to authorize with your product or service. \* state - The state where the consumer device is located when attempting to authorize when your product or service. * **isProxy:** A flag indicating whether the IP is suspected to be a proxy IP. * **proxyRiskClass:** An indicator of the riskiness associated to the type of the proxy IP. \* High - Confirmed TOR node or Hosted VPN IP with TOR like behavior patterns. \* Medium - Hosted VPN or Web Browser \* Low - OS provider or Corporate VPN |
| shippingAddress | Shipping address details. | * **validityLevel:**The most granular level to which the address could be validated. Ex.If the address was only valid to the city level (but not to the house level), it would return valid_to_city. Possible Values are:* valid_to_house_number* missing_address* invalid* valid \* valid_to_street \* valid_to_country \* valid_to_city \* valid_to_house_number_missing_apt * **lastSeenDays:** Number of days that have passed since the address was last seen. * **firstSeenDays:** Number of days that have passed since the address was first seen. * **matchToName:** The match status between either of the input names (person or business) and the queried entity. Possible values are: \* not-found \* match \* no-match |
| billingAddress | Billing address details. | * **validityLevel:**The most granular level to which the address could be validated. Ex.If the address was only valid to the city level (but not to the house level), it would return valid_to_city. Possible Values are:* valid_to_house_number* missing_address* invalid* valid \* valid_to_street \* valid_to_country \* valid_to_city \* valid_to_house_number_missing_apt * **shippingAddressRelationship:** The relationship between billing and shipping address. Possible values are: \* match \* city_match \* seen_together \* seen_with_others \* no_relationship \* null * **lastSeenDays:** Number of days that have passed since the address was last seen. * **firstSeenDays:** Number of days that have passed since the address was first seen. * **matchToName:** The match status between either of the input names (person or business) and the queried entity. Possible values are: \* not-found \* match \* no-match |
| homePhone | Describe home phone details. | * **matchToName:** The match status between either of the input names (person or business) and the queried entity. Possible values are: \* not-found \* match \* no-match * **valid:** True if the phone number is valid.. * **lineType:** The line type of the phone number. \* landline - Traditional wired phone line. \* fixed-voip - VOIP-based fixed line phones. \* mobile - Wireless phone line. \* voicemail - Voicemail-only service. \* toll-free - Callee pays for call. \* premium - Caller pays a premium for the call-e.g. 976 area code. \* non-fixed-voip - Skype, for example. \* other - Anything that does not match the previous categories. * **phoneNumberCarrier:** The company that provides voice and/or data services for the phone number. Carriers are returned at the MVNO level. |
| mobilePhone | Describe mobile phone details. | * **matchToName:** The match status between either of the input names (person or business) and the queried entity. Possible values are: \* not-found \* match \* no-match * **valid:** True if the phone number is valid.. * **lineType:** The line type of the phone number. \* landline - Traditional wired phone line. \* fixed-voip - VOIP-based fixed line phones. \* mobile - Wireless phone line. \* voicemail - Voicemail-only service. \* toll-free - Callee pays for call. \* premium - Caller pays a premium for the call-e.g. 976 area code. \* non-fixed-voip - Skype, for example. \* other - Anything that does not match the previous categories. * **phoneNumberCarrier:** The company that provides voice and/or data services for the phone number. Carriers are returned at the MVNO level. |
| scores | Identity scores of the cardholder. | * **ipRisk:** Describes IP Risk. * **score:** A 0-1 score (rounded to three decimal places) associated with an IP address.
* **identityRisk:** Describes Identity Risk * **score:** A comprehensive 0-500 score associated with the individual's identity.
* **reasonCode:** Reason code explanation value for the identity risk score based on data provided. Possible values are: \* High Severity : AA-AP \* Medium Severity : JA-JF \* Low Severity : RA-RP |
| paymentCard | Cardholder network activity. | * **cardHolderNamefirstSeenDays:** Count of days since the payment card and name was first observed in the network. If they have not been observed together before, first seen days will be 0. * **cardHolderNameVelocity:** Count of times the payment card and name have been observed in the network over the past 90 days. If they have not been observed together in the past 90 days, velocity will be 0. |
| paymentAmount | Purchase amount variance in merchant category. | * **merchantCategoryRatio:** A ratio of the purchase amount compared to the median purchase amount seen for other similar merchants in the same category. The higher the ratio means that the purchase amount is further from the median purchase amount observed. |
### Reason Codes {#reason-codes}
| **High Severity** | | **Medium Severity** | | **Low Severity** | |
|-------------------|---------------------------------------------------|---------------------|---------------------------------------------|------------------|------------------------------------------------|
| **Reason code** | **Description** | **Reason code** | **Description** | **Reason code** | **Description** |
| AA | Consumer Identity is suspicious | JA | New Consumer or not sufficient information | RA | Consumer Trust Established across all elements |
| AB | Increased Risk associated with Email | JB | Medium Risk Signals associated with Email | RB | Established Credibility for Email |
| AC | Increased Risk associated with Email \& IP | JC | Medium Risk Signals associated with Address | RC | Established Credibility for Email \& IP |
| AD | Increased Risk associated with Email \& Address | JD | Medium Risk Signals associated with Phone | RD | Established Credibility for Email \& Address |
| AE | Increased Risk associated with Email \& Phone | JE | Medium Risk Signals associated with Name | RE | Established Credibility for Email \& Phone |
| AF | Increased Risk associated with Email \& Name | JF | Medium Risk Signals associated with IP | RF | Established Credibility for Email \& Name |
| AG | Increased Risk associated with IP | | | RG | Established Credibility for IP |
| AH | Increased Risk associated with IP \& Phone | | | RH | Established Credibility for IP \& Phone |
| AI | Increased Risk associated with IP \& Address | | | RI | Established Credibility for IP \& Address |
| AJ | Increased Risk associated with IP \& Name | | | RJ | Established Credibility for IP \& Name |
| AK | Increased Risk associated with Address | | | RK | Established Credibility for Address |
| AL | Increased Risk associated with Address \& Phone | | | RL | Established Credibility for Address \& Phone |
| AM | Increased Risk associated with Address \& Name | | | RM | Established Credibility for Address \& Name |
| AN | Increased Risk associated with Name | | | RN | Established Credibility for Name |
| AO | Increased Risk associated with Name \& Phone | | | RO | Established Credibility for Name \& Phone |
| AP | Increased Risk associated with Phone | | | RP | Established Credibility for Phone |
| AQ | Increased Risk associated with Device \& Email | | | RQ | Established Credibility for Device \& Email |
| AR | Increased Risk associated with Device \& IP | | | RR | Established Credibility for Device \& IP |
| AS | Increased Risk associated with Address \& Device | | | RS | Established Credibility for Address \& Device |
| AT | Increased Risk associated with Device \& Name | | | TY | Established Credibility for Device \& Name |
| AU | Increased Risk associated with Device \& Phone | | | RU | Established Credibility for Device \& Phone |
| AV | Increased Risk associated with Email \& Payment | | | RV | Established Credibility for Email \& Payment |
| AW | Increased Risk associated with IP \& Payment | | | RW | Established Credibility for IP \& Payment |
| AX | Increased Risk associated with Address \& Payment | | | RX | Established Credibility for Address \& Payment |
| AY | Increased Risk associated with Name \& Payment | | | RY | Established Credibility for Name \& Payment |
| AZ | Increased Risk associated with Payment \& Phone | | | RZ | Established Credibility for Payment \& Phone |
## Disclaimers {#disclaimers}
This model is designed to be an informational tool only. This model is provided as a rough estimate of
authentication-based risk decisioning performance. The analysis performed by this model is a series of general estimates
which are based upon the underlying information and assumptions now available. That information may change over time,
and the analysis would need to be updated to reflect those changes for the analysis to be useful. The assumptions
regarding authorization rates are hypothetical and there can be no guarantee that they will be achieved. Actual results
may vary substantially from the figures shown. Mastercard accepts no responsibility for any losses arising from any use
of or reliance upon any calculations or conclusions reached using this Model.
MASTERCARD MAKES NO REPRESENTATIONS OR WARRANTIES OF ANY KIND, EXPRESS OR IMPLIED, INCLUDING (A) THE IMPLIED WARRANTIES
OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE, TITLE, AND NON-INFRINGEMENT; (B) RELATING TO THE PERFORMANCE OF
SMART AUTHENTICATION OR USE OF RISK INFORMATION; (C) THAT USE OF SMART AUTHENTICATION OR RISK INFORMATION SHALL BE
UNINTERRUPTED OR ERROR-FREE; OR (D) CONCERNING THE ACCURACY, QUALITY, RELIABILITY, SUITABILITY, OR EFFECTIVENESS OF THE
RISK INFORMATION OR ANY OTHER DATA, RESULTS, CONTENT, OR OTHER INFORMATION OBTAINED OR GENERATED BY COMPANY THROUGH ITS
USE OF SMART AUTHENTICATION OR ANY RISK INFORMATION. SMART AUTHENTICATION, RISK INFORMATION, AND OTHER MASTERCARD IP IS
PROVIDED "AS IS, " WITH ALL FAULTS, KNOWN AND UNKNOWN. THE COMPANY ASSUMES THE ENTIRE RISK ARISING OUT OF ITS USE OF
SMART AUTHENTICATION AND ITS USE OF THE RISK INFORMATION UNDER ALL APPLICABLE LAWS, INCLUDING THOSE RELATING TO PRIVACY
AND DATA PROTECTION, BANKING, CREDIT, AND ANTI-DISCRIMINATION.