What are Blacklists and Greylists?

Blacklists are lists of attribute values that are permanently barred from buying from you. Rebilly has various blacklists each relating to one of the following attributes:

  • Customer IP address - IP address of the customer making the purchase;
  • Customer email - Email address of the customer making the purchase;
  • Customer ID - The Rebilly “customerId” of the customer making the purchase;
  • Payment card - The card number of the payment card being charged;
  • Payment card BIN - The Bank Identification Number of the payment card being charged;
  • Device fingerprint - A string holding information about the software and the device used by the customer making the purchase;
  • Country - The country of the customer making the purchase and/or of the charged payment card’s billing address;

When a customer attempts to make a purchase from you with a credit card or fingerprint that has been flagged on your blacklist, the transaction is blocked from being sent to the payment gateway altogether. 

What are Greylists?

Greylists have the same behavior, but have a TTL (time to live), thus they are not permanent. They’re typically used to block weak attributes temporarily — like residential IP addresses, which change frequently. Given the small difference between blacklists and greylists, we will simply mention blacklists going forward in this article.

How Does Rebilly Use Blacklists?

When Rebilly encounters an event that would result in a new Customer, Payment Card, Subscription, or Transaction, the blacklists are examined to see if any match can be found on the entity’s relevant attributes. If a match is detected, the operation is aborted to avoid any damage to your business. In the event where blacklisted attributes match on a Subscription during its renewal, it will be canceled.

How Does Blacklisting Benefit My Business?

One of the most effective ways to prevent friendly or criminal fraud is through blacklisting. Once you’ve identified patterns and scenarios that generate disputes or other unwanted outcomes, you can add the relevant values to your attribute blacklists to stop further damage to your business.

Managing Blacklists in Rebilly

The Rebilly app offers multiple ways of entering blacklist items: through our Rules Engine or through dedicated Blacklist endpoints in our app. This section will cover basic blacklist management, which can be summed up as adding or removing items from your blacklists.

How to Add a Blacklisted Item in the App

From the Automations page, select the “Blacklist” section then click on “Add Blacklist Item”. Next, you will be asked to select the blacklist type and enter the blacklisted item. You can always go back to the Blacklist section to view and edit blacklisted items. 

How to Add a Greylisted Item in the App

Follow the instruction to create a blacklisted item, then when it comes time to choose the TTL (Time to live), enter the number of seconds. The minimum required value is 30 seconds. 

How to Create a Blacklist Entry Using the Rules Engine

Blacklist items can also be added automatically from our Rules Engine. Check out the Rules Engine help section to become familiar with setting up rules.

Here are the system events that currently support blacklist actions:

  • Dispute Created
  • Transaction Processed
  • Risk Score Changed

To create a blacklisting rule, go to “Automations”, choose the “Rules Engine” page, and select “System Events”. 

On the list of events, select the event you want your rule to apply to. In this example, we will create a “Dispute Created”  blacklist rule. Once on the “Dispute Created” page, click the “Add Rule” button. 

From there, define your rule information and conditions. In the “Actions” section, click on the button “Add Action” and select “Blacklist”. 

Don’t forget to save your new rule. The blacklist will be automatically created when the conditions for this rule match. All actions will run unless they are toggled off. To view, edit, and delete your rule, go back to the “Dispute Created” page and click on the appropriate icons next to the rule name. 

What’s next? 

Need help? 

If you have any questions or need assistance with implementing Rebilly, please contact us. You can email us at support@rebilly.com, chat with us or schedule a talk with a billing specialist here.

Did this answer your question?