How to Install and Configure the Kount Anti-Fraud Solution in VTEX

July 16, 2024 19:44

Provide fraud protection to your storefront by installing the Kount Anti-Fraud Solution in the VTEX marketplace. Kount is the leading AI-driven fraud protection solution for your business. Kount Command is available as an Anti-Fraud Solution within the VTEX Payment Gateway Affiliations of your VTEX shop. To successfully set up the Kount app, you must have your Agent Web Console sign-in credentials and an existing VTEX account.

Adding and Configuring the Kount Anti-Fraud Solution

Sign in to the VTEX commerce platform.
Go to the VTEX store settings, select Payment and then Settings.
Select Gateway Affiliations.
Select Add (+), and then select Kount.
Configure the Gateway Affiliation settings:
- Affiliation Name: This setting defaults to Kount - New configuration. You can change this setting to fit your organizational needs. The recommended best practice is to match the corresponding WebsiteID, for example, Kount - [WebsiteID].
- Test or Live/Production: This setting lets you choose between sending traffic to the Kount test environment or the Kount production environment. Production access is only available for customers under agreement with Kount after testing and production certification has been completed.
- Application Key: Enter your Kount-provided Merchant ID (MID). If you do not have your MID, contact your Kount Customer Success Manager.
- Application Token: Enter your Kount API key. Refer to How to Create an API Key for Authentication to Kount if you have not already created one. The API key must correspond to the chosen test/production environment setting.
- Enable Risk Pre-Analysis: This setting enables the Kount Risk Assessment to occur before Authorization (pre-auth), which lets customers perform a fraud risk analysis before attempting a payment authorization from your gateway.
- Kount Website ID: Kount supports the ability to send traffic from multiple Websites to the same Kount environment for customers with more than one website property. Website IDs are used to identify and differentiate that traffic. The Website ID used in this field must correspond to a Website ID within the Agent Web Console (AWC) of the applicable Kount test/production environment. The Website ID is set to Default unless custom Website IDs are created by a customer.
Select Save.

Linking the Kount Anti-Fraud Solution to Payment Conditions

Once the Kount Anti-Fraud Solution has been configured as a Payment Gateway Affiliation, it needs to be associated with each active and applicable payment condition within the VTEX store.

Sign in to the VTEX commerce platform.
Go to the VTEX store settings, select Payment and then Settings.
Select the store card you want to add the Kount app to.
Select the Use anti-fraud solution checkbox.
Select the Kount Affiliation Name you created during configuration.
Select Save.
Repeat this process for each applicable payment condition.

Configuring ENS for Manual Review

We provide our customers with the flexibility to be automated or manual. The Event Notification Service provides functionality for customers to manually review and update the status of transactions in the Agent Web Console after the initial Risk Inquiry Service evaluation, and then automatically communicate those changes back to VTEX.

Sign in to the Agent Web Console using your Kount credentials.
Select Fraud Control and then Websites.
Select the Website ID settings (the gear icon), and then select Edit.
Select Yes to enable the Event Notification Service.
In the Merchant ENS URL field, enter the ENS URL. Use the shop identifier from your VTEX store URL. Example: <shop identifier>.myvtex.com

The URL must follow this template:
```
https://api.kount.com/tpa/ens-orchestrator.prod06.prd.eds.us-west-2.aws.efx/ens/platform/VTEX/shop/<shop identifier>.myvtex.com
```

Reviewing the Kount Anti-Fraud response on VTEX transactions

Once you have installed and configured the Kount Anti-Fraud Solution, you are able to review data from the Kount risk assessment for status changes on transactions within your VTEX store.

Sign in to the VTEX commerce platform.
Select Orders and then Transactions.
You can view the status of the orders in Transactions. The three order statuses are:
- Approved: These orders have passed risk analysis and the payment is processed.
- Canceled: These orders have not passed risk analysis and the payment is not processed.
- Analyzing Risk: These orders are pending review in the Agent Web Console. You must sign in to the Agent Web Console to process these transactions.

Configuring the Kount Anti-Fraud Solution for the Device Data Collector with Google Tag Manager

The Device Data Collector is implemented within VTEX using the Google Tag Manager. Once the Google Tag Manager is set up within your VTEX environment, perform the following steps to configure the Device Data Collector.

Sign in to the VTEX commerce platform.
Go to Settings > Storefront > Checkout.
Go to the store you want to add the Device Data Collector to and then go to the store settings. Once in the store settings, select Checkout.

Note

Use the default store if you want to apply the Device Data Collector to all of your stores.
Enter your Google Tag Manager Collection ID (GTM-XXXX) in the Google Tag Manager field.

To set up the Google Tag for Device Data Collector, create a new custom HTML Google Tag, update line four of the code with ssl or tst, and then update the merchant ID with your merchant ID. Set triggering for this tag to All Pages. Go to Setting up Google Tag Manager on the VTEX developer site for more information.

Refer to the following code example:

<script>
document.body.setAttribute("class", "kaxsdc " + document.body.getAttribute("class"));
  
var url = "https://tst.kaptcha.com/collect/sdk?m=XXXXXX";
var startTime = new Date().getTime();

var loadSecondScript = function () {
        var kclient = new ka.ClientSDK();
        kclient.setupCallback(
            {
                'collect-end':
                        function (params) {
                                var endTime = new Date().getTime();
                                /* console.log("Client side collector (approx) time: " + (endTime - startTime) + " mills"); */
                        },
                'collect-begin':
                        function (params) {
                                sessionStorage.setItem("kMercSessId", params['MercSessId']);
                        /* console.log("Begin\nMercSessId: " + sessionStorage.getItem("kMercSessId")); */
                                if (window.vtex !== undefined && sessionStorage.getItem("kMercSessId") !== window.vtex.deviceFingerprint) {
                                        window.vtex.deviceFingerprint = sessionStorage.getItem("kMercSessId");
                          /* console.log("Setting deviceFingerprint - MercSessId: " + window.vtex.deviceFingerprint + " - " + sessionStorage.getItem("kMercSessId")); */
                                }
                        }
        });
        kclient.autoLoadEvents();
}

if (sessionStorage.getItem("kMercSessId") === null) {
        loadScript(url, loadSecondScript);
};

if (window.vtex !== undefined && sessionStorage.getItem("kMercSessId") !== window.vtex.deviceFingerprint) {
  window.vtex.deviceFingerprint = sessionStorage.getItem("kMercSessId");
   console.log("Setting deviceFingerprint - MercSessId: " + window.vtex.deviceFingerprint + " - " + sessionStorage.getItem("kMercSessId"));
}
  
function loadScript(url, callback) {
        var head = document.getElementsByTagName('head')[0];
        var adapterScript = document.createElement('script');
        adapterScript.src = url;
        adapterScript.type = "text/javascript";
        adapterScript.onreadystatechange = callback;
        adapterScript.onload = callback;
        head.appendChild(adapterScript);
}
</script>

Note

Use ssl.kaptcha.com when the anti-fraud provider is configured for Live or Production, and use tst.kaptcha.com when the anti-fraud provider is configured for Test.

Was this article helpful?

1 out of 1 found this helpful