Company Administration Edition - Equifax

Overall Score – –...

47 downloads 535 Views 1MB Size
eIDcompare User Guide Company Administration Edition

January 2016

Confidentiality Agreement The material presented in this guide is confidential and proprietary to Equifax Information Services LLC (“Equifax”).

By accepting this guide, recipients agree not to disclose any

information contained herein to any third parties and/or to reproduce any part of this guide without, in each instance, the prior written consent of Equifax by writing to: Equifax Information Services LLC Marketing Communications, H-22 1550 Peachtree Street, N.W. Atlanta, GA 30309

Confidentiality, Non-Disclosure, and Legal Disclaimer Information The contents of this document are confidential and proprietary to Equifax Technology Solutions, LLC (“Equifax) and may not be reproduced, published, or disclosed to others without written authorization of Equifax. Unauthorized or improper access to the Equifax eID system, unauthorized disclosure of confidential codes or system access instructions, intentional alteration or destruction of data, or any other unauthorized activity, can lead to civil liability and/or federal prosecution under the Counterfeit Access Devi ce and Computer Fraud and Abuse Act. Equifax, eIDcompare, and Equifax ePort are registered trademarks of Equifax Inc. Inform > Enrich > Empower and eIDcompare are trademarks of Equifax Inc. Equifax and Equifax ePort are registered trademarks of Equifax Inc. Copyright © 2016 Equifax Inc., Atlanta, Georgia. All rights reserved. Copyright © 2016 Equifax Inc. Atlanta, Georgia. All rights reserved.

Confidential and Proprietary Information. Copyright 2016, Equifax Inc., Atlanta, Ga. All rights reserved Page | 2

Contacting Support All support requests should be directed to Equifax Customer Support by phone at the numbers below, or via email requests. Requests may consist of questions, software related issues, or enhancement requests to software. Country

Business Hours

Phone Number

USA

08:00 AM EST. 05:00 PM EST

1-888-407-0359, Option 4

UK

08:00 AM GMT. 06:00 PM GMT

08000 560560

Canada

08:00 AM EST. 05:00 PM EST

1-800-387-9986

Emergency Support Customers requiring production related or critical support should contact the Equifax Support Desk at the toll-free numbers. Examples of emergency support include cases in which a customer is experiencing major business impact and only apply to production environments. Support is available 24 hours/7 days a week in the US and Canada. Note: For urgent issues after hours in Canada, please call and leave a voicemail message. The message will generate a page to the US support desk.

Non-emergency Support Customers requiring non-critical support or research requests should contact Equifax the USA, UK, or Canada support desk by telephone during regular business hours or submit an email to: [email protected]

Confidential and Proprietary Information. Copyright 2016, Equifax Inc., Atlanta, Ga. All rights reserved Page | 3

Table of Contents Confidentiality Agreement ..........................................................................................................2 Contacting Support .....................................................................................................................3 Emergency Support .....................................................................................................................3 Non-emergency Support..............................................................................................................3 About the eIDcompare Product ...................................................................................................5 FEATURES ...............................................................................................................................6 BENEFITS ................................................................................................................................6 Input ......................................................................................................................................6 Output/Results ............................................................................................................................8 Completion Messages .................................................................................................................8 Before You Begin .......................................................................................................................8 Registering for the eIDcompare Product .................................................................................... 10 Giving ePort Users Access to eIDcompare ................................................................................ 16 Using the eIDcompare Product .................................................................................................. 16 Submitting an eIDcompare inquiry ............................................................................................ 19 Transaction ID .......................................................................................................................... 24 Addendum A - Risk Logic ........................................................................................................ 28 Addendum B - Table of All Possible Reason Codes .................................................................. 32

Confidential and Proprietary Information. Copyright 2016, Equifax Inc., Atlanta, Ga. All rights reserved Page | 4

About the eIDcompare Product OVERVIEW The eIDcompare product is the Equifax Internet-based ID Verification service that validates whether an applicant's identity actually exists and offers an overall risk score for that identity. eIDcompare leverages a cascade approach to validating applicant information against multiple data sources. EIDCOMPARE:

THE ID VERIFICATION AUTHORITY

The eIDcompare™ product is designed to exclusively help mitigate ID fraud and assist in regulatory compliance by providing ID verification of consumer identities. eIDcompare does this by verifying supplied ID information across multiple data sources via complex data mining and data mining and data match logic. eIDcompare also provides clients with a highly predictive Fraud Index Score which indicated the likelihood an ID may be associated with fraudulent activity. The Fraud Index Score is derived using an Equifax-developed statistical model which was explicitly designed and validated to detect identity fraud data patterns and characteristics. NON-FCRA PRODUCT eIDcompare is a non-FCRA product. This means the Fair Credit Reporting Act (FCRA) regulations do not apply to the use of this product. However, it is critical eIDcompare be used solely for the purpose of identity verification and identity fraud prevention and not be used in any way to make credit decisions.

Confidential and Proprietary Information. Copyright 2016, Equifax Inc., Atlanta, Ga. All rights reserved Page | 5

FEATURES If an identity is connected to questionable activity, eIDcompare delivers a warning indicator, reason codes, data source validation, and either a ‘pass’ or ‘manual review’ recommendation. Additional features: Validates that an identity exists, and that of itself, is legitimate Identifies misused addresses and telephone numbers Identifies misused or fraudulent Social Security numbers Verifies whether an identity is associated with suspicious fraud attributes Offers High, Med, Low Reason Code Risk Levels Includes a Predictive Fraud Score option The predictive Fraud Index Score that indicates the likelihood an ID may be associated with fraudulent activity is derived using an Equifax-developed statistical model which was explicitly designed and validated to detect identity fraud data patterns and characteristics. BENEFITS Reduces losses due to inadequate ID verification processes Assists with compliance requirements regarding ID verification Streamlines ID verification decision with “Pass” or “Review Recommended” recommendation Specific reason code results and Fraud Index Score available for further ID verification purposes as needed Pay per ID Verification transaction submitted – no monthly minimums or obligations Input eIDcompare verifies an ID by using the following data fields: Name (First & Last) required Current Address (Street, City, State, Zip) required Former Address Social Security Number Phone Number Birthdate Driver’s License Number Driver’s License State of Issue

Confidential and Proprietary Information. Copyright 2016, Equifax Inc., Atlanta, Ga. All rights reserved Page | 6

Note: Name and Address are the only required data fields. However, the more information that can be supplied typically derives better results. This is definitely the case for the SSN and the Date of Birth fields. Sensitivity Settings Clients have the option to select one of the following three sensitivity settings for the ID verification logic prior to submitting each ID verification request. The levels are: Highly Sensitive Sensitive Regular You can view the risk decision criteria for each of these settings in Addendum A and Addendum B sections at the end of this guide. Using the selected sensitivity, eIDcompare will return an Assessment Recommendation of either PASS or REVIEW RECOMMENDED. The sensitivity feature allows each client to select the option which works best for their business needs with regards to managing transactional risk. For example, using the same ID information you may receive an Assessment Recommendation of PASS when using Regular sensitivity and receive an Assessment Recommendation of REVIEW RECOMMENDED when using the Sensitive (or highly Sensitive) setting. In other words, as the sensitivity setting moves from the Regular to Highly Sensitive setting, eIDcompare will recommend REVIEW RECOMMENDED on a higher percentage of transactions. The following table illustrates the typical percentage of transactions flagged for “review” versus true fraud caught by sensitivity option. Sensitivity Level

Review %

% Frauds Caught

% Pass

Highly Sensitive

22%

73-82%

78%

Sensitive

10%

68-73%

90%

Regular

5%

55-68%

95%

Confidential and Proprietary Information. Copyright 2016, Equifax Inc., Atlanta, Ga. All rights reserved Page | 7

- Important Disclaimer These percentages above are provided as a directional guideline only and are based on the overall client population using eIDcompare. These are not guaranteed percentages and should not be used as exact percentages your company might experience. The target consumer population can be vastly different for each company and certain consumer populations tend to present greater ID verification challenges and /or contain a higher percentage of fraudsters than normal – thereby resulting in higher review percentages.

Output/Results When submitting an inquiry, eIDcompare returns the following results for each completed transaction: Assessment Recommendation – PASS or REVIEW RECOMMENDED Fraud Index Score – 1 through 8 Reason Codes The Fraud Index Score and Reason Codes are provided should a client choose to use the presence (or absence) of certain Reason Codes in combination with a specific Fraud Index Score value to make a different determination other than the Assessment Recommendation provided.

Completion Messages After the identification assessment and authentication process completes, a completion message is sent to the customer containing an overall assessment recommendation of pass, fail, or manual review. The sensitivity of the overall assessment recommendation is based on the Equifax risk strategy configuration chosen by the customer.

Before You Begin The purpose of this guide is to provide instructions and guidance for registering and using the eIDcompare (ID Verification) service. This document is not intended to provide instructions for: ePort Registration Creation of Company Administration Creation of ePort users

Confidential and Proprietary Information. Copyright 2016, Equifax Inc., Atlanta, Ga. All rights reserved Page | 8

Note: Your Company must already be registered and approved for access to Equifax ePort. For more information regarding ePort registration, contact Equifax Customer Support; contact information is provided on the “Contact Us” page on the ePort web site. You may also refer to the 'How to Register for ePort Guide' for instructions.

You must establish at least one Company Administrator on ePort. If you have not completed this step, please refer to the 'How to Use eCredit Information Guide' for instructions on how to accomplish a Company Administrator. You must establish company end users on ePort and grant them access to the eIDcompare product in order to use eIDcompare on ePort. If you have not completed either of these steps, please refer to the 'How to Use eCredit Information Guide' for instructions on how to accomplish this.

Confidential and Proprietary Information. Copyright 2016, Equifax Inc., Atlanta, Ga. All rights reserved Page | 9

Registering for the eIDcompare Product The instructions listed below are designed for registered ePort customers who want to access eIDcompare. Step 1: Go to https://www.ePort.equifax.com. Log in to ePort as a Company Administrator by entering the Company ID, User ID, and Password; Click Login

Step 1

Note: If you are not registered for ePort, refer to the ‘Before You Begin’ section of this guide.

Confidential and Proprietary Information. Copyright 2016, Equifax Inc., Atlanta, Ga. All rights reserved Page | 10

Step 2: Once you have successfully entered your credentials and clicked Login, the Permissible Purpose screen will be displayed. After carefully reading the clause, click Submit. If you do not wish to have the Permissible Purpose displayed each time you log in to ePort, click the ‘Agree, Do not display this message again’ check box before clicking Submit. Note: If you previously opted for the Permissible Purpose not to be displayed skip to Step 3

Step 2

Step 3: Once the Submit button has been clicked, the Challenge Question screen will be displayed. Enter your Challenge Answer in the Challenge Answer field then click Submit.

* Your Security Question will appear here.

Step 3

Your Company ID

Confidential and Proprietary Information. Copyright 2016, Equifax Inc., Atlanta, Ga. All rights reserved Page | 11

Step 4: Upon successful login and authentication, the Equifax ePort home page will appear. Click the Administration tab.

Step 4

Step 5: Once the Administration tab is clicked, by default you will be on the User Management tab. Click the Product Registration tab.

Step 5

Confidential and Proprietary Information. Copyright 2016, Equifax Inc., Atlanta, Ga. All rights reserved Page | 12

Step 6: After clicking on the Product Registration tab by default you will be on the Left Navigation Tab eFTS. Click Left Navigation tab eIDcompare.

Step 6

Step 7: Once the eIDcompare window is displayed, click Register Now

Step 7

Confidential and Proprietary Information. Copyright 2016, Equifax Inc., Atlanta, Ga. All rights reserved Page | 13

Step 8: Review and electronically sign the eIDcompare Agreement by completing the following sub steps: Read through the agreement Scroll down and check the seven “I Agree” boxes (located at sections 5, 7.3, 8, 9.3, 11.3, 13, and 14.) Complete the Name and Date information. (Follow exact instructions to prevent errors when submitting the form) Enter “I Agree” in the provided field Click the I Agree button.

Check this box

*** Important *** Your Company Name, Client Address (if provided), and Signer’s Name will appear here.

Confidential and Proprietary Information. Copyright 2016, Equifax Inc., Atlanta, Ga. All rights reserved Page | 14

Step 9: Once the ‘I Agree’ button is clicked the eIDcompare registration completion screen appears.

Confidential and Proprietary Information. Copyright 2016, Equifax Inc., Atlanta, Ga. All rights reserved Page | 15

Giving ePort Users Access to eIDcompare The ePort Company Administrator is automatically given access to eIDcompare. Before the company end users can use eIDcompare, the Company Administrator must add the End User to the User Group. For instructions on how to add ePort Users, refer to the ePort Admin Guide Help Section ‘How to Use eCredit Information’ Guide.

Using the eIDcompare Product If you are not already logged in to ePort, do so by going to: https://www.eport.equifax.com . Enter your Company ID, User ID, and Password then click Login to access the application.

Confidential and Proprietary Information. Copyright 2016, Equifax Inc., Atlanta, Ga. All rights reserved Page | 16

Once you have logged in to the ePort application, click eIDcompare under the Quick Links section.

Note Company Administrator must have successfully set up the access to the eIDcompare product for each appropriate company end user before you can use the application; otherwise, the end user will receive the message below.

Confidential and Proprietary Information. Copyright 2016, Equifax Inc., Atlanta, Ga. All rights reserved Page | 17

After clicking the eIDcompare Quick Link the eIDcompare Inquiry screen will be displayed.

Confidential and Proprietary Information. Copyright 2016, Equifax Inc., Atlanta, Ga. All rights reserved Page | 18

Submitting an eIDcompare inquiry To submit an eIDcompare inquiry, select the desired ID Verification Level setting from the ID Verification Level drop down menu. The following three setting options are available: Highly Sensitive, Sensitive and Regular.

The sensitivity feature allows each client to select the option which works best for their business needs with regards to managing transactional risk. Verification Levels: Highly Sensitive Risk – Typically used when the relative transactional cost versus risk is considered to be high. Sensitive Risk – Typically used when the relative transactional cost versus risk is considered to be moderate. Regular Risk – Typically used when the relative transactional cost versus risk is considered to be low. Most routine transactions do not warrant the use of the Highly Sensitive setting. The more sensitive the setting, the pass rate will be lower and the false positive rate will be higher. Refer to Addendum A and Addendum B sections of this guide for specific decision criteria used for each ID Verification Level. If not already selected, make sure that Product Configuration is selected for eIDcompare.

Confidential and Proprietary Information. Copyright 2016, Equifax Inc., Atlanta, Ga. All rights reserved Page | 19

Complete the personal information fields: Required Fields

Optional Fields

First Name

Middle Name

Last Name

Suffix SSN Date of Birth Phone Number

Note Entering optional fields is not mandatory, however, it is highly recommended that the user enter as much additional information as possible for the customer; this will help to ensure the returned results are specific to the desired customer.

Confidential and Proprietary Information. Copyright 2016, Equifax Inc., Atlanta, Ga. All rights reserved Page | 20

When completing the ‘Current Address Information” section, keep in mind that all address fields are required. Street Address City State Zip Address Length check box

Note If the ‘No’ check box is checked for ‘Current Address Information’, you will be prompted to provide the consumers former address.

Enter the Driver’s License Information and verify the information is correct before clicking the Authenticate button. Keep in mind that none of the Driver’s License Information fields are required; however, it is strongly recommended to enter as much information as possible for the customer.

Confidential and Proprietary Information. Copyright 2016, Equifax Inc., Atlanta, Ga. All rights reserved Page | 21

eIDcompare Report Output After the Authentication process has been completed, the eIDcompare transaction results will be displayed.

For your convenience the transaction results are divided into the following two sections: Applicant Details Report Results Applicant Details The Applicant details section will contain the information that was entered on the eIDcompare Inquiry screen.

Confidential and Proprietary Information. Copyright 2016, Equifax Inc., Atlanta, Ga. All rights reserved Page | 22

Report Results The report results section contains the following fields: Assessment Results Overall Score Transaction ID Fraud Indicator Match Assessment Reason Codes Transaction Status

Assessment Results The Assessment Results field provides a recommendation on whether or not a manual review should be conducted. Either Pass or Review Recommended will be displayed. This is a key field used to determine whether or not to accept the identity or perform further steps to confirm the identity.  

Review Recommended – manual review of the consumer transaction recommended. Pass – consumer transaction passed eID assessment

Confidential and Proprietary Information. Copyright 2016, Equifax Inc., Atlanta, Ga. All rights reserved Page | 23

Overall Score The Overall Score field contains the statistically derived Fraud Index Score which indicates the degree to which the identity could be associated with fraudulent activity. A score of 8 indicates there is no indication the ID information submitted is associated with fraudulent activity. A score of 0 indicates there is a high degree of suspicion that the ID information submitted is associated with fraudulent activity. Note A score of 8 does not mean that the ID is a valid ID; it simply means the information provided could not be associated with possible fraudulent activity.

Transaction ID This field contains the unique eIDcompare trace number which is used only for Equifax support purposes.

Fraud Indicator The Fraud Indicator field indicates the likelihood of a consumer being associated with fraudulent activity. Results include: W – Warning Address related and telephone potential fraud warnings were found (for example, applicant’s address belongs to a US Postal Office street address or mail receiving service). Multiple validation attempts are being conducted using the same address, and the consumer’s address cannot be validated on any trusted third party data sources. V – Victim of Fraud  Potential fraud in connection with the applicant’s Social Security Number (A warning code will be returned).  Applicant’s information may be tied to True Name Fraud or a Fraud Victim.  Applicant’s address matches an address in the Equifax Authentication Services (EAS) Hot Address database.  Multiple fraud warnings are detected in connection with a consumer record.  Multiple authentication attempts are being made by the same consumer. B – Both “Warning’ and ‘Victim of fraud’

Confidential and Proprietary Information. Copyright 2016, Equifax Inc., Atlanta, Ga. All rights reserved Page | 24

Match Assessment This information indicates the data sources used to validate the applicants identity and can be used in combination with the other returned results to help you decide whether further review is necessary based on your company’s risk threshold. The following Match Assessment values are possible:

Value

Match Assessment

0

Name and address cannot be verified on any data source.

A

Name and address verified on all data sources.

B

Name and address verified on primary and secondary data sources.

C

Name and address verified on primary and tertiary data sources.

E

Name and address verified on primary data source.

F

Name and address verified on secondary data source.

G

Name and address verified on tertiary data source.

Reason Codes The “Reason Code” (RC) field indicates any processing errors encountered during the transaction. The codes can be used in combination with the other returned results to help you decide whether further review is necessary based on your company’s risk threshold. (Refer to Addendum B for additional information).

Confidential and Proprietary Information. Copyright 2016, Equifax Inc., Atlanta, Ga. All rights reserved Page | 25

Transaction Status This field indicates the degree to which transaction was successfully processed. The following transaction status values are possible: F – Failed due to standard field check edits (i.e. required field not populated. To correct, input data and re-submit) N – Transaction successfully completed. S – Transaction completed with primary Data Source unavailable – Retry later or manual review recommended. X – System error. Please try again.

Using the Results Most clients will accept the transaction for further downstream processing when the Assessment Recommendation returned is ‘PASS’. Depending on the business need, some clients may additionally establish internal policies to also look for existence of certain Reason codes and/or Fraud Index Score values prior to accepting the eIDcompare Assessment Recommendation outright. When the Assessment Recommendation returned is REVIEW RECOMMENDED, most clients will take additional manual review steps to attempt to ascertain whether or not to accept the ID for further downstream processing. Again, depending on the business need, clients establish their own unique internal policies/procedures for handling these REVIEW RECOMMENDED transactions. As with any ID Fraud process, the cost to the business increases exponentially as you move closer to capturing 100% of the fraud. These costs include: 1. The cost to manually process larger volumes of transactions. 2. The loss of good/valid customers who were lost due to the more stringent process: Either through abandonment due to a laborious interrogation process. Inadvertently turned away because they exceeded a too conservative of a risk threshold.

Confidential and Proprietary Information. Copyright 2016, Equifax Inc., Atlanta, Ga. All rights reserved Page | 26

The Key is to determine the right cost/benefit decision balance to capture enough true fraud captures versus the percentage of manual reviews (i.e. false positives) incurred. eIDcompare is a very effective tool in assisting clients in this decision. However, each client must ultimately determine where their risk threshold lies for their particular business needs. Based on the Risk Sensitivity option chosen, please refer to the About the eIDcompare Product section in this guide if additional assistance is needed regarding the result percentages excerpt.

Confidential and Proprietary Information. Copyright 2016, Equifax Inc., Atlanta, Ga. All rights reserved Page | 27

Addendum A - Risk Logic

Highly Sensitive Risk Logic This logic is typically used when the relative transactional cost versus risk is considered to be high. Includes Sensitive Risk Logic plus: Flags for further review all transactions which have any Fraud Indicator present (adds in the ‘W’ warning). Flags for further review all transactions which have a match assessment of ‘0’ without checking reason codes. Flags for further review all transactions which have any of the eID high risk reason codes. Flags for further review all transactions which have a statistical score less than ‘4’. Any transaction having a reason code below will be flagged for further review:

Reason Codes 11

12

16

17

22

23

36

41

85

86

87

88

90

91

92

93

95

96

97

98

99

FH

Confidential and Proprietary Information. Copyright 2016, Equifax Inc., Atlanta, Ga. All rights reserved Page | 28

Any transaction containing a combination of the following reason codes will be flagged for further review: RC

Reason Code Verbiage

14

Elevated use of Address different individuals detected.

44

Last Name not validated

10

Elevated use of Address different individuals detected

by

47

Social Security validated

not Social Security Number has not been validated against a data source.

39

Inquiry Address does not match to primary data source. In cases of California addresses, it accommodates compliance with California Law AB 6555.

60

Identity not located or poor match Tertiary database was unable to find a suitable on tertiary data source match to the consumer-supplied information.

75

Secondary data source was unable to find a Identity not located or poor match suitable match to the consumer supplied on secondary data source information.

Number

Reason Code Definition

by

Same Address has been used 3-5 times by individuals with Different Last Names at the same customer site. Last Name has not been validated against a data source Same Address has been used 3-5 times by individuals with Different or Blank Social Security Number at the same customer site.

While an identity can be located, the address provided by the applicant did not match any address appearing within the primary data source. This is to accommodate compliance with California Law AB 6555.

Confidential and Proprietary Information. Copyright 2016, Equifax Inc., Atlanta, Ga. All rights reserved Page | 29

Sensitive Risk Logic This logic is typically used when the relative transactional cost versus risk is considered to be moderate. Includes Normal Risk Logic plus: Flags for further review all transactions which have Fraud Indicator of either V (Victim) or B (Both victim and warning). Flags for further review all transactions which have any of the eID medium risk reason codes. Regular Risk Logic This logic is typically used when the relative transactional cost versus risk is considered to be low. Flags for further review all transactions which result in a Pure No Hit from all three data sources using reason codes. Flags for further review all transactions which have match assessment (MA) equal to 0 and reason code 36 percent (in other words, the address cannot be validated on any source). Flags for further review all consumers which have a statistical score less than 3. Any transaction having a reason code in column A below and one or more of the reason codes in column B will be flagged for further review. Business Rule

Reason Codes (RC)

A

B

10, 11, 13, 14, 16, 17

36, 41

10, 11, 13

85, 86, 87, 88, 89, 90, 91, 93, 98, 99

14, 16, 17

87, 88, 89, 91,93 ,98, 99

23

47, 49, 87, 92

36, 41

87, 88, 89, 91, 93, 98, 99

FH

N/A

Confidential and Proprietary Information. Copyright 2016, Equifax Inc., Atlanta, Ga. All rights reserved Page | 30

This Page intentionally left blank

Confidential and Proprietary Information. Copyright 2016, Equifax Inc., Atlanta, Ga. All rights reserved Page | 31

Addendum B - Table of All Possible Reason Codes The table below contains a complete list of eIDcompare reason codes and descriptions. RC 00

Reason Code Verbiage

Reason Code Definition

Invalid Message

Invalid Message

Failed Standard Field Checks 01

Failed Standard Field Check(s) for required/optional and improperly formatted input fields

02

Driver's License Format does not Failed Driver’s License Verification because correspond to State of Issue DL format is invalid for the DL state of issue

04

Age does not meet verification Failed Age Verification due to age (calculated criteria from date of birth) less than the customer specified minimum age or greater than the specified minimum age or greater than the customer specified maximum age

05

06

Address Standardization Warning Non-critical Address Standardization error Present for Current Address code returned for Current Address. The address provided will still be considered Address Standardization Error Failed Address Verification due to error code usable as presented. Present for Current Address returned Address Standardization indicating that Current Address could not be standardized. The address is not considered usable as presented.

07

Pattern Recognition Match Found

Pattern Recognition fails due to number of session attempts > 2 for Same Customer

08

Area Code does not correspond to Failed Area Code Verification because Area State on the Current Address Code is invalid for the state on the Current Address

Confidential and Proprietary Information. Copyright 2016, Equifax Inc., Atlanta, Ga. All rights reserved Page | 32

RC

Reason Code Verbiage

10

Elevated use of Address different individuals detected

by Same Address has been used 3-5 times by individuals with Different or Blank Social Security Number at the same customer site.

11

Moderate use of address different individuals detected

by Same Address has been used 6-10 times by individuals with Different or Blank Social Security Number at the same customer site.

13

Reason Code Definition

High use of Address by different Same Address has been used greater than 10 individuals detected times by individuals with Different or Blank Social Security Number at the same customer site.

14

Elevated use of Address different individuals detected

by Same Address has been used 3-5 times by individuals with Different Last Names at the same customer site.

16

Moderate use of address different individuals detected

by Same Address has been used 6-10 times by individuals with Different Last Names at the same customer site.

17

High use of Address by different Same Address has been used greater than 10 individuals detected times by individuals with Different Last Names at the same customer site.

22

Match on database

23

Social Security Number issued Social Security Number was issued prior to prior to date of birth the date of birth entered on the application.

25

Warning: Inquiry address is a Warning: Inquiry address is a storage facility. storage facility Thorough verification suggested.

the

"hot

address" Address has been associated with reported fraud activity.

Confidential and Proprietary Information. Copyright 2016, Equifax Inc., Atlanta, Ga. All rights reserved Page | 33

RC

Reason Code Verbiage

Reason Code Definition

26

Warning: Inquiry Address is a Warning: Inquiry Address is a check cashing check cashing facility facility. Thorough verification suggested.

28

Warning: Inquiry address is a Warning: Inquiry Address is a US post office U.S. post office street address street address. Thorough verification suggested.

29

Warning: Inquiry address is a Warning: Inquiry address is a campground. campground Thorough verification suggested.

31

Warning: Inquiry address is a Warning: Inquiry address is a hotel/motel. hotel/motel Thorough verification suggested.

32

Warning: Inquiry address is a Warning: Inquiry address is a mail receiving mail receiving service service. Thorough verification suggested.

33

Fraud Victim Warning Consumer has been a victim of fraud and present/Information has been online Identity Verification process is stopped blocked due to identity theft to protect consumer. This is to accommodate compliance with the California Law AB 6555, (introduced 2002).

34

Address Standardization Warning Non-critical Address Standardization error Present for Former Address code returned for Former Address. The address provided will still be considered usable by the authentication system.

35

Address Standardization Error Failed Address Verification due to error code Present for Former Address returned from Address Standardization indicating that the Former Address could not be standardized. The address is not considered usable as presented.

Confidential and Proprietary Information. Copyright 2016, Equifax Inc., Atlanta, Ga. All rights reserved Page | 34

RC

36

Reason Code Verbiage

Reason Code Definition

Address Not Verified

The consumer-supplied address did not match a verified address on any data source.

37

Address Standardization Warning Non-critical Address Standardization error Present for Drivers License code returned for Drivers License Address. Address The address provided will still be considered usable by the authentication system.

38

Address Standardization Error Failed Address Verification due to error code Present for Drivers License returned from Address Standardization Address indicating that the Driver’s license Address could not be standardized. The address is not considered usable as presented.

39

Inquiry Address does not match to primary data source. In cases of California addresses, it accommodates compliance with California Law AB 6555.

41

Consumer-supplied address cannot The address provided by the consumer could be verified not be verified versus any confirming data source Primary data source not available

The primary data source could not be accessed doe several possible reasons, including access errors and improper connections.

First Name not validated

First Name has not been validated against a data source.

Last Name not validated

Last Name has not been validated against a data source

42

43

44

While an identity can be located, the address provided by the applicant did not match any address appearing within the primary data source. This is to accommodate compliance with California Law AB 6555.

Confidential and Proprietary Information. Copyright 2016, Equifax Inc., Atlanta, Ga. All rights reserved Page | 35

RC

Reason Code Verbiage

Reason Code Definition

45

No identity located/or poor match The primary data source was unable to find a on primary data source suitable match to the consumer-supplied information.

47

Social Security validated

48

Identity located on primary data Primary data source match to the consumersource - Good match supplied information was good.

49

Date of Birth not validated

51

Identity located on a primary data Primary data source match to the consumersource - Adequate match supplied information was good.

53

Consumer requested security Consumer requested security freeze freeze - information not available information not available on primary data on primary data source source.

54

Identity located on primary data Primary data source match to the consumersource - Possible match supplied information was fair.

Number

Tertiary database unavailable

not Social Security Number has validated against a data source.

not

been

Date of Birth has not been validated against a data source.

57

Tertiary database could not be accessed for several possible reasons, including access errors and improper connections.

60

Identity not located or poor match Tertiary database was unable to find a suitable on tertiary data source match to the consumer-supplied information.

63

Identity located on tertiary data Tertiary data source match to the consumersource - Possible match supplied information was excellent or very good.

Confidential and Proprietary Information. Copyright 2016, Equifax Inc., Atlanta, Ga. All rights reserved Page | 36

RC

64

Reason Code Verbiage

Reason Code Definition

Phone number not validated

Phone number has not been validated against a data source.

66

Identity located or poor match on Tertiary database was unable find a suitable tertiary data source - Adequate match to the consumer-supplied information match

69

Identity located on tertiary data Tertiary database match to the consumersource - Possible match supplied information was fair. Secondary data source unavailable

72

Secondary data source could not be accessed for several possible reasons, including access errors and improper connections.

75

Identity not located or poor match Secondary data source was unable to find a on secondary data source suitable match to the consumer supplied information.

78

Identity located on secondary data Secondary data source match to the consumersource - Good match supplied information was excellent or very good.

81

Identity located on secondary data Secondary data source match to the consumersource - Adequate match supplied information was good

82

Driver's License validated

84

Identity located on secondary data Secondary data source match to the consumersource - Possible match supplied information was fair.

number

not Driver's license number has not been validated against a data source.

Confidential and Proprietary Information. Copyright 2016, Equifax Inc., Atlanta, Ga. All rights reserved Page | 37

RC

Reason Code Verbiage

Reason Code Definition

85

WARNING: Social Security Social Security Number invalid because the Number has never been issued by number has not been issued by the Social the Social Security Administration Security Administration

86

WARNING: Social Security The Social Security Number has been Number has been reported reported in connection with suspicious or misused. Thorough verification fraud activity suggested

87

WARNING: Inquiry address has been associated with more than one name or Social Security Number. Thorough verification suggested

The exact address was used with different name(s) or Social Security Number(s) on multiple applications within a short period of time. Note 0 this warning will not appear when different family members apply for credit from the same address

90

WARNING: Social Security Social Security Number invalid because the Number is issued to a person who person to whom it was assigned has been has been reported deceased reported deceased. SSNs are never reassigned.

91

WARNING: Inquiry address is a The address belongs to a telephone answering telephone answering service. service Thorough verification suggested.

92

WARNING: Social Security Number issued by the Social Social Security Number has been issued Security Administration within the within the past five (5) years last five years

93

WARNING: Inquiry address is a state/federal prison or detention The address is the same as an adult or juvenile facility. Thorough verification state or federal prison or detention facility suggested

Confidential and Proprietary Information. Copyright 2016, Equifax Inc., Atlanta, Ga. All rights reserved Page | 38

RC

Reason Code Verbiage

Reason Code Definition

94

Your inquiry did not result in any There were no warnings present in the phone, address or SSN warnings Potential Fraud database

95

WARNING: Telephone number The telephone number has been reportedly has been reported misused been used in known or suspected fraud cases

96

WARNING: Telephone number is The telephone number is a telephone booth or a telephone drop number non-residential telephone numbers (i.e. hotel/motel phone number, etc.

97

Fraud Warning Data source is The Potential Fraud database is not available unavailable

98

WARNING: Inquiry address has The address has reported been used in known been reported misused. Thorough or suspected fraud cases and is not a mail drop verification suggested. or a prison address

99

WARNING: Possible true name Criteria has been met indicating that a fraud. Thorough verification person's identity and personal information is suggested. possibly being used by another person

AA

96

WARNING: Possible Individual Taxpayer Identification Number (ITIN). Thorough verification suggested. Note: Released in 2005

Possible Individual Taxpayer Identification Number (ITIN). Thorough verification suggested. ITINs are issued by the IRS to resident and non-resident aliens who are not eligible to obtain a Social Security number form the Social Security Administration. Note: Released in 2005

WARNING: Telephone number is The telephone number is a telephone booth or a telephone drop number non-residential telephone numbers (i.e. hotel/motel phone number, etc.

Confidential and Proprietary Information. Copyright 2016, Equifax Inc., Atlanta, Ga. All rights reserved Page | 39

RC

Reason Code Verbiage

Reason Code Definition

97

Fraud Warning Data source is The Potential Fraud database is not available unavailable

98

WARNING: Inquiry address has The address has reported been used in know been reported misused. Thorough or suspected fraud cases and is not a mail drop verification suggested. or a prison address

99

WARNING: Possible true name Criteria has been met indicating that a fraud. Thorough verification person's identity and personal information is suggested. possibly being used by another person

AA

WARNING: Possible Individual Taxpayer Identification Number (ITIN). Thorough verification suggested. Note: Released in 2005

Possible Individual Taxpayer Identification Number (ITIN). Thorough verification suggested. ITINs are issued by the IRS to resident and non-resident aliens who are not eligible to obtain a Social Security number form the Social Security Administration. Note: Released in 2005

FV

Fraud Victim "Temporary Fraud Consumer suspects or believes he/she has Alert." Manual review strongly been a victim of fraud and online Identity advised. Verification process can be stopped to protect the consumer. This alert is active for 90 days.

FX

Fraud Victim "Long Term Fraud Consumer has been a victim of fraud and Alert." Manual review strongly online Identity Verification process can be advised. stopped to protect the consumer. This alert is active for 7 years.

T0

Area code does not correspond to Area code does not correspond to input Phone input phone number exchange number exchange.

T1

Inquiry phone number is a land Inquiry Telephone Number is a Land Line. line

Confidential and Proprietary Information. Copyright 2016, Equifax Inc., Atlanta, Ga. All rights reserved Page | 40

RC

Reason Code Verbiage

Reason Code Definition

T2

Inquiry phone number is a paging Inquiry Telephone Number is a Paging service Service.

T3

Inquiry phone number is a mobile Inquiry Telephone Number is a Mobile Radio radio service Service.

T4

Inquiry phone number is a mobile Inquiry Telephone Number is a Mobile Radio radio service Service.

T5

Inquiry phone number cannot be Inquiry Telephone classified. classified.

Number

Confidential and Proprietary Information. Copyright 2016, Equifax Inc., Atlanta, Ga. All rights reserved Page | 41

cannot

be