Creating a Risk-Aware Card Program
Tags: webdev, risk, tutorial, java
Published: 2022-10-10 16:41:40


![Article Image](https://dev-to-uploads.s3.amazonaws.com/uploads/articles/3qvtve7r8g3f2s816frh.jpg)

Avid readers of my publications might recall my love of music and the Canadian power-trio [Rush](https://en.wikipedia.org/wiki/Rush_(band)). When I focus on the recently-departed drummer of the band, I wonder “How did [Neil Peart](https://en.wikipedia.org/wiki/Neil_Peart) comprise solos, drum fills, and lyrics so melodically?”

Then, I realized that Neil based his goals on a concise [Jonathan Swift](https://en.wikipedia.org/wiki/Jonathan_Swift#Legacy) quote:

> “Vision is the art of seeing what is invisible to others.”

Neil’s vision ultimately led to his success in becoming an inspiration for drummers (and air-drummers) around the globe for several decades. Myself included.

The reality is that Neil faced a mountain of challenges between his origin and the pinnacle of his success. To say the risk of failure was high is definitely an understatement.

Technology is no different.

Artists exist in technology – bringing forth ideas that are invisible to others – with a goal to see their vision become an accepted reality. Instead of musical instruments, they rely on a different set of tooling to help them hone and strengthen their ideas.

One area of concern for me is mitigating risks and satisfying compliance needs with financial transactions. This is important because the failure to address these items has an impact on an entity's bottom line.

For this publication, I thought it would be neat to explore the vision of creating a risk-aware card program and how to leverage existing tools to mitigate risk – since my personal mission statement is laser-focused on leveraging products and services along the way.

## AdvoCard Example

Consider a fictional company called AdvoCard, which helps organizations grow their exposure while meeting the common need of making daily purchases. One example might be the Down Syndrome AdvoCard, where a portion of each purchase is donated to [Down Syndrome Indiana](https://dsindiana.org/) (DSI), a local group that has provided personal assistance to our family.

Below, is an example of the DSI AdvoCard credit card:

![Advocard Card](https://dev-to-uploads.s3.amazonaws.com/uploads/articles/l82262b3v5ln7r4l6xwt.png)

Using an AdvoCard for payment follows the same flow as any other credit card:

![Standard Flow](https://dev-to-uploads.s3.amazonaws.com/uploads/articles/nz56l6ulhujwqqnyucfl.png)

1. Customer enters a retail establishment to buy groceries.
1. Customer provides DSI AdvoCard credit card for the source of purchase.
1. Customer departs retailer with groceries in hand.

Unfortunately, the team at AdvoCard faces some challenges if it wants to compete in the card program space:

* Understanding the risk behind each customer’s application for an AdvoCard request
* Knowing whether the customer is legitimate when purchases are being made
* Handling common requests like dispute resolution

While AdvoCard was founded on the principle of providing donation assistance for non-profit groups, they are certainly not immune to being the target of attack from those seeking personal gain through illegal means.

Fortunately, this is where a service like Marqeta’s RiskControl can assist.

## Where Marqeta’s RiskControl Portfolio Adds Value

Marqeta has created a portfolio called RiskControl, which can be included in the card program implementation. The RiskControl solution provides the following benefits:

* KYC (compliance, fraud mitigation) for onboarding new customers and cardholders.
* 3D Secure (3DS) regulatory compliance tool / fraud mitigation for secure ecommerce and online checkout.
* Real-Time Decisioning product: per-transaction scoring and rules system that allows customers to be granular about approval controls.
   * Leverages Visa and Mastercard risk scores.
   * Introduces 350+ attributes to set fine-tuned controls around transaction approval.
   * Included in the authorization flow for decisioning (approve or decline).
* Dispute resolution and chargebacks for situations where a cardholder challenges a transaction.

From an orchestration perspective, RiskControl becomes a part of the transaction flow when Marqeta receives the authorization request and works in tandem with the payment solution, adding the appropriate rules logic after receiving a just-in-time (JIT) Funding request.

![Risk Hub](https://dev-to-uploads.s3.amazonaws.com/uploads/articles/6ivkdu0hkfger5x2ab0l.png)

Now, when we put things together with the original illustration, the implementation design looks like this:

![Full Flow](https://dev-to-uploads.s3.amazonaws.com/uploads/articles/2s46unfh7akfogs0j6o1.png)

1. Customer enters a retail establishment to buy groceries.
1. Customer provides DSI AdvoCard credit card for the source of purchase.
1. JIT funding request made as a result of Marqeta payment solution.
1. Marqeta Real-Time Decisioning logic is evaluated and executed:
    * Transaction scoring is processed.
    * Transaction rules are evaluated and processed.
1. Marqeta RiskControl integrates with Visa/Mastercard APIs for risk scores.
1. Optionally, for an online purchase, the customer may be asked to validate their identity and confirm the transaction.
1. The transaction utilizes the AdvoCard Bank platform to handle the funding request.
1. Customer departs retailer with groceries in hand. 

To AdvoCard, many risk mitigation strategies can be implemented, customized down to the cardholder level. In the event that an unexpected transaction occurs, the cardholder contacts the AdvoCard team, who can use the built-in dispute resolution module within RiskControl.

## Conclusion

Visionaries have driven our world, resulting in a greater good for all of us. As an example, Neil Peart’s contributions to music helped shape me into the person I am today.

New artists will continue to pave new paths, just as new technologies emerge to provide the tooling to help dreams solidify and succeed.

For technologists, I have been focused on the following mission statement, which I feel can apply to any IT professional:

> “Focus your time on delivering features/functionality that extends the value of your intellectual property. Leverage frameworks, products, and services for everything else.”
> J. Vester

This example probably adheres to my mission statement more than any publication I have written.

* Marqeta RiskControl mitigates challenges related to compliance, security, and risk.
* RiskControl goes a step further in its ability to customize the approval process down to the customer level.
* RiskControl provides the solution owner with all the necessary aspects required in an easy-to-use interface for items like dispute handling.

If you want to dive into either of the technologies noted above, you can get started for free using the following links:

* [Marqeta RiskControl](https://www.marqeta.com/platform/riskcontrol)
* [Real-Time Decisioning Docs Page](https://www.marqeta.com/docs/developer-guides/real-time-decisioning-landing-page)

[Have questions or thoughts? Let us know in the Marqeta Dev Community.](https://community.marqeta.com/t5/forums/bd-p/discussions)

Have a really great day!