What to know about the transition to Protect
Transitioning to Adyen’s New Risk Tool
We are upgrading our risk engine to a more advanced system designed to streamline risk profile management and enhance your overall performance. This latest version offers a simplified user experience, integrated machine learning capabilities, robust rule backtesting, and deeper insights into risk profiles, empowering you to optimize your risk management strategies with ease.
Recognizing the New Version
To check if you're already using the new version, log in to your Customer Area and navigate to Revenue & Risk > Risk Profiles. Select a risk profile and then go to Risk Rules. If you see the tabs Allow, Block, Review, and Check for 3DS (for premium users) or Allow and Block (for basic users), you’re on the new version.
Old Vs New: What has changed?
The latest version is engineered to maximize conversions while minimizing fraud costs. Leveraging machine learning models trained on Adyen’s extensive platform data, the latest version automates and sharpens risk decision-making processes. The latest version is available in two tiers: Basic and Premium.
Key Changes and Features
Machine Learning:
Premium: Leverage our machine learning model to evaluate the risk of each transaction. This approach enhances accuracy, reduces false positives, and minimizes the blocking of legitimate shoppers, resulting in a better shopper experience and less fraud.
Basic: Rule-based solution to proactively block card testing, enumeration and high-velocity attacks
Outcome-Based Rules:
Basic and Premium: Allows to benefit from standard blocking rules to target basic fraud and enumeration attacks.the creation of rules based on outcomes—Allow, Block, or Review. This simplifies the risk decision-making process and improves accuracy.
Premium: Allows the creation of rules based on outcomes—Allow, Block, or Review. This simplifies the risk decision-making process and improves accuracy.
Premium: Allows the creation of pre-authorization rules to influence the authentication engine and dynamically trigger 3D Secure.
Enhanced User Interface:
Premium: The new interface is more user-friendly, making it easier to manage and adjust risk profiles. Profile and rule level analytics help identify underperforming rules and enable staying on top of profile performance.
Rule Backtesting:
Premium: Enables testing new risk rules against historical transaction data to predict their future impact, ensuring they perform well before going live.
Customizable Risk Management:
Premium: Every business faces unique risks, making a one-size-fits-all solution ineffective. The latest premium version offers a balance between robust risk management and a seamless customer experience. It detects, prevents, and responds to fraud using a combination of machine learning technology and manual risk checks
Transition Details
The latest version is being gradually introduced and will be available to all users by the end of 2025. Adyen will automatically display the new risk profile available for configuration on your Customer Area > Revenue & Risk > Risk Profiles. Depending on the product tier you’re in, the profiles come with a set of default rules (see “What’s RevenueProtect” to learn more). While we are automating the transition process to minimize your operational overhead, there will still be some actions required on your part.
Here's what you need to know for a smooth transition:
Basic Tier
This version utilizes:
A rule-based model to proactively block high-velocity attacks such as card testing or enumeration attacks.
Adyen Provided Risk Lists including various shopper details and identifiers such as address, email domain, IP address, name, email, phone number, shopper reference, card number or bank account number (IBAN), and bank identification number (BIN).
Premium Tier
On top of the basic features, this version utilizes sophisticated machine learning models to evaluate the risk of each transaction and leverage on the Adyen global transaction data . This approach enhances accuracy, reduces false positives, and minimizes the blocking of legitimate shoppers, resulting in a better shopper experience and less fraud.
If you are on this tier, you might need to take specific actions, such as manually recreating custom risk rules, reconfiguring manual review rules or reviewing your risk lists.
Custom Risk Rules & Lists from the old profile are not automatically transferred to the new profile because the new risk engine operates with a different set of parameters and capabilities. As a result, the old custom rules may not align with the new framework and could potentially affect performance if carried over without adjustment. If these rules and lists are crucial to your strategy, recreate them manually. For custom rules you can utilize the backtest feature to validate their necessity by simulating the impact on historical transaction data. This helps you:
Identify underperforming risk rules that do not need to be recreated.
Confirm the effectiveness of important fraud detection rules.
Manual Review Rules should be reconfigured under the new engine, as it now uses actions instead of risk scores.
Risk Lists: It includes a set of default risk lists that are enabled by default. Be sure to review these lists and ensure that those relevant to your business remain enabled.
Dynamic 3DS: Once you’ve recreated your custom risk rules, reconnect them to Dynamic 3DS rules as detailed in the documentation. Note that old Dynamic 3DS rules based on risk scores or RevenueProtect checks will no longer work. If needed, you can recreate these logics in custom rules and reconnect them to Dynamic 3DS.
Users are encouraged to explore the new features, adjusting machine learning model thresholds and fine-tuning risk profiles.
By taking these steps, you can ensure that your risk management strategy remains effective and tailored to your business needs while also leveraging the benefits of the latest version.
To support your transition, we’ve created a range of self-service resources, including: