Embedding ThreatMetrix into your Signup Page

Sometimes, when the merchants you intend to board require higher than normal monthly processing limits, the ProPay Risk team will insist that you include ThreatMetrix technology into your signup flow. This solution prevents certain kinds of "hacker" fraud.

ProPay will help you to download a hidden JavaScript widget that you are expected to place on your website. This widget will gather information about the computer accessing your website and send it to ThreatMetrix.


Step 1: include the ThreatMetrix widget on your website.
In one of the pages you present to a new user during signup, you need to include this information in your html header:
<head>
     <script type="text/javascript"
          src="https://h.online-metrix.net/fp/tags.js?org_id=4uw65rkp&session_id=01f50c4d1430a620a3b50005ffe98541">
     </script>
</head>
In the body of your page, you should include the following:
</body>
  <noscript>
    <iframe style="width: 100px; height: 100px; border: 0; position: absolute; top: -5000px;"
      src="https://h.online-metrix.net/fp/tags?org_id=abcd1234&session_id=01f50c4d1430a620a3b50005ffe98541">
    </iframe>
  </noscript>
</body>
org_id will usually be '4uw65rkp' (However, in some special cases, ProPay may elect to provide partners with their own org_id.)
session_id should be a value that you generate to uniquely identify an individual signup instance. (Explained further below) It should consist of:
  • Upper and lowercase English letters (a-z, A-Z)
  • Digits (0-9)
  • Underscore (_)
  • Hyphen (-)
Step 2: Pass many of the same values into the ProPay API when you board.
Request Value Type Description
MerchantSourceIP String Collected from the header of new user’s submission to your website.
ThreatMetrixPolicy String Assigned to you by ProPay. (Default value is ‘Default’)
ThreatMetrixSessionId String Used to uniquely identify the signup attempt. Same value as passed into Threat Metrix JavaScript Widget.
 
Just take me to the API docs