Payment Processors

POST /searches
GET /businesses/{business_id}/applications

// Submit business search
response = POST /searches with business details

// Check application velocity
applications = GET /businesses/{business_id}/applications

// Count recent applications
applications_last_7_days = count(applications where created_at >= today - 7 days)
applications_last_30_days = count(applications where created_at >= today - 30 days)

// Evaluate velocity flags
IF applications_last_7_days >= 4:
    flag = "RED"
    reason = "High application velocity - 4+ applications in 7 days"
    
ELSE IF applications_last_30_days >= 4:
    flag = "YELLOW"
    reason = "Elevated application velocity - 4+ applications in 30 days"

// Check fraud consortium (BFC entry appears in watchlist_hits for member organizations only)
bfc = FIND entry IN response.watchlist_hits WHERE entry.code == "BFC"
IF bfc EXISTS AND bfc.count > 0:
    flag = "RED"
    reason = "Business or individual in Baselayer Fraud Consortium"

// Combine with third-party fraud screening
IF fraud_screening_provider.risk_score > threshold:
    flag = "RED"
    reason = "Failed fraud screening"

POST /searches
POST /web_presence_requests

// Extract industry prediction from /web_presence_requests response
industry = response.industry_prediction

// Check Mastercard high-risk flag
IF ANY mcc IN industry.mcc_codes WHERE mcc.mastercard_risk == TRUE:
    flag = "YELLOW"
    reason = "Mastercard restricted industry"

// Check Visa risk tier
IF ANY mcc IN industry.mcc_codes WHERE mcc.visa_risk_tier IS NOT NULL:
    flag = "YELLOW"  
    reason = "Visa risk tier assignment"

// Check keyword matching
IF ANY keyword IN industry.keywords MATCHES high_risk_keyword_list:
    flag = "RED"
    reason = "High-risk industry keyword detected"

// Check high-risk NAICS codes with confidence threshold
IF industry.code IN high_risk_naics_list:
    IF industry.accuracy >= 0.75:
        flag = "RED"
        reason = "High-risk industry with high confidence"
    ELSE:
        flag = "YELLOW"
        reason = "Potential high-risk industry, needs review"

// Extract match signals from /searches response
business_id = response.business.id
name_match = response.business_name_match
address_match = response.business_address_match  
tin_matched = response.tin_matched
registrations = response.business.registrations
watchlist_hits = response.watchlist_hits

// Check Baselayer match

IF business_id == NULL:
    flag = "RED"
    reason = "No business match" // skip all other steps

// Check name and address matching
name_address_approved = FALSE

IF name_match == "EXACT" AND address_match IN ["EXACT", "CITY", "STATE"]:
    name_address_approved = TRUE
    
ELSE IF name_match == "SIMILAR" AND address_match == "EXACT":
    name_address_approved = TRUE

IF NOT name_address_approved:
    flag = "RED"
    reason = "Weak name/address match"

// Verify TIN
IF tin_matched == NULL:
    # IRS outage - handle per policy
    # See Guide: IRS Outage Handling for detailed guidance
    flag = "YELLOW"
    reason = "TIN verification unavailable (IRS outage)"
    
ELSE IF tin_matched == FALSE:
    flag = "RED"
    reason = "TIN does not match business name"

// Check registrations
domestic_active = FALSE
FOR EACH registration IN registrations:
    IF registration.registration_type == "domestic" AND registration.status == "active":
        domestic_active = TRUE
        domestic_state = registration.state

IF NOT domestic_active:
    flag = "RED"
    reason = "No active domestic registration"

// If business operates in different state, verify foreign registration. 
// Operating state is usually the one from the application address - you can use operating_state == response.search_address.state
IF operating_state != domestic_state:
    foreign_active = FALSE
    FOR EACH registration IN registrations:
        IF registration.registration_type == "foreign" AND registration.state == operating_state AND registration.status == "active":
            foreign_active = TRUE
    
    IF NOT foreign_active:
        flag = "YELLOW"
        reason = "No active foreign registration in operating state"

// Check watchlists
IF ANY entry IN watchlist_hits WHERE entry.count > 0 AND entry.code != "IEO":
    flag = "RED"
    reason = "Positive sanctions or watchlist match"

// Retrieve website analysis from /web_presence_requests response
website = response.website_analysis

// Simple fraud check: email domain vs. found website
IF website.url IS NOT NULL AND website.email_deliverable == TRUE:
    submitted_email_domain = EXTRACT_DOMAIN(application.email)
    
    IF submitted_email_domain != EXTRACT_DOMAIN(website.url):
        flag = "RED"
        reason = "Email domain does not match business website"