Trustfull
Functional documentation​
This provider screens an individual's mobile phone number and email address against the Trustfull fraud-signal service. Trustfull enriches the identifier with signals such as line type, connection status, disposability and domain age, and returns a fraud score per identifier.
Each enabled check runs against its own Trustfull endpoint and produces its own DD parameter result and its
own PDF report. When a check is enabled but the party has no matching identifier, that parameter is returned
as UNDEFINED and the other check still runs. A provider error (timeout, 5xx) on one check does not abort the
other: that parameter is reported as UNDEFINED while the successful check keeps its result and its document.
The whole check only fails when every attempted call failed.
Score mapping​
Trustfull returns a trust score on a 0–1000 scale, where a lower score means a higher fraud risk. Trustfull groups the scale into five bands:
| Band | Score range |
|---|---|
| High | 776–1000 |
| Good | 551–775 |
| Moderate | 451–550 |
| Bad | 226–450 |
| Poor | 0–225 |
SCORE_THRESHOLD is the score below which the identifier counts as a fraud risk. It defaults to 551, the
lower bound of the Good band, so everything from Moderate downwards is flagged. The score is mapped to the DD
parameter result as follows:
| Condition | Result |
|---|---|
score < SCORE_THRESHOLD | YES |
score ≥ SCORE_THRESHOLD | NO |
| no score returned | UNDEFINED |
| identifier not present on party | UNDEFINED |
| provider error on that check | UNDEFINED |
Input data points​
- Individual
- Mobile phone (required for the phone check)
- Email (required for the email check)
The check is only executed when at least one of the enabled identifiers is present on the party. A rescreening is triggered when the mobile phone or the email address changes.
Applicable DD parameters​
| Parameter | Enabled by | Entity |
|---|---|---|
TRUSTFULL_PHONE_FRAUD_RISK | CHECK_PHONE | Individual |
TRUSTFULL_EMAIL_FRAUD_RISK | CHECK_EMAIL | Individual |
This provider does not support companies.
Generated documents​
When DUE_DILIGENCE_DOCUMENT_FETCH is enabled, each executed check stores a PDF report on the party,
containing the screened identifier, the score and score cluster, the reason codes and the enrichment signals
returned by Trustfull. The report is rendered in the interface language of the user requesting the check,
falling back to the default language of the white label. The parameter results themselves
are always returned, regardless of this setting.
| Document type | File name |
|---|---|
TRUSTFULL_PHONE_RESULT | trustfull_phone_report.pdf |
TRUSTFULL_EMAIL_RESULT | trustfull_email_report.pdf |
Configuration​
- Implementation class:
TrustfullDueDiligenceProvider - Resource Uri: the Trustfull API base URL, provided by Trustfull per environment
The provider calls two endpoints relative to that resource Uri: /1.0/phone for the phone check and
/1.0/email for the email check.
Authentication​
Trustfull uses a static API key, sent as the x-api-key request header. Configure it through the API_KEY
setting and store the value in Vault.