# Risk Rules Implementation Analysis Report
**Date**: March 26, 2026  
**Analysis Based On**: Client's Excel spreadsheet with color coding

---

## 📊 EXECUTIVE SUMMARY

| Category | Count | Action Required | Priority |
|----------|-------|-----------------|----------|
| **🟢 GREEN** - Correctly Configured | 18 rules | ✅ No changes | Low |
| **🟡 YELLOW** - Need Description Fix | 17 rules | ⚠️ Update descriptions | High |
| **🔴 RED** - Missing from System | 12 rules | ❌ Add to system | Critical |
| **⚪ EXTRA** - Not Requested | 16 rules | ❓ Review/Remove | Medium |
| **⚠️ DUPLICATE** - Order Number Conflict | 3 orders | 🔧 Fix numbering | Critical |

**Total Rules in System**: 47 rules (current database)  
**Total Rules Required**: 47 rules (per client specification)  
**Overlap Issue**: Duplicate order numbers 10, 11, 12

---

## 🟢 CORRECTLY CONFIGURED RULES (18 Rules - GREEN)

These rules are correctly implemented and aligned with requirements:

| Order # | Rule Name | Status | Action |
|---------|-----------|--------|--------|
| 1 | Suspicious International transactions | ✅ Correct | None |
| 2 | Suspicious Multiple International card transactions for low value | ✅ Correct | None |
| 3 | Suspicious Abnormal Time transaction | ✅ Correct | None |
| 4 | Suspicious Split transaction | ✅ Correct | None |
| 5 | Suspicious Duplicate transaction | ✅ Correct | None |
| 6 | Suspicious High Velocity transaction | ✅ Correct | None |
| 8 | Dormant Merchant | ✅ Correct | None |
| 9 | High Value Transaction on 1000K (POS) Transaction | ✅ Correct | None |
| 13 | MI - Local Transaction Higher than 500K | ✅ Correct | None |
| 14 | MI - Regional Transaction Higher than 1500K | ✅ Correct | None |
| 15 | MI - Local Transaction Higher than 400K | ✅ Correct | None |
| 16 | MI - International Transaction Higher than 100K | ✅ Correct | None |
| 17 | MI - International Transaction Higher than 25K | ✅ Correct | None |
| 18 | MV - 10 Cards Same BIN | ✅ Correct | None |
| 19 | MH - 20 Cards Same BIN | ✅ Correct | None |
| 20 | MI - Daily Amount Limit Per Card | ✅ Correct | None |
| 23 | MI - Suspicious International Transaction (High-Risk Countries) | ✅ Correct | None |
| 24 | Suspicious High Value Manual Entry | ✅ Correct | None |

---

## 🟡 RULES NEEDING DESCRIPTION CORRECTIONS (17 Rules - YELLOW "Queried")

These rules exist but have incorrect descriptions that differ from requirements:

| Order # | Current Rule Name | Required Description | Action |
|---------|-------------------|---------------------|--------|
| 7 | Above-average ticket size | **Update**: Transaction highlighted address MCCs and 4x the rule - Add notes re threshold exceptions based on MCC. Additionally, details for the other average calculation will be defined in the rule description | Update description |
| 10 | Machines of High Value Fallback Transactions | **Need clarification** - Multiple rules assigned order #10 | Fix duplicate + update |
| 11 | Decline Transaction Monitoring | **Need clarification** - Multiple rules assigned order #11 | Fix duplicate + update |
| 12 | New Onboarded Merchant High Decline | **Need clarification** - Multiple rules assigned order #12 | Fix duplicate + update |
| 21 | High Value Transaction on New Merchant (First 90 Days) | **Update**: All transactions will be same (split of) some card number or if any additional merchant (PTR) are located & if it falls within the first 90 days after going live, transactions which are flagged as Per the rule logic | Update description |
| 25 | New Merchant International Card (First 50 Days) | **Update**: Multiple txns from new zones/merchants within 50 mins after the first intl txn in that zone/merchant for that card | Update description |
| 26 | Expired Card Reuse at Same Merchant | **Update**: "Same card used as 10 previously separate txns" | Update description |
| 27 | High Amount of Aggregative Refunds | **Update**: "Add notes: highlighted address MCCs and 4x the rule" | Update description |
| 28 | High Value Single Refund Alert | **Update**: Parameters for single refund > CAT, AGRT | Update description |
| 30 | Transactions Followed by Frequent Successful Transactions | **Update**: Should align with specified criteria from sheet | Update description |
| 32 | Daily Volume Above Initial Volume | **Update**: Descriptions should align exactly with sheet requirements | Update description |
| 33 | Multiple Transactions Same Amount | **Update**: Multiple txns with same amount at the same terminal using different cards within 24 hrs, "Queried" status | Update description |
| 34 | Merchant Debit Card Transactions | **Update**: Rule logic needs clarification - "Queried" in sheet | Update description |

**Additional "Queried" rules needing clarification**:
- **Chargeback Ratio** - All MCCs not included, marked "Queried"
- **Offline Ratio** - All MCCs not included, marked "Queried"  
- **Sufficient Recovery in Weekly/Monthly Volume** - Marked "Queried"
- **Use of Embedded/Universal USB** - Marked "Queried"

---

## 🔴 MISSING RULES (12 Rules - RED - NOT CONFIGURED)

These rules are REQUIRED but NOT present in the system:

| Order # | Rule Name | Description | MCC | Action |
|---------|-----------|-------------|-----|--------|
| **TBD** | **Suspicious Unusual transaction volume** | All transactions with [specified criteria] - Highlighted RED | All MCCs | **ADD** |
| **TBD** | **High Frequency Chargeback Merchant** | Chargeback occurred 5 times (5 avg) - Highlighted RED | All MCCs | **ADD** |
| **TBD** | **Unusual Payment frequency** | [Transaction patterns] | All MCCs | **ADD** |
| **TBD** | **Online Figures Transactions at Multiple Merchants** | 5+ POS(FTFF)-5%-60 AED (PTR) - Highlighted RED | POS specific | **ADD** |
| **TBD** | **Online Figures Transactions at same Terminal** | Similar to above but same terminal | POS specific | **ADD** |
| **TBD** | **Transaction followed by Fraud-Suspect declined (Same Card)** | Fraud suspect response codes 59, 63, 65, etc. | All MCCs | **ADD** |
| **TBD** | **Transaction followed by Fraud-Suspect declined (Different Card)** | Different card, same amount pattern | All MCCs | **ADD** |
| **TBD** | **Transaction followed by Wrong PIN Entry Attempts** | 4+ wrong PIN attempts (response codes 55, 75) | All MCCs | **ADD** |
| **TBD** | **Self Card Transactions by Merchant** | Merchant using own card on terminal, >2000 AED/day | All MCCs | **ADD** |
| **TBD** | **Chargeback Ratio** | All MCCs not included - After generate, "Queried" | Various | **ADD** |
| **TBD** | **Offline Ratio** | All MCCs not included - After generate, "Queried" | Various | **ADD** |
| **TBD** | **Error in Manual Amount Patterns** | EMV - After generate | All MCCs | **ADD** |

**Additional RED rules from spreadsheet** (need exact details):
- Transaction based on same source
- Action Flags & TMS Transaction Volume  
- Sufficient Recovery in Weekly/Monthly Volume
- SAP Triples Consecutive Occurrence (EMV)
- Suspicious of High value off-stock transactions
- Use of Embedded/Universal USB
- Local transactions higher than USD (multiple variants)
- Consecutive txn exceeding thresholds (multiple variants)

---

## ⚪ EXTRA RULES (16 Rules - NOT REQUESTED)

These rules are configured in the system but were NOT in the client's requirement list:

| Order # | Rule Name | Reason | Action Needed |
|---------|-----------|--------|---------------|
| 22 | High Value Transaction on New Merchant | Not requested | ❓ Clarify if needed |
| 29 | Suspicious High Value (50000 AED) Transaction | Not requested | ❓ Clarify if needed |
| 31 | Transactions Followed by Frequent Declined Transactions (PTR) | Not requested | ❓ Clarify if needed |
| 35 | High Volume Low Velocity Transactions | Not requested | ❓ Clarify if needed |
| 36 | ATL - Local Transactions Higher than 25K | Not requested | ❓ Clarify if needed |
| 37 | AL - Regional Transactions Higher than 50K | Not requested | ❓ Clarify if needed |
| 38 | VVL - International Transactions Higher than 10K | Not requested | ❓ Clarify if needed |
| 39 | AL - Duplicate Transactions Higher than 10K | Not requested | ❓ Clarify if needed |
| 40 | ATL - Local Transactions Higher than 10K | Not requested | ❓ Clarify if needed |
| 41 | Duplicate Transactions in Regions Less than 5K | Not requested | ❓ Clarify if needed |
| 42 | ATL - International Transactions Higher than 5K | Not requested | ❓ Clarify if needed |
| 43 | Duplicate Split Transaction Less than 1K | Not requested | ❓ Clarify if needed |
| 44 | HH - International Transactions Higher than 10K | Not requested | ❓ Clarify if needed |
| 45 | ALL - Regional Transactions Higher than 400K | Not requested | ❓ Clarify if needed |
| 46 | High Fixed Daily Transaction | Not requested | ❓ Clarify if needed |
| 47 | AL - Local Transactions Higher than 200K | Not requested | ❓ Clarify if needed |

**QUESTION**: Should these rules be:
- [ ] Kept (if there's a business reason/dependency)
- [ ] Disabled but kept in database
- [ ] Removed entirely

---

## ⚠️ CRITICAL ISSUE: DUPLICATE ORDER NUMBERS

**Problem**: Orders #10, #11, and #12 are assigned to different rules

### Current Assignments (Cat A):
- Order #10: **Machines of High Value Fallback Transactions**
- Order #11: **Decline Transaction Monitoring**
- Order #12: **New Onboarded Merchant High Decline**

**BUT** the same order numbers appear to be used elsewhere or there's confusion in mapping.

### Required Action:
1. **Clarify** which rules should have orders 10, 11, 12
2. **Renumber** all subsequent rules to match Excel sheet exactly
3. **Verify** no other duplicate order numbers exist

---

## 🔧 RECOMMENDED IMPLEMENTATION PLAN

### Phase 1: **CRITICAL FIXES** (Immediate - Day 1)
1. **Fix duplicate order numbers** (10, 11, 12)
2. **Add 12 RED missing rules** with correct:
   - Rule names from Excel sheet
   - Descriptions from Excel sheet
   - Order numbers from Excel sheet
   - Parameters from Excel sheet
   - Enable/disable based on "Queried" status

### Phase 2: **DESCRIPTION UPDATES** (Day 2)
1. **Update 17 YELLOW rules** with correct descriptions from Excel
2. **Add detailed notes** where marked "Queried"
3. **Verify MCC codes** for each rule

### Phase 3: **EXTRA RULES REVIEW** (Day 3)
1. **Get client confirmation** on 16 extra rules
2. **Document business rationale** if keeping them
3. **Disable or remove** if not needed

### Phase 4: **FINAL RECONCILIATION** (Day 4)
1. **Verify all 47 rules** match Excel sheet exactly:
   - Order numbers align
   - Names match
   - Descriptions match
   - Parameters match
   - MCC codes match
2. **Run comprehensive tests**
3. **Generate final report**

---

## 📋 IMMEDIATE ACTIONS REQUIRED

**BEFORE I PROCEED WITH IMPLEMENTATION, I NEED YOUR CONFIRMATION ON:**

### Question 1: Order Number Mapping
Can you provide the **exact order number** for each of the 12 RED (missing) rules?  
The spreadsheet shows them but I need to confirm the specific sequence they should be inserted at.

### Question 2: Extra Rules (16 rules)
For the 16 rules NOT requested:
- [ ] **Keep them** (with justification for each)
- [ ] **Disable them** (set enabled=false, keep in DB)
- [ ] **Remove them** (delete from database)
- [ ] **Ask client** for clarification first

### Question 3: Duplicate Order Numbers 10, 11, 12
Which rules should occupy these positions? Should I:
- [ ] Keep current assignments and shift everything else
- [ ] Replace with different rules from spreadsheet
- [ ] Use Excel sheet's exact mapping for these positions

### Question 4: "Queried" Rules (YELLOW)
For rules marked "Queried" in spreadsheet:
- [ ] Implement now with `enabled=false` until clarified
- [ ] Implement now with `enabled=true` assuming approval
- [ ] Wait for clarification before implementing

### Question 5: Comprehensive Seed File
Should I create a **NEW seed file** that:
- Deletes ALL existing rules
- Recreates exactly 47 rules matching Excel sheet
- Uses exact order numbers, names, descriptions from sheet

**OR**

Should I create an **UPDATE migration** that:
- Keeps existing rules
- Updates descriptions for YELLOW rules
- Adds RED missing rules
- Handles extra rules based on your decision

---

## ✅ NEXT STEPS

Once you confirm the above questions, I will:

1. **Create detailed seed/migration file** with all rules
2. **Include exact descriptions** from Excel sheet
3. **Set correct order numbers** to match sheet
4. **Add all missing RED rules**
5. **Update all YELLOW rule descriptions**
6. **Handle extra rules** per your decision
7. **Generate execution script** for clean deployment
8. **Provide testing checklist**

---

**AWAITING YOUR CONFIRMATION TO PROCEED** 🚀