Investigate Transactions

The Results page includes risk alerts in the Auth Session Results on the left alongside results on the right.

Auth Session Results

Auth Session Results shows risk alerts for each authentication check performed. Transaction details are shown at the bottom of the list.

Passed means the result is okay. The authentication check returned a result that is not typically associated with fraud.
Alert means the result requires further investigation. It could also mean the authentication check did not return a response within the time limit (for example, due to a network error).
Failed means the result is not okay. The authentication check returned a result that could possibly indicate fraud.
N/A means the authentication check was not requested.
Unknown means not enough information is available to determine the result, for example, if a transaction originated from an unknown implementation (neither Portal nor Desktop).

Customer Name

For whoever initiated the authentication request, customer name refers to that user's customer (business entity) in Hub. See Customers.

Barcode/Format Recognized

Was the barcode or MRZ format recognized by Intellicheck?

Passed means we recognized the barcode or MRZ format.
Alert means we could not process the barcode.
Failed means we did not recognize the barcode format; therefore, it could possibly indicate fraud.
N/A means no barcode request was made.

Expired

Has the ID document expired?

Passed means the document ID is not expired.
Alert is not an option for this risk alert.
Failed means the ID expiration date occurs in the past.
N/A means no request was made.

OCR-Barcode Match/OCR-MRZ Match

Did the OCR text match the barcode or MRZ text?

Passed means the text matched.
Alert means one or more important mismatches were found.
Failed means a serious mismatch was found, such as the issuer.
N/A means no request was made.

Document Liveness Front

Did the front-side of the ID pass a document liveness check?

Passed means the submitted image of the front side of the ID was authenticated with sufficient certainty as an original, physical, unaltered document.
Alert is not an option for this risk alert.
Failed means the submitted image of the front side of the ID could not be authenticated with sufficient certainty as an original, physical, unaltered document.
N/A means no request was made.

Selfie

Did the submitted selfie image match the document ID image and pass a liveness check? Selfie liveness detection verifies that the person is genuinely present.

Passed means that the submitted selfie image passed a face match and also passed a liveness detection check.
Alert means that only one of the two selfie checks were performed, either liveness detection or face match, but not both.
Failed means that the submitted selfie image did not pass a face match and/or a liveness detection check.
N/A means no request was made.

Device Address

Is the device IP address potentially engaged in fraud?

Passed means that the device is not associated with fraudulent behavior.
Alert means the device appears to be suspicious but not necessarily fraudulent.
Failed is not an option for this risk alert.
N/A means no request was made.

Mailing Address

Did the mailing address pass a validation check?

Passed means the mailing address is not at high risk for being fraudulent.
Alert means the mailing address appears to be suspicious but not necessarily fraudulent.
Failed is not an option for this risk alert.
N/A means no request was made.

Phone Number

Did the phone number pass a validation check?

Passed means the phone number appears to engage in legitimate user behavior online.
Alert means the phone number appears to be associated with risky usage or is likely to engage in malicious behavior.
Failed is not an option for this risk alert.
N/A means no request was made.

Transaction Date

The date and time at which the transaction was initiated by a customer associate. The time is converted to the local time of the current user.

Transaction started by

For Portal users, this is the email address of the customer associate who requested the authentication session.

Transaction ID

Each transaction is recorded with a unique ID for tracking purposes. Select copy to copy the transaction ID number to the clipboard.

Result Boxes

You can open and close a result box.

Each box contains a title and one or more messages.

In this example, the Auth Sessions Results panel on the left shows Passed risk alerts for each authentication check. On the right, the Cardholder Information result box includes two messages.

The following table describes messages. Message colors are shown along with the message text and a brief description.

Result Box where Message Appears	Message Text	Description
Cardholder Information	Barcode passed	The barcode format was recognized and decoded by Intellicheck.
Cardholder Information	Barcode passed/expired	The barcode format was recognized and decoded by Intellicheck. But the document is expired.
Cardholder Information	Barcode failed	The barcode format was unrecognized or not decoded by Intellicheck.
Cardholder Information	Unable to parse	We could not decode this barcode or MRZ. The required data was not available.
Cardholder Information	Format recognized	The ID document machine readable zone (MRZ) was recognized, and its data was decoded.
Cardholder Information	Format recognized/expired	The ID document machine readable zone (MRZ) was recognized, and its data was decoded. But the document is expired.
Cardholder Information	Format unrecognized	The ID document machine readable zone (MRZ) was not recognized, and its data was not decoded.
Cardholder Information	N/A	This check was not performed or the required data was not available.
Cardholder Information	Front matches barcode	The text on the front of the ID document is the same as the text derived from the barcode.
Cardholder Information	Front matches barcode with warnings	The text extracted from the front of the ID does not match the data encoded in the barcode. The differences indicate a possible discrepancy.
Cardholder Information	Front does not match barcode	The text extracted from the front of the ID does not match the data encoded in the barcode. The differences indicate a clear mismatch.
Cardholder Information	OCR match check was not performed	This check was not performed.
Cardholder Information	Front matches MRZ	The text on the front of the ID document is the same as the text derived from the machine readable zone (MRZ), which is an area of the document containing data in a format that can be quickly read by a machine.
Cardholder Information	Front matches MRZ with warnings	The text extracted from the front of the ID does not match the data encoded in the MRZ. The differences indicate a possible discrepancy.
Cardholder Information	Front does not match MRZ	The text extracted from the front of the ID does not match the data encoded in the MRZ. The differences indicate a clear mismatch.
Document Liveness Front	Live	The front of the ID document is live, meaning it passed a verification process to determine if it is authentic by checking against three presentation attack vectors: portrait substitution, screen replay, and printed copy.
Document Liveness Front	Not live	The front of the ID document is not live, meaning it did not pass a verification process to determine if it is authentic by checking against three presentation attack vectors: portrait substitution, screen replay, and printed copy.
Document Liveness Front	N/A	This check was not performed.
Selfie	Matches document and is live	The selfie portrait is the same as the ID document image, and the selfie portrait is that of a genuine person.
Selfie	Does not match document or is not live	The selfie portrait is not the same as the ID document image, and/or the selfie portrait is not that of a genuine person.
Selfie	N/A	This check was not performed.
Selfie	One of two checks performed	Only one of two authentication checks was performed. Either Face Match or Is Live but not both. Face match compares the selfie portrait to the document image. Is live evaluates whether the selfie portrait is a genuine person.
Fraud Results	Device Address/Phone Number/Mailing Address is highly suspicious	The device IP address, phone number, or mailing address appears to be suspicious but not necessarily fraudulent. Further investigation is recommended.
Fraud Results	Device Address/Phone Number/Mailing Address is low risk	The device IP address, phone number, or mailing address is not associated with fraudulent behavior.
Fraud Results	Device Address/Phone Number/Mailing Address is N/A	This check was not performed.

Last modified: 03 April 2025