General Fraud
ATM codes
IBAR
CACY and XDAH
Random
100

This is where the customer is the victim

Third Party Fraud

100

Withdrawal from their Checking Account at a US Bank ATM

WOCATM

100

This is the way you log into IBAR

CIS > CESL > UserID and Token > IBAR > 5 > XAUD > Enter

100

CATG code - A posted signature-based transaction

PU

100

This is how you tell the difference between SIG and PIN Transactions?

PIN/SIG/ATM Column in Falcon

PIN Column in Falcon

CATG Column on CACY

Reference Number on CACY

200

This is where the bank is the victim

First Party Fraud

200

Balance Inquiry of their Savings Account at a non-US Bank ATM

BFSATM

200

Audit of Events - tracks all changes made to the card

XAUD

200

CATG code - A posted PIN-based transaction done at a merchant

PI

200

This is how you see if they went to an ATM verses using the PIN inside a store 

CATG column on CACY

PIN/SIG/ATM column in Falcon

300

These are third party fraud types

Card Not Present

Lost Stolen

NRI

Counterfeit

Fraud App

ATO

300

Checking account withdrawal from a non-US Bank ATM

WFCATM

300

Card transactions for last 90 days; posted and pending

CACY

300

This is how you expand a posted charge

Place an S over the first 0 and hit enter

300

This mainframe session only shows card transactions

IBAR

400
This type of fraud is the physical card is not present during the transaction

Card Not Present

400

Withdrawal Savings Account at a US Bank ATM

WOSATM

400

Attempted Authorizations on all cards tied to the same checking account for last 90 days (JOA/JOO)

XDAH

400

In XDAH, under column T the "A" stands for this

AUTHORIZATION

400

This is why you need to go to XDAH

To see decline reasons, older auths that never posted, or auths on other cards linked to the same checking account


500

This type of fraud means the card was in a certain spot but now it's gone. 

Lost/Stolen

500

Account Inquiry – Always for $0.00.

(They are just double checking the information provided or completing an account inquiry)

ASIG

500

Card Status Screen - manually place and remove blocks

CAMN

500

This is why you need to go to XDAH

To see decline reasons, older auths that never posted, or auths on other cards linked to the same checking account

500

This means the card was found on the dark web

9999

M
e
n
u