Configure suspicious claim checks and email/domain blocking

As an admin, you can go to Organization > Settings > Claim Setting tab to access enhanced security features to ensure your gifts are not being claimed by fraudulent individuals. We offer the following features:

• Suspicious claim checks for duplicate and disposable emails
• Block emails and domains

Suspicious claim checks

How can you configure suspicious claim checks?

Once you are in the Claim Settings tab (Organization > Settings > Claim Settings), go to the Claim Security section > Suspicious claim checks.

For gift claims that are done through our landing pages, via our public API and triggered campaigns (including dynamic link), we have added the following suspicious claim checks:

1. Duplicate: Check if the recipient claiming has a similar or duplicate email
   • Note that we have excluded recurring triggered campaigns from this check that is used when a customer is integrated with an HRIS platform (e.g. if the same birthday gift campaign is sent to the same recipient each year)
2. Disposable email: Check if the recipient claiming is using a disposable email domain
3. Suspicious email: Check if the recipient claiming is using a suspicious email 

What happens with these suspicious claim checks?

If an individual is claiming a gift from the landing page, public API or triggered campaigns and we have flagged it as suspicious, we will:

• Update the send status to "pending"
• Show in the Sends page table that the send is pending because it is flagged as a suspicious claim
• Show a message in the review page the suspicious claim reason why the send is pending

Example of a duplicate email error:

Example of a disposable email domain error:

Block emails and domains

How can you add a emails or domains to a blocked list?

Once you are in the Claim Settings tab (Organization > Settings > Claim Settings), go to the Claim Security section > Block emails and domains.

To add emails and domains you want to block:

1. Add the full email (e.g. test@test.com)
2. Or Add a domain using the format "@[domain].com" (e.g. @gmail.com)
3. Click Save

You can use this to block any personal email domains, or any internal domains if you do not want your users to send gifts to internal employees or to themselves. 

What happens with these blocked emails and domains?

If a user is sending a gift in bulk, or a recipient claiming a gift from the landing page, public API or triggered campaigns and the email or domain is on the blocked list, we will:

• Update the send status to "pending"
• Show in the Sends page table that the send is pending because it is flagged as a suspicious claim
• Show a message in the review page the suspicious claim reason why the send is pending

If a user is sending a single gift, we will:

• Block the gift from being sent
• No gift send will be created
• The user will see an error message such as the one below and will not be able to send the gift

How can I see which gift sends have suspicious claims?

On the Sends page, there is a filter for "Suspicious claim reason," which can be used to filter based on similar or duplicate email or suspicious email domain.

Example of how the sends are flagged in the Sends page: