---
id: help.payments.risk-rules
title: "Set up risk rules and block lists"
canonical: https://docs.secureprocessing.app/help/payments/risk-rules-and-lists
description: "Under , add a rule that blocks a payment or asks for a review, or put an email address, a domain or an IP address on your allow or block list."
last_verified: 2026-11-02
---

# Set up risk rules and block lists

Under **Risk**, add a rule that blocks a payment or asks for a review, or put an email address, a domain or an IP address on your allow or block list.

Who can: Owner, Administrator can do this in [Risk](https://dashboard.secureprocessing.app/risk/rules).

## Add a rule

1. Open **Risk**, then **Rules**.
2. Under **New rule**, give it a **Name** that says what it does.
3. Choose what it tests under **When**, a **Comparison** and a **Value**.
4. Under **Then**, choose **Take the payment and ask me to review it** or **Refuse the payment**.
5. Press **Create rule**.

A rule tests one thing. It cannot be edited afterwards, so to change one, press **Switch off** and make another.

## Two examples

| To | When | Comparison | Value | Then |
|---|---|---|---|---|
| Look at anything over BZ$2,000 | Amount (minor units) | is at least | 200000 | Review |
| Refuse a domain you have had trouble with | Email domain | is | example.com | Refuse |

Amounts are in minor units, so 200000 is 2,000.00. A rule compares the amount in the payment’s own currency, so this one also catches US$2,000.

## Allow and block lists

Under **Lists**, choose **Block** or **Allow**, then an **Email address**, **Email domain** or **IP address**, and press **Add**. A note helps you remember why.

- **Allow** is checked first and wins over every rule, ours included.
- **Block** refuses the payment before the bank is asked.

A **Saved card fingerprint** only works on charges against a card a customer has saved. It cannot stop the same card being typed again.

## Test and live

Your rules and lists belong to the mode you made them in. Make them again in **Live** to protect real payments.

For developers: [Risk rules and reviews](https://docs.secureprocessing.app/risk.md)

## Related

- [Why was a payment blocked or put in review?](https://docs.secureprocessing.app/help/payments/why-was-a-payment-blocked.md)
- [Glossary](https://docs.secureprocessing.app/help/glossary/terms.md)
- [What is a dispute (chargeback)?](https://docs.secureprocessing.app/help/disputes/what-is-a-dispute.md)

Still stuck? Write to [admin@secureprocessing.app](mailto:admin@secureprocessing.app) with the rule’s name and what you wanted it to do.