What is a velocity check?

A velocity check is the real-time test of a transaction against velocity limits. It counts recent events linked to the same card, device, IP address or account and compares them with thresholds before the payment is approved.

How a check runs

• The payment request arrives with identifiers: card fingerprint, device, IP, email, account.
• The system counts recent events for each identifier within defined windows, such as the last 10 minutes or 24 hours.
• Counts are compared with the merchant's thresholds.
• The result feeds the decision: approve, decline, challenge or review.

What makes checks effective

Speed, since the check must run within the authorization flow; good identifiers, since fraudsters rotate cards and IPs; and shared data across channels, so attempts on the website and the app are counted together.

Velocity checks and other tools

Velocity checks are one input among others: device fingerprinting, address checks, 3-D Secure, risk scoring and lists of blocked cards or emails. Together they give a fuller picture than any single rule.

Limits of the approach

Slow, distributed attacks can stay under thresholds. Combining velocity with other signals reduces that gap.

What it means for payment operators

For you, velocity checks run inside your risk layer for every merchant. Rules configured per merchant, with lists and thresholds you can update without code, keep checks aligned with each merchant's traffic.