Experian Fraud

Experian Fraud screens a matched US business for fraud-related conditions. The Experian Fraud Workflow Builder block is in the Fraud category, supports the Business entity type, and runs one service:

Service	Service ID	Purpose
Fraud Shields	`experian_fraud_shields`	Returns business activity, Office of Foreign Assets Control (OFAC), fraud-victim, address-risk, and name-and-address verification indicators for the business identified by its Experian Business Identification Number (BIN).

Purpose

Use Fraud Shields to identify conditions that may require review. Its indicators are provider findings, not a Lendflow approval or decline decision.

Requirements

Fraud Shields requires an Experian BIN. If the BIN is missing, the application must contain the inputs required for Lendflow to obtain one through Experian Business Match.

Fraud Shields

Application field	Requirement	Notes
Experian BIN	Conditional	Required to run Fraud Shields. If it is missing, Lendflow automatically runs Experian Business Match using the application fields below.

Automatic Business Match when the BIN is missing

Application field	Requirement	Notes
Business legal name	Required	Uses the legal name on the application.
Business address city	Required	Uses the business address city.
Business address state	Required	Must be a valid US state.
Business address country	Required	Must be `US`.
Address line 1	Optional	Additional address information can improve matching.
ZIP code	Optional	Must be a valid US ZIP code when present.
Business telephone	Optional	Must be a valid US telephone number when present.
EIN	Optional	Must be a valid EIN when present.

An EIN is not required. If Business Match returns no BIN, Fraud Shields does not run.

API flow

Use application enrichment to queue Fraud Shields without executing a complete Data Orchestration template:

Authenticate with a Bearer integration token that can access the application and run underwriting services.
Call Enrich Business Credit Application at PUT /api/applications/{application_id}/enrich.
Set provider to experian_fraud_shields.
Do not send service-specific options; Fraud Shields has no configurable request options.
Include stage_id only when the application workflow requires a specific underwriting stage. When supplied, it must be a valid underwriting-stage UUID for the application.
Confirm that the response contains data.onqueue: true.
Poll Get Commercial Data with services[]=experian_fraud_shields.

{
  "provider": "experian_fraud_shields",
  "stage_id": "00000000-0000-4000-8000-000000000000"
}

Omit stage_id when it does not apply. The enrichment request is asynchronous: data.onqueue: true means Lendflow queued the job, not that Experian returned a result. Within the commercial-data endpoint’s data object:

Path	Content
`commercial_data.experian.fraud_shields`	The normalized provider result, or `null` before a result is stored.
`statuses.experian.fraud_shields`	The latest Lendflow lifecycle message for the service.
`request_data.experian.fraud_shields`	The stored provider request containing `bin` and `subcode`. Treat both as sensitive operational identifiers.

Internally, Lendflow sends a POST request to Experian’s /businessinformation/businesses/v1/fraudshields endpoint with the matched BIN and configured subcode.

Data Orchestration availability and flow

Experian Fraud is not included in the current Data Orchestration service catalog. Run it through the Experian Fraud block in an underwriting Workflow Builder stage or through the application enrichment API. When either path runs Fraud Shields without a stored Experian BIN, Lendflow attempts Business Match first. If no business is matched, Fraud Shields does not run and the service records the failure.

What the service returns

Response area	Meaning
`businessHeader`	Identity and contact information for the matched Experian business record.
`matchingBusinessAddress`	Whether the submitted address matched the primary business or a branch, when Experian supplies this classification.
`activeBusinessIndicator`	Experian’s indicator of whether the business appears active.
`ofacMatchWarning`	Whether the business name, address, both, or neither produced a possible OFAC list match.
Fraud-victim and risk-trigger fields	Whether the business reported fraud or identity theft and whether Experian identified high-risk address conditions.
`nameAddressVerificationIndicator`	Whether Experian identified potential inconsistencies among the business name, address, phone, and tax ID.

Provider fields can be omitted or null when Experian does not supply a value. Integrations should tolerate additional provider fields and should evaluate the indicators together with their accompanying definitions or statements.

Representative response

This shortened example is sanitized and reflects the response shape consumed by Lendflow.

{
  "businessHeader": {
    "bin": "123456789",
    "businessName": "EXAMPLE BUSINESS LLC",
    "address": {
      "street": "100 MAIN ST",
      "city": "AUSTIN",
      "state": "TX",
      "zip": "78701",
      "zipExtension": null
    },
    "phone": null,
    "taxId": null,
    "websiteUrl": "example.com",
    "legalBusinessName": "EXAMPLE BUSINESS LLC",
    "dbaNames": null,
    "customerDisputeIndicator": false
  },
  "matchingBusinessAddress": "Primary Business",
  "activeBusinessIndicator": true,
  "ofacMatchWarning": {
    "code": 1,
    "definition": "No OFAC match found"
  },
  "businessVictimStatementIndicator": false,
  "businessRiskTriggersIndicator": true,
  "businessRiskTriggersStatement": [
    "BUSINESS ADDRESS IDENTIFIED AS RESIDENTIAL"
  ],
  "nameAddressVerificationIndicator": false
}

Response attributes

Business identity

Attribute	Type	Meaning	Possible values or units	When returned
`businessHeader`	Object	Identity record for the matched business.	Provider object.	When Experian supplies a business header.
`businessHeader.bin`	String	Experian BIN for the matched record.	Numeric identifier represented as a string; commonly nine digits.	When available.
`businessHeader.businessName`	String	Business name on the matched record.	Provider text.	When available.
`businessHeader.address`	Object	Address associated with the record.	Contains `street`, `city`, `state`, `zip`, and `zipExtension`.	When address data is available.
`businessHeader.address.street`	String	Street address.	Provider text.	When available.
`businessHeader.address.city`	String	City.	Provider text.	When available.
`businessHeader.address.state`	String	State code.	Two-letter US state code in current responses.	When available.
`businessHeader.address.zip`	String	ZIP code.	String that preserves leading zeroes.	When available.
`businessHeader.address.zipExtension`	String or null	ZIP+4 extension.	Four-character string or `null`.	When Experian has an extension.
`businessHeader.phone`	String or null	Business telephone number.	Provider-formatted telephone string or `null`.	When available.
`businessHeader.taxId`	String or null	Tax identifier returned by Experian.	Sensitive identifier string or `null`.	When available.
`businessHeader.websiteUrl`	String or null	Business website.	Provider URL text or `null`.	When available.
`businessHeader.legalBusinessName`	String or null	Legal business name.	Provider text or `null`.	When available.
`businessHeader.dbaNames`	Array of strings or null	Doing-business-as names.	Zero or more names, or `null`.	When Experian has DBA data.
`businessHeader.customerDisputeIndicator`	Boolean	Whether the business disputed information in its Experian profile.	`true` or `false`.	When returned by Experian.

Fraud indicators

Attribute	Type	Meaning	Possible values or units	When returned
`matchingBusinessAddress`	String or null	Classification of the address match.	`Primary Business`, `Branch Business`, provider text, or `null`.	When Experian can classify the match.
`activeBusinessIndicator`	Boolean	Whether Experian identifies the business as active.	`true` or `false`. A false value may reflect evidence such as bankruptcy, registration, trade, collection, or inquiry activity.	When returned by Experian.
`ofacMatchWarning`	Object or null	OFAC screening result.	Contains numeric `code` and string `definition`, or can be `null` when no match attempt was made.	When Experian supplies OFAC screening data.
`ofacMatchWarning.code`	Number or null	Provider OFAC result code.	See the OFAC code table below.	When an OFAC result is supplied.
`ofacMatchWarning.definition`	String	Human-readable meaning of the OFAC code.	Provider text.	With a coded OFAC result.
`businessVictimStatementIndicator`	Boolean	Whether the business filed a statement with Experian reporting fraud or identity theft.	`true` or `false`.	When returned by Experian.
`businessRiskTriggersIndicator`	Boolean	Whether Experian identified high-risk conditions associated with the business address.	`true` or `false`.	When returned by Experian.
`businessRiskTriggersStatement`	Array of strings	Descriptions of identified address-risk conditions.	Zero or more provider statements.	Returned when risk-trigger details are available, typically when `businessRiskTriggersIndicator` is `true`.
`nameAddressVerificationIndicator`	Boolean	Whether Experian found potential inconsistencies among the business name, address, phone, and tax ID.	`true` or `false`.	When returned by Experian.

OFAC codes

Code	Meaning
`1`	No OFAC match found.
`11`	Possible match to the company name only.
`12`	Possible match to the business address only.
`13`	Possible match to both the company name and business address.
`null`	No OFAC match attempt was made.

An OFAC warning indicates a possible match for review; it is not by itself a confirmed sanctions match.

Errors and statuses

Do not interpret a Lendflow lifecycle status as a Fraud Shields finding.

Location or condition	Value or message	Meaning
`statuses.experian.fraud_shields`	`Not yet started`	Lendflow has no service log for Fraud Shields.
`statuses.experian.fraud_shields`	`Started`	Lendflow started the external-service job.
`statuses.experian.fraud_shields`	`Success`	Lendflow stored a successful provider response.
`statuses.experian.fraud_shields`	Error message	The job failed; Lendflow exposes the latest recorded failure message.
`commercial_data.experian.fraud_shields`	Object or `null`	The provider result. `null` can mean the job has not completed or no result was stored; check the status and Data Orchestration log.
Automatic Business Match	`No Business found - {business name}`	The application had no BIN and Business Match did not return one, so Fraud Shields was not requested.
Authentication	`Country code is required to authenticate with Experian`	The business address lacks the country context required to select Experian authentication.
Authentication	`Unable to retrieve Experian bearer token`	Experian authentication did not return an access token. Verify credentials and service availability.
Request validation	BIN or subcode validation error	The Fraud Shields request requires both values to be non-empty strings. Verify the matched BIN and configured subcode.
Provider or HTTP error	Provider message or `Something went wrong. Try again later`	Experian rejected the request or returned an error. Lendflow records the provider message when available.
Data Orchestration `master_status`	`0`, `2`, `3`, `4`, `5`, or `6`	Overall run status: Not Started, Processing, Review, Complete Pass, Complete Fail, or Error. This is separate from Fraud Shields content.

FAQ

Which service does the Experian Fraud block run?

The block runs Fraud Shields with service ID experian_fraud_shields for a business entity.

Does Experian Fraud require a BIN?

Yes. The provider request requires an Experian BIN and subcode. If the business has no BIN, Lendflow first attempts Experian Business Match and stores the best returned match.

Which application fields are required when Lendflow must find a BIN?

Business legal name, city, and a valid US state code are required for automatic Business Match. The business country is required for authentication and must be US for this service. Street, ZIP code, telephone, and EIN are optional match inputs.

Should I send options with the enrichment request?

No. Fraud Shields has no service-specific options. Send provider: "experian_fraud_shields" and include stage_id only when the application’s underwriting workflow requires it.

Does data.onqueue true mean the Fraud Shields result is ready?

No. It confirms only that Lendflow queued the enrichment job. Poll the commercial-data endpoint and inspect statuses.experian.fraud_shields and commercial_data.experian.fraud_shields.

Can Experian Fraud run in Data Orchestration?

No. Experian Fraud is not included in the current Data Orchestration service catalog. Use the underwriting Workflow Builder block or application enrichment API.

Does an OFAC warning confirm a sanctions match?

No. Fraud Shields reports a possible name or address match. Review the returned code and definition through your organization’s compliance process.

​Experian Fraud

​Purpose

​Requirements

​Fraud Shields

​Automatic Business Match when the BIN is missing

​API flow

​Data Orchestration availability and flow

​What the service returns

​Representative response

​Response attributes

​Business identity

​Fraud indicators

​OFAC codes

​Errors and statuses

​FAQ