> ## Documentation Index
> Fetch the complete documentation index at: https://docs.lendflow.com/llms.txt
> Use this file to discover all available pages before exploring further.

# Experian Fraud

## Experian Fraud

Experian Fraud screens a matched US business for fraud-related conditions. The **Experian Fraud** Workflow Builder block is in the **Fraud** category, supports the **Business** entity type, and runs one service:

| Service | Service ID | Purpose |
| - | - | - |
| **Fraud Shields** | `experian_fraud_shields` | Returns business activity, Office of Foreign Assets Control (OFAC), fraud-victim, address-risk, and name-and-address verification indicators for the business identified by its Experian Business Identification Number (BIN). |

## Purpose

Use Fraud Shields to identify conditions that may require review. Its indicators are provider findings, not a Lendflow approval or decline decision.

## Requirements

Fraud Shields requires an Experian BIN. If the BIN is missing, the application must contain the inputs required for Lendflow to obtain one through Experian Business Match.

### Fraud Shields

| Application field | Requirement | Notes |
| - | - | - |
| Experian BIN | Conditional | Required to run Fraud Shields. If it is missing, Lendflow automatically runs Experian Business Match using the application fields below. |

### Automatic Business Match when the BIN is missing

| Application field | Requirement | Notes |
| - | - | - |
| Business legal name | Required | Uses the legal name on the application. |
| Business address city | Required | Uses the business address city. |
| Business address state | Required | Must be a valid US state. |
| Business address country | Required | Must be `US`. |
| Address line 1 | Optional | Additional address information can improve matching. |
| ZIP code | Optional | Must be a valid US ZIP code when present. |
| Business telephone | Optional | Must be a valid US telephone number when present. |
| EIN | Optional | Must be a valid EIN when present. |

An EIN is not required. If Business Match returns no BIN, Fraud Shields does not run.

## API flow

Use application enrichment to queue Fraud Shields without executing a complete Data Orchestration template:

1. Authenticate with a Bearer integration token that can access the application and run underwriting services.
2. Call [Enrich Business Credit Application](/api-reference/workflow-management/enrich-business-credit-application) at `PUT /api/applications/{application_id}/enrich`.
3. Set `provider` to `experian_fraud_shields`.
4. Do not send service-specific `options`; Fraud Shields has no configurable request options.
5. Include `stage_id` only when the application workflow requires a specific underwriting stage. When supplied, it must be a valid underwriting-stage UUID for the application.
6. Confirm that the response contains `data.onqueue: true`.
7. Poll [Get Commercial Data](/api-reference/workflow-management/get-commercial-data) with `services[]=experian_fraud_shields`.

```json theme={"system"}
{
  "provider": "experian_fraud_shields",
  "stage_id": "00000000-0000-4000-8000-000000000000"
}
```

Omit `stage_id` when it does not apply. The enrichment request is asynchronous: `data.onqueue: true` means Lendflow queued the job, not that Experian returned a result.

Within the commercial-data endpoint's `data` object:

| Path | Content |
| - | - |
| `commercial_data.experian.fraud_shields` | The normalized provider result, or `null` before a result is stored. |
| `statuses.experian.fraud_shields` | The latest Lendflow lifecycle message for the service. |
| `request_data.experian.fraud_shields` | The stored provider request containing `bin` and `subcode`. Treat both as sensitive operational identifiers. |

Internally, Lendflow sends a `POST` request to Experian's `/businessinformation/businesses/v1/fraudshields` endpoint with the matched BIN and configured subcode.

## Data Orchestration availability and flow

Experian Fraud is not included in the current Data Orchestration service catalog. Run it through the **Experian Fraud** block in an underwriting Workflow Builder stage or through the application enrichment API.

When either path runs Fraud Shields without a stored Experian BIN, Lendflow attempts Business Match first. If no business is matched, Fraud Shields does not run and the service records the failure.

## What the service returns

| Response area | Meaning |
| - | - |
| `businessHeader` | Identity and contact information for the matched Experian business record. |
| `matchingBusinessAddress` | Whether the submitted address matched the primary business or a branch, when Experian supplies this classification. |
| `activeBusinessIndicator` | Experian's indicator of whether the business appears active. |
| `ofacMatchWarning` | Whether the business name, address, both, or neither produced a possible OFAC list match. |
| Fraud-victim and risk-trigger fields | Whether the business reported fraud or identity theft and whether Experian identified high-risk address conditions. |
| `nameAddressVerificationIndicator` | Whether Experian identified potential inconsistencies among the business name, address, phone, and tax ID. |

Provider fields can be omitted or `null` when Experian does not supply a value. Integrations should tolerate additional provider fields and should evaluate the indicators together with their accompanying definitions or statements.

## Representative response

This shortened example is sanitized and reflects the response shape consumed by Lendflow.

```json theme={"system"}
{
  "businessHeader": {
    "bin": "123456789",
    "businessName": "EXAMPLE BUSINESS LLC",
    "address": {
      "street": "100 MAIN ST",
      "city": "AUSTIN",
      "state": "TX",
      "zip": "78701",
      "zipExtension": null
    },
    "phone": null,
    "taxId": null,
    "websiteUrl": "example.com",
    "legalBusinessName": "EXAMPLE BUSINESS LLC",
    "dbaNames": null,
    "customerDisputeIndicator": false
  },
  "matchingBusinessAddress": "Primary Business",
  "activeBusinessIndicator": true,
  "ofacMatchWarning": {
    "code": 1,
    "definition": "No OFAC match found"
  },
  "businessVictimStatementIndicator": false,
  "businessRiskTriggersIndicator": true,
  "businessRiskTriggersStatement": [
    "BUSINESS ADDRESS IDENTIFIED AS RESIDENTIAL"
  ],
  "nameAddressVerificationIndicator": false
}
```

## Response attributes

### Business identity

| Attribute | Type | Meaning | Possible values or units | When returned |
| - | - | - | - | - |
| `businessHeader` | Object | Identity record for the matched business. | Provider object. | When Experian supplies a business header. |
| `businessHeader.bin` | String | Experian BIN for the matched record. | Numeric identifier represented as a string; commonly nine digits. | When available. |
| `businessHeader.businessName` | String | Business name on the matched record. | Provider text. | When available. |
| `businessHeader.address` | Object | Address associated with the record. | Contains `street`, `city`, `state`, `zip`, and `zipExtension`. | When address data is available. |
| `businessHeader.address.street` | String | Street address. | Provider text. | When available. |
| `businessHeader.address.city` | String | City. | Provider text. | When available. |
| `businessHeader.address.state` | String | State code. | Two-letter US state code in current responses. | When available. |
| `businessHeader.address.zip` | String | ZIP code. | String that preserves leading zeroes. | When available. |
| `businessHeader.address.zipExtension` | String or null | ZIP+4 extension. | Four-character string or `null`. | When Experian has an extension. |
| `businessHeader.phone` | String or null | Business telephone number. | Provider-formatted telephone string or `null`. | When available. |
| `businessHeader.taxId` | String or null | Tax identifier returned by Experian. | Sensitive identifier string or `null`. | When available. |
| `businessHeader.websiteUrl` | String or null | Business website. | Provider URL text or `null`. | When available. |
| `businessHeader.legalBusinessName` | String or null | Legal business name. | Provider text or `null`. | When available. |
| `businessHeader.dbaNames` | Array of strings or null | Doing-business-as names. | Zero or more names, or `null`. | When Experian has DBA data. |
| `businessHeader.customerDisputeIndicator` | Boolean | Whether the business disputed information in its Experian profile. | `true` or `false`. | When returned by Experian. |

### Fraud indicators

| Attribute | Type | Meaning | Possible values or units | When returned |
| - | - | - | - | - |
| `matchingBusinessAddress` | String or null | Classification of the address match. | `Primary Business`, `Branch Business`, provider text, or `null`. | When Experian can classify the match. |
| `activeBusinessIndicator` | Boolean | Whether Experian identifies the business as active. | `true` or `false`. A false value may reflect evidence such as bankruptcy, registration, trade, collection, or inquiry activity. | When returned by Experian. |
| `ofacMatchWarning` | Object or null | OFAC screening result. | Contains numeric `code` and string `definition`, or can be `null` when no match attempt was made. | When Experian supplies OFAC screening data. |
| `ofacMatchWarning.code` | Number or null | Provider OFAC result code. | See the OFAC code table below. | When an OFAC result is supplied. |
| `ofacMatchWarning.definition` | String | Human-readable meaning of the OFAC code. | Provider text. | With a coded OFAC result. |
| `businessVictimStatementIndicator` | Boolean | Whether the business filed a statement with Experian reporting fraud or identity theft. | `true` or `false`. | When returned by Experian. |
| `businessRiskTriggersIndicator` | Boolean | Whether Experian identified high-risk conditions associated with the business address. | `true` or `false`. | When returned by Experian. |
| `businessRiskTriggersStatement` | Array of strings | Descriptions of identified address-risk conditions. | Zero or more provider statements. | Returned when risk-trigger details are available, typically when `businessRiskTriggersIndicator` is `true`. |
| `nameAddressVerificationIndicator` | Boolean | Whether Experian found potential inconsistencies among the business name, address, phone, and tax ID. | `true` or `false`. | When returned by Experian. |

### OFAC codes

| Code | Meaning |
| - | - |
| `1` | No OFAC match found. |
| `11` | Possible match to the company name only. |
| `12` | Possible match to the business address only. |
| `13` | Possible match to both the company name and business address. |
| `null` | No OFAC match attempt was made. |

An OFAC warning indicates a possible match for review; it is not by itself a confirmed sanctions match.

## Errors and statuses

Do not interpret a Lendflow lifecycle status as a Fraud Shields finding.

| Location or condition | Value or message | Meaning |
| - | - | - |
| `statuses.experian.fraud_shields` | `Not yet started` | Lendflow has no service log for Fraud Shields. |
| `statuses.experian.fraud_shields` | `Started` | Lendflow started the external-service job. |
| `statuses.experian.fraud_shields` | `Success` | Lendflow stored a successful provider response. |
| `statuses.experian.fraud_shields` | Error message | The job failed; Lendflow exposes the latest recorded failure message. |
| `commercial_data.experian.fraud_shields` | Object or `null` | The provider result. `null` can mean the job has not completed or no result was stored; check the status and Data Orchestration log. |
| Automatic Business Match | `No Business found - {business name}` | The application had no BIN and Business Match did not return one, so Fraud Shields was not requested. |
| Authentication | `Country code is required to authenticate with Experian` | The business address lacks the country context required to select Experian authentication. |
| Authentication | `Unable to retrieve Experian bearer token` | Experian authentication did not return an access token. Verify credentials and service availability. |
| Request validation | BIN or subcode validation error | The Fraud Shields request requires both values to be non-empty strings. Verify the matched BIN and configured subcode. |
| Provider or HTTP error | Provider message or `Something went wrong. Try again later` | Experian rejected the request or returned an error. Lendflow records the provider message when available. |
| Data Orchestration `master_status` | `0`, `2`, `3`, `4`, `5`, or `6` | Overall run status: Not Started, Processing, Review, Complete Pass, Complete Fail, or Error. This is separate from Fraud Shields content. |

## FAQ

<AccordionGroup>
  <Accordion title="Which service does the Experian Fraud block run?">
    The block runs Fraud Shields with service ID `experian_fraud_shields` for a business entity.
  </Accordion>

  <Accordion title="Does Experian Fraud require a BIN?">
    Yes. The provider request requires an Experian BIN and subcode. If the business has no BIN, Lendflow first attempts Experian Business Match and stores the best returned match.
  </Accordion>

  <Accordion title="Which application fields are required when Lendflow must find a BIN?">
    Business legal name, city, and a valid US state code are required for automatic Business Match. The business country is required for authentication and must be `US` for this service. Street, ZIP code, telephone, and EIN are optional match inputs.
  </Accordion>

  <Accordion title="Should I send options with the enrichment request?">
    No. Fraud Shields has no service-specific options. Send `provider: "experian_fraud_shields"` and include `stage_id` only when the application's underwriting workflow requires it.
  </Accordion>

  <Accordion title="Does data.onqueue true mean the Fraud Shields result is ready?">
    No. It confirms only that Lendflow queued the enrichment job. Poll the commercial-data endpoint and inspect `statuses.experian.fraud_shields` and `commercial_data.experian.fraud_shields`.
  </Accordion>

  <Accordion title="Can Experian Fraud run in Data Orchestration?">
    No. Experian Fraud is not included in the current Data Orchestration service catalog. Use the underwriting Workflow Builder block or application enrichment API.
  </Accordion>

  <Accordion title="Does an OFAC warning confirm a sanctions match?">
    No. Fraud Shields reports a possible name or address match. Review the returned code and definition through your organization's compliance process.
  </Accordion>
</AccordionGroup>