Jack Henry Knowledge
Support Sign in

Jack Henry Intercept

Fraud prevention can feel like a costly, never-ending game of whack-a-mole - and every best effort could still result in precious annual budget being set aside just for fraud losses. Enter Jack Henry Intercept: a cloud-native fraud prevention platform that goes far beyond standard authentication methods to detect and block suspicious, anomalous activity. Jack Henry Intercept not only helps financial institutions secure their digital front door - it stops fraudsters in their tracks who manage to socially engineer their way inside the house.

Jack Henry Intercept is a powerful, configurable tool that proactively identifies and prevents fraud attempts, enhancing security for both institutions and their accountholders. By leveraging advanced scoring and real-time data, Jack Henry Intercept gives institutions the control they need to stop fraud before it happens, all while preserving a smooth user experience for accountholders.

Learn more about some of the features included in Jack Henry Intercept’s initial release, from Fraud Scoring to Risk Policies.

Jack Henry Intercept’s Fraud Scoring works by collecting and aggregating fraud signals from multiple providers to generate a single score for a given event, such as a login attempt or high-risk action. Financial institutions can then use these scores to make informed decisions about what to do next.

Institution personnel can also set configurable thresholds that determine what happens when a score is met or exceeded. For example, a lower score might trigger a two-factor authentication challenge, while an incredibly high score above a set threshold might result in the action being blocked entirely.

Additionally, Jack Henry Intercept offers metrics showing institutions exactly how a threshold change would impact accountholders over a period of time, allowing them to fine-tune their settings before risking an impact on live transactions.

Jack Henry Intercept’s Risk Policies allow financial institutions to build and manage their own risk controls and introduce “healthy friction” into the accountholder experience. Institution personnel can create multiple policies to experiment with different strategies, but can only have one policy active at a time to enforce decisions. Within Risk Policies, all changes are versioned, which makes it easy to revert to a previous version, perform audits, and generally check out policy history.

Observation Mode
When activated, a feature within Risk Policies called Observation Mode runs a set of rules and performs all assessments behind the scenes but does not enforce anyconfigured decisions, such as blocking a log-in action or requiring two-factor authentication. Observation Mode allows for multiple policies, which gives institutions the freedom to experiment and fine-tune their policies approach.

Jack Henry Intercept includes these other helpful features.

This feature gives institutions the ability to allow activity based on these parameters:

  • IP address
  • device ID
  • user

This feature gives institutions the ability to deny activity based on these parameters:

  • IP address
  • device ID
  • country

For both allowing and denying activity, countries and IP addresses can be imported or added manually.

Every decision made by Jack Henry Intercept is recorded, making fraud investigations more efficient and less painful. Fraud teams can dive down any rabbit hole, right within the platform, that helps connect the dots and get out in front of fraudsters. Lists can be filtered by parameters like these:

  • IP address
  • user
  • device
  • date
  • location
  • action
  • and more.

Jack Henry Intercept offers deeper integration with Jack Henry Data Hub, Jack Henry Insights, and other insights platforms to provide more granular reporting.

Jack Henry Intercept performs back tests while configuration changes are made. This helps institution personnel make more informed decisions based on how a Risk Policy will actually impact accountholders. This feature offers meaningful details, too - from the actual number of potentially impacted accountholders (and a helpful percentage base of overall accountholders) to a specific analysis date range, such as the last 30 days.

Users & Groups Setup

Within the Users & Groups section, financial institutions can add and edit the permissions that are assigned to groups of users. Available permissions for Jack Henry Intercept include access to Decision Records, management of Risk Policies, and more.

To create a permission set for Jack Henry Intercept, financial institution administrators can follow these steps:

  • Users & Groups
  • Group list
  • JH Permission Sets
  • Intercept
  • Create a permission set
  • Populate the Name and Description fields
  • Choose Intercept in the dropdown menu
  • Select grant on each permission
  • Save

Note that you can create multiple permission sets for the feature to grant different levels of permission. The instructions above create a set that provids full access to Intercept.

  • JH Platform Groups
  • Create a group
  • Supply a name (Intercept or Intercept admins)
  • Supply a description if desired
  • Save
  • Intercept (at the left)
  • Add permission set
  • Add then X
  • Users
  • Add user
  • Choose users from the list, or search for users, then select Add

It’s easy for institutions to find Jack Henry Intercept after logging in to Banno:

  • Ellipsis icon
  • Intercept

From there, institutions can view, manage, and create their risk policies.

Financial institutions can configure their platform and admin settings by following these steps:

Step Instructions
Risk Policy Setup Establish the following institution risk policies (this can be an active or observation policy):
Active Mode: Assessments performed across all action points; configured thresholds trigger automated Decisions (Challenge 2FA, Block device, Block action).
Observation Mode: Assessments performed and decisions recorded without enforcing blocks or challenges.
Define Decision Thresholds Define score thresholds for any specific Actions (e.g., Login 2FA challenge threshold vs. Login block threshold).
Set Allow and Deny Lists Configure any entity-based lists (country, IP, device) to migrate any legacy deny lists and/or implement any timed/one-time allow exceptions.
Feature Testing Steps
JH Platform Permissions and Groups Ensure that Permissions sets were able to be created and edited, that groups could be created and edited, and that users could be added and removed to the new groups. Once added, verify that users in the groups have the appropriate level of access based on the permissions they have been granted.
Creating and Editing Policies After gaining access, verify that you can create policies (add a name, ensure the sliders work as expected, save the policy.) After creating your first policy, verify that you can edit that policy and create additional policies. Verify that the version history feature is working as expected, and finally verify that you can delete policies as well.
Deploy Policies in Observe Mode Once you have created a policy, place it into observe mode for a few weeks to ensure that the policy is behaving correctly by clicking the Deploy button and then choosing Observe before clicking Deploy at the bottom of the box.
Lists Set up Device ID, IP Address, User, and Country lists to allow or deny access to specific values regardless of risk scores within the Lists page of the Intercept app, then attempt to login using a value that is allowed or blocked by one of the newly created lists.
Decision Records Review decisions in the Decision record page. Verify all UI elements are working as expected and displaying expected information.
Enforce Mode After you have had your policy in Observe mode for a short period of time, move it to Enforce mode. To do so click the Deploy button in the top right of the policy that you’d wish to push to enforce, select Enforce in the box that pops up, then choose Deploy at the bottom of the screen.

Related