Whitelist / approve list

The opposite of a blacklist: a list of people or details a business has flagged as trustworthy, so future orders from them skip extra scrutiny.

A customer who has bought many times without a problem might be placed on the list, and their next order goes straight through.

A registry of attributes, such as an address, device, or card, previously associated with legitimate activity, checked against new transactions to auto-approve matches and reduce manual review volume.

A whitelist typically works like this:

1. A customer, device, or card builds a record of legitimate activity.
2. The attribute is added to the approve list.
3. New transactions are checked against the list.
4. A match is approved automatically, with fewer or no extra checks.

Lists can hold several kinds of attributes:

• Customer details, such as accounts with a long, clean history.
• Payment details, such as cards that have completed many undisputed purchases.
• Devices and addresses, such as familiar devices and delivery locations.

The approach carries risks that teams plan for:

• Stolen trusted details, since a whitelisted card or account that is compromised keeps its trusted status.
• Stale entries, since a detail that was trustworthy last year may not be today.
• Overly broad rules, since trusting a whole category can let bad activity through.

A whitelist sits next to terms that are easy to mix up:

• Negative list / blacklist is the opposite, a list of details tied to fraud that are blocked.
• Manual review is the human check that a whitelist helps reduce.
• Trust score is a calculated number that judges trust case by case, instead of through a fixed list.