---
title: "External TRA"
description: "Use the PSD2-compliant risk analysis of your own fraud prevention service to request an exemption from Strong Customer Authentication on low-risk transactions."
url: "https://docs.fabrick.com/en/payment-hub-and-orchestra/ecommerce/features/fraud-prevention/external-tra/"
language: "en"
---

# External TRA

Fabrick allows performing an **External Transaction Risk Analysis (TRA)**. This scenario occurs when a merchant directly integrates a fraud prevention service capable of providing a risk analysis compliant with **PSD2** regulations and wishes to leverage this analysis to request an exemption from the standard **3D Secure (3DS)** flow. As a result, the merchant can reduce authentication rejections, improving both the **user experience** for customers and the overall **conversion rate**.

### Supported Integrations

✓ — Checkout Page

✓ — Pay By Link

✓ — Web Component

✓ — Lightbox

✓ — API Only

✗ — Plugin

---

## Requirements for Use

To process transactions with an **External TRA** request, the following requirements must be met:

- The **acquirer** has reviewed and approved the merchant's request to process transactions as TRA, based on:

  - historical fraud rate;
  - merchant's industry sector;
  - terms and conditions;
  - product or service characteristics;
  - implemented anti-fraud measures.

  Should the fraud rate exceed the acceptable threshold, the approval may be **revoked**.

- The merchant has updated their integrations to include the exemption request parameter.

**External TRA** activation can be requested from your **commercial representative**.

---

## Flow Behavior

When a transaction includes the parameter specified for **External TRA**:

- an authorization request with **TRA** exemption is processed directly;
- exempted transactions **are not protected by 3DS security protocols**;
- in the event of fraud, **liability falls on the merchant**.

The issuer may still request authentication.\
In this case the merchant will receive **soft error `8006`** and must handle the transaction as a standard **3D Secure** transaction.

---

## External TRA Payload

To process a transaction as an **External TRA**, the parameter `transDetails.threeDSAuthResult.authenticationLevel` = `TR` must be set.

**Request**

```http
POST /api/v1/payment/create
Host (sandbox): sandbox.gestpay.net
Host (production): ecomms2s.sella.it
Authorization: apikey ****************
Content-Type: application/json
```

```json
{
    "shopLogin": "GESPAY12345",
    "amount": "1.00",
    "currency": "EUR",
    "shopTransactionID": "OrderID",
    "transDetails": {
        "threeDSAuthResult": {
            "authenticationLevel": "TR",
            "authenticationStatus": "",
            "XID": "",
            "AV": "",
            "ECI": "",
            "AVAlgorithm": "",
            "threeDsVersion": ""
        }
    }
}
```

---

## Specific Errors

| Error                                                      | Description / Action                                                                                                                                                  |
| ---------------------------------------------------------- | --------------------------------------------------------------------------------------------------------------------------------------------------------------------- |
| **8008 Function not available**                            | The shoplogin configuration is incomplete, for example the dedicated features for External TRA are missing.                                                           |
| **8006 Verify By Visa**                                    | Cardholder authentication is required.                                                                                                                                |
| **1182 Invalid \\"authenticationLevel\\" parameter value** | The value entered in the `authenticationLevel` field is not accepted. The integration must be checked/corrected to avoid systematic or recurring errors of this type. |
| **1147 Amount too high**                                   | The transaction amount for which an exemption is requested exceeds the amount limit set by the acquirer.                                                              |