Protecting your business from payment fraud with GuestyPay Protect

GuestyPay Protect is a comprehensive fraud prevention and payment security solution designed specifically for GuestyPay and Merchant Warrior users. This feature helps safeguard your business from chargebacks and unauthorized transactions by combining AI-driven fraud detection with 3D Secure (3DS) authentication across all booking channels.

Why use GuestyPay Protect

• Reduce financial risk: Identify and block fraudulent credit cards before they impact your business.

• Get channel-wide protection: Secure both direct bookings and Online Travel Agency (OTA) reservations.

• Enhance payment security: Leverage 3DS authentication for transactions in the USA, Canada, and Australia.

• Gain complete visibility: Track all fraud detection and 3DS activities through dedicated reports.

Eligibility

GuestyPay Protect is available for the following:

• Guesty Pro users with GuestyPay or Merchant Warrior in Australia, Canada, the EU, UK, and USA.
• Users accessing Guesty via Guesty's Open API.

Understand how it works

GuestyPay Protect automatically blocks fraudulent cards for direct bookings and sends alerts for suspicious OTA reservations. When collecting payments, the system handles 3DS authentication. Most transactions require no guest action.

In the USA, about 65% of 3DS transactions are frictionless. Everything is tracked in simple reports, giving you full visibility with minimal effort. The feature activates on your Guesty account and covers all connected GuestyPay and Merchant Warrior accounts.

Manage direct reservations

During checkout, Guesty automatically verifies the credit card. If a card is flagged as potentially fraudulent, the reservation is blocked entirely.

3DS authentication triggers when it's time to collect payment based on your automation rules. By default, authentication is required for transactions above $1,000. To change this threshold, contact the GuestyPay Risk team. If guest verification is needed, the guest receives an email to authenticate the transaction.

Manage OTA reservations

While Guesty doesn't block OTA reservations automatically, the system still validates every credit card. When Guesty detects a potentially fraudulent card, a fraud icon appears on the reservation and you receive a notification. The 3DS authentication process works the same way as it does for direct reservations.

Whitelist Guesty domains on Booking.com

For reservations from Booking.com that require 3DS authentication, guests receive an email with authentication links. To ensure these emails work properly, follow the steps below to whitelist Guesty domains in your Booking.com account.

Step by step:

1. Sign in to your group account on the Booking.com extranet.
2. On the homepage, select one property.
3. Click Property and then click Messaging preferences.
4. Click Security settings.
5. Complete two-factor authentication.
6. Click Add a link and enter two domains: www.guesty.com and guesty.com.
7. To add more links, click +.
8. To apply the same settings to all properties in your account, click Apply to all properties.
9. Check the approved email addresses and click Apply to all properties in the popup.

If you add new properties to your Booking.com account after whitelisting existing properties, repeat these steps to ensure they are covered.

Access protection reports

Follow the steps below to access your protection reports and monitor fraud detection activity.

Step by step:

1. Sign in to your Guesty account.
2. In the top navigation bar, click the mode selector and select Financials mode.
3. Select Guesty Pay Protect.
4. Select one of the following:
   • Fraud report: View all fraud validation attempts, both approved and declined.
   • 3DS report: See all 3DS transactions, including authentication status.