Cardless challenge systems and methods

1. A method for authorizing a transaction between a consumer and a merchant, the method comprising:

receiving, at a server of a non-merchant entity, a consumer message directly from an access device used by the consumer, wherein the consumer message includes account information of an account of the consumer to be used for the transaction;

determining whether to send a challenge question to the consumer based on information collected from and about the access device;

providing, to a merchant server from the non-merchant server, code that is incorporated into an application page that is sent from the merchant to the consumer before the non-merchant server receives the consumer message, wherein the code sends the information about the access device to the non-merchant server;

subsequent to receiving the consumer message, sending, to the consumer from the non-merchant server, a challenge question;

receiving, at the non-merchant server from the consumer, a challenge answer to the challenge question; and

sending, to the merchant server from the non-merchant server, a funding message.

2. A system for authorizing a transaction between a consumer and a merchant, the system comprising:

a server having an external interface that receives a consumer message directly from an access device used by the consumer, wherein the consumer message includes account information of an account of the consumer to be used for the transaction, and wherein the server is associated with a non-merchant entity;

one or more processors; and

one or more memory devices containing instructions that when executed by the one or more processors direct the one or more processors to:

determine whether to send a challenge question to the consumer based on information collected from and about the access device;

provide, to a merchant server from the non-merchant server, code that is incorporated into an application page that is sent from the merchant to the consumer before the non-merchant server receives the consumer message, wherein the code sends the information about the access device to the non-merchant server;

send, to the consumer from the non-merchant server, a challenge question, wherein the challenge question is sent subsequent to receiving the consumer message at the non-merchant server;

receive, at the non-merchant server from the consumer, a challenge answer to the challenge question; and

send, to the merchant server from the non-merchant server, a funding message.

3. The method of claim 1 , wherein the challenge question is sent to a consumer device that is not the access device.

4. The method of claim 3 , wherein the consumer device is a mobile phone of the consumer and the access device is a point of sale terminal at a retail location associated with the merchant.

5. The method of claim 1 , further comprising:

sending an authorization request to an issuer of the account; and

prior to sending the authorization request to the issuer of the account, sending the challenge question to the consumer.

6. The method of claim 1 further comprising:

receiving transaction information about at least one of: the access device being used by the consumer to initiate the transaction, an amount of the transaction, and one or more items to be purchased in the transaction; and

determining the challenge question based on the transaction information.

7. The method of claim 1 , further comprising:

after receiving the consumer message, selecting, by the non-merchant server, the challenge question to send to the consumer.

8. The method of claim 1 , wherein the information about the access device is received before the consumer message.

9. The method of claim 1 , further comprising:

initiating, at the non-merchant server, a risk analysis using the information about the access device;

calculating a risk score based on the risk analysis; and

using the risk score to determine whether to send the challenge question to the consumer.

10. The method of claim 9 , further comprising determining whether to deny the transaction based on the risk score.

11. The method of claim 1 , wherein the information about the access device includes at least one of: a geographical location of the access device, an operating system of the access device, and a processor type of the access device.

12. The method of claim 1 , wherein the application page contains a plurality of payment mechanism options for the transaction, wherein a first subset of the payment mechanism options includes one or more first payment mechanisms, and wherein the code sends the information about the access device in response to one of the first payment mechanisms being selected by the consumer.

13. A system for authorizing a transaction between a consumer and a merchant, the system comprising:

a server having an external interface that receives a consumer message directly from an access device used by the consumer, wherein the consumer message includes account information of an account of the consumer to be used for the transaction, and wherein the server is associated with a non-merchant entity;

one or more processors; and

one or more memory devices containing instructions that when executed by the one or more processors direct the one or more processors to:

send, to the consumer from the non-merchant server, a challenge question, wherein the challenge question is sent subsequent to receiving the consumer message at the non-merchant server;

determine whether to send a challenge question to the consumer based on information collected from and about the access device;

receive, at the non-merchant server from the consumer, a challenge answer to the challenge question; and

send, to a merchant server from the non-merchant server, a funding message.

14. A computer program product comprising a non-transitory computer readable medium storing a plurality of instructions that when executed by one or more processors direct the one or more processors to perform an operation for authorizing a transaction between a consumer and a merchant, the instructions comprising:

receiving, at a server of a non-merchant entity, a consumer message directly from an access device used by the consumer, wherein the consumer message includes account information of an account of the consumer to be used for the transaction;

determining whether to send a challenge question to the consumer based on information collected from and about the access device;

providing, to a merchant server from the non-merchant server, code that is incorporated into an application page that is sent from the merchant to the consumer before the non-merchant server receives the consumer message, wherein the code sends the information about the access device to the non-merchant server;

subsequent to receiving the consumer message, sending, to the consumer from the non-merchant server, a challenge question;

receiving, at the non-merchant server from the consumer, a challenge answer to the challenge question; and

sending, to the merchant server from the non-merchant server, a funding message.

15. The computer program product of claim 14 , wherein the instructions further comprise repeating sending at least one challenge question and receiving at least one challenge answer.

16. The computer program product of claim 14 , wherein the challenge question is sent to a consumer device that is not the access device.

17. The computer program product of claim 16 , wherein the consumer device is a mobile phone of the consumer and the access device is a point of sale terminal at a retail location associated with the merchant.

18. The computer program product of claim 14 , wherein the instructions further comprise:

sending an authorization request to an issuer of the account; and

prior to sending the authorization request to the issuer of the account, sending the challenge question to the consumer.

19. The computer program product of claim 14 wherein the instructions further comprise:

receiving transaction information about at least one of: the access device being used by the consumer to initiate the transaction, an amount of the transaction, and one or more items to be purchased in the transaction; and

determining the challenge question based on the transaction information.

20. The computer program product of claim 14 , wherein the instructions further comprise:

after receiving the consumer message, selecting, by the non-merchant server, the challenge question to send to the consumer.

21. The computer program product of claim 14 , wherein the information about the access device is received before the consumer message.

22. The computer program product of claim 14 , wherein the instructions further comprise:

initiating, at the non-merchant server, a risk analysis using the information about the access device;

calculating a risk score based on the risk analysis; and

using the risk score to determine whether to send the challenge question to the consumer.

23. The computer program product of claim 22 , wherein the instructions further comprise determining whether to deny the transaction based on the risk score.

24. The computer program product of claim 14 , wherein the information about the access device includes at least one of: a geographical location of the access device, an operating system of the access device, and a processor type of the access device.

25. The computer program product of claim 14 , wherein the application page contains a plurality of payment mechanism options for the transaction, wherein a first subset of the payment mechanism options includes one or more first payment mechanisms, and wherein the code sends the information about the access device in response to one of the first payment mechanisms being selected by the consumer.