Developer Documentation

Fraud Rules

Fraud Rules

Fraud controls are configurable through fraud_rules and recorded in fraud_rule_hits.

Admin endpoints:

• GET /v1/admin/fraud-rules
• POST /v1/admin/fraud-rules
• GET /v1/admin/fraud-rules/{id}
• PUT /v1/admin/fraud-rules/{id}
• POST /v1/admin/fraud-rules/{id}/activate
• POST /v1/admin/fraud-rules/{id}/deactivate

Default rules cover:

• Transaction amount above threshold
• User transaction velocity
• Failed PIN attempts
• Provider webhook failures

Rule conditions are JSON so risk operations can evolve rules without changing controller code.