Fraud Alert Response - Field Descriptions

The following page details each of the fields that can be used in the request and received in the response when using the Fraud Alert Response endpoint.

Request

The following table describes fields that can be included in the body of the request when resending Thredd notifications.

FieldDescriptionTypeMandatory
fraudAlertIdUnique identity of the fraud alert from fraud detection event payload.StringYes
notificationIdUnique identifier of the notification from fraud detection event payload.StringYes
responseCardholder response from client or program manager.StringYes

Response

The following table describes fields that included in the response after successfully receiving a fraud alert response.

Field

Description

status

Status of the response.

response

The cardholder response from client or program manager. The accepted values are either Yes or No. If Yes, the transaction is confirmed as non-fraudulent by the cardholder and any previously blocked card will be automatically unblocked. The Fraud Transaction Monitoring system will also be notified to avoid blocking future transactions.

If No, the transaction is confirmed by the cardholder as fraudulent. If the card is not already blocked, it will be blocked, and Fraud Transaction Monitoring system will be notified accordingly.


Errors

The following table describes the possible errors that can be returned when using the Fraud Alert Response endpoint.

Status CodeContentDescription
400Invalid fraudAlertId format.fraudAlertId format is invalid.
400Invalid notificationId format.notificationId format is invalid.
400Invalid fraudAlertId.fraudAlertId is invalid.
400Unable to process this request at this time. No response received within the required time period.The response came after the alert notification has expired. Note that this is set to 72 hours in Production.
404Message: User is not authorized to access this resource with an explicit deny in an identity-based policy.Message: User is not authorised to access this resource with an explicit deny in an identity-based policy.