Event Code 115 - FTM Alert Creation


📘

Note

To use this event code, you must be onboarded for Fraud Transaction Monitoring, and have valid fraud rules set up. For more information, speak to your Account Manager.

The 115 event code is used when a new alert is created in Fraud Transaction Monitoring (FTM).

{
  "productId": 12345,
  "events": [115],
  "webhookStatus": "active",  
  "config": {
    "url": "https://client_domain.com/webhook",
    "customHeaders": {
      "header1": "value_1",
      "header2": "value_2"
    }
  }
}

After the webhook has been successfully set up, when an alert is created in FTM, a notification response is sent asynchronously from the Event Delivery Service to the URL specified in the webhook. See the below example of a response.

{
  "context": {
    "notificationId": "f47ac10b-58cc-4372-a567-0e02b2c3d479",
    "eventCode": 115,
    "eventVersion": "v1",
    "notificationTime": "2025-10-29T23:20:28Z"
  },
  "payload": {
    "AlertTime": "2025-10-29T15:00:00Z",
    "EventTime": "2025-10-29T14:59:30Z",
    "AlertId": "1814885-SleFPH53",
    "EventId": "46d99b92-0d4d-48a4-97a4-eba49b94c9f1",
    "EventType": "cardRT",
    "SystemEventId": "1814885-SleFPH53",
    "ThreddTransactionId": "6167181535",
    "CustomerId": "TRD-1",
    "CardId": "3181200146334628",
    "ProductId": "10030",
    "ProgramManagerCode": [
      "TRD"
    ],
    "TenantId": [
      "TRD"
    ],
    "ActionTags": [
      {
        "Tag": "Action",
        "Values": [
          "Decline"
        ]
      }
    ],
    "TriggeredRules": [
      "AlertingRule",
      "AlertingRule_2"
    ],
    "TriggeringEntities": [
      "3181200136754628",
      "TRD-1"
    ]
  }
}

The below table describes each of the fields included in the notification response.

FieldDescription
contextObject that contains the context of the notification, such as the event code.
notificationIdUnique identifier of the notification.
eventCodeThe event code. In this case, the event code is 115.
eventVersionThe event version.
notificationTimeWhen the notification was created. Time in the UTC format of 'yyyy-MM-ddTHH:mm:ssZ'.
payloadObject that contains the payload of the notification, which is specific to the event code.
AlertTimeThe time the alert was generated. This can be null if not applicable.
EventTimeThe time the event occurred that triggered the alert.
AlertIdThe unique identifier for the alert.
EventIdThe unique identifier for the event.
EventTypeThe event type that triggered the alert.
SystemEventIdThe FTM generated identifier for the event.
ThreddTransactionIdThe identifier for the Thredd transaction associated with the event.
CustomerIdThe identifier for the customer involved in the event.
CardIdThe identifier for the card involved in the event.
ProductIdThe identifier for the product associated with the card or transaction.
ProgramManagerCodeThe list of program manager codes associated with the event.
TenantIdThe list of tenant identifiers associated with the event.
ActionTagsObject that contains representing actions taken, aggregated from all entities.
TagThe name of the tag, indicating the type of action or metadata.
ValuesArray of values associated with the tag.
ActionTagsEnd of the ActionTags object.
TriggeredRulesThe list of rules that were triggered by the event.
TriggeringEntitiesThe list of entities that triggered the alert.