Endpoint
Request Headers
Request Body
string
required
The FraudEG transaction ID returned by
POST /v1/transactions/score. This links the decision to the original risk assessment.string
required
The decision to record for this transaction. Accepted values:
allow— Approve the transaction.challenge— Route the transaction to step-up authentication.block— Decline the transaction.
string
required
A structured reason code explaining why this decision was made. Accepted values:
manual_review— Decision follows a completed manual review.customer_verified— Customer passed additional verification (e.g., OTP, ID check).false_positive— The automated model flagged a legitimate transaction incorrectly.confirmed_fraud— Analyst confirmed the transaction is fraudulent.policy_exception— A pre-approved policy exception applies.
string
Free-text analyst notes attached to the audit record. Maximum 1,000 characters. Use this field to document evidence, customer communication references, or escalation context.
string
Your internal ID for the analyst or reviewer who made this decision. Stored in the audit record to support accountability reporting.
Response Fields
string
Unique FraudEG identifier for this decision record. Use this ID when referencing the decision in support tickets or compliance reports.
string
The transaction ID this decision is associated with, echoed back from your request.
string
The recorded decision (
allow, challenge, or block), confirmed by the API.string
The recorded reason code, confirmed by the API.
string
ISO 8601 timestamp of when the decision was recorded (e.g.,
"2024-11-15T11:05:00Z").Code Examples
Example Response
Decision records are immutable. Once you submit a decision via this endpoint, it cannot be edited or deleted — this is by design to maintain a trustworthy audit trail for compliance and dispute resolution. If you need to record a correction, submit a new decision for the same
transaction_id; all decisions in the chain are preserved and timestamped.