Fraud Detection and Risk Management

The Fraud Detection and Risk Management API enables comprehensive fraud prevention and security monitoring for business partners using Signet's services. Partners can blacklist suspicious clients, flag compromised devices and IP addresses, verify geolocation data, report fraud incidents, and assess user risk scores. The API provides real-time transaction monitoring, pattern recognition, and automated fraud prevention measures to protect users and transactions.

The fraud detection model

The fraud detection model handles the data fields used in the Fraud Detection API endpoints for managing security threats, risk assessment, and fraud prevention. It enables comprehensive monitoring of clients, devices, IP addresses, and fraudulent activities.

Properties

  • Name
    clientId
    Type
    string (UUID)
    Description
    Unique identifier for the client (UUID format). Required for client-related operations.
  • Name
    userId
    Type
    string (UUID)
    Description
    Unique identifier for the user (UUID format). Required for user-related operations.
  • Name
    deviceId
    Type
    string (UUID)
    Description
    Unique identifier for the device (UUID format). Required for device management operations.
  • Name
    reasons
    Type
    array
    Description
    Reasons for blacklisting, flagging, or reporting. Required for security actions.
  • Name
    category
    Type
    ACCOUNT_ABUSE | PAYMENT_FRAUD | ACCESS_VIOLATION | POLICY_VIOLATION | TRUST_SAFETY | AUTOMATION_BOT | GEO_RISK | DEVICE_RISK | KYC_RISK
    Description
    Risk category (e.g. ACCOUNT_ABUSE, PAYMENT_FRAUD, ACCESS_VIOLATION).
  • Name
    severity
    Type
    LOW | MEDIUM | HIGH
    Description
    Severity level: LOW, MEDIUM, or HIGH.
  • Name
    note
    Type
    string
    Description
    Optional note with additional context (max 500 characters).
  • Name
    limit
    Type
    integer
    Description
    Maximum number of records to return in a single response. Used for pagination.
  • Name
    offset
    Type
    integer
    Description
    Number of records to skip before starting to return results. Used with limit for pagination.
  • Name
    total
    Type
    integer
    Description
    Total number of records matching the query.
  • Name
    hasMore
    Type
    boolean
    Description
    Whether more records are available.

Fraud Prevention

Get suspended clients

Paginated list of suspended clients for investigation.

Parameters
  • Name
    offset
    Type
    integer
    Description
    Page offset (default 0)
  • Name
    limit
    Type
    integer
    Description
    Page size (1–100, default 20)

Request

GET
{{baseUrl}}/fraud/v1/investigation/suspended-clients
curl -X GET "{{baseUrl}}/fraud/v1/investigation/suspended-clients?offset=0&limit=20" \
  -H "Authorization: Bearer YOUR_DPOP_TOKEN"

Success (1/2)

{
  "success": true,
  "message": "Success.",
  "data": {}
}
Get all investigations

All suspended clients with pagination.

Parameters
  • Name
    offset
    Type
    integer
    Description
    Page offset (default 0)
  • Name
    limit
    Type
    integer
    Description
    Page size (1–100, default 20)

Request

GET
{{baseUrl}}/fraud/v1/investigation/all
curl -X GET "{{baseUrl}}/fraud/v1/investigation/all?offset=0&limit=20" \
  -H "Authorization: Bearer YOUR_DPOP_TOKEN"

Success (1/2)

{
  "success": true,
  "message": "Success.",
  "data": {}
}
Get client investigation details

Detailed investigation information for a suspended client.

Parameters
  • Name
    clientId
    Type
    string
    Description
    Client UUID

Request

GET
{{baseUrl}}/fraud/v1/investigation/{clientId}
curl -X GET "{{baseUrl}}/fraud/v1/investigation/123e4567-e89b-12d3-a456-426614174000" \
  -H "Authorization: Bearer YOUR_DPOP_TOKEN"

Success (1/2)

{
  "success": true,
  "message": "Success.",
  "data": {}
}
Suspend client and start investigation

Suspend a client and start an investigation. If already suspended, returns investigation details.

Path / Query parameters
  • Name
    clientId
    Type
    string
    Description
    Client UUID
Request body
  • Name
    suspended
    Type
    boolean
    Description
    Whether the client is suspended
  • Name
    category
    Type
    ACCOUNT_ABUSE | PAYMENT_FRAUD | ACCESS_VIOLATION | POLICY_VIOLATION | TRUST_SAFETY | AUTOMATION_BOT | GEO_RISK | DEVICE_RISK | KYC_RISK
    Description
    Blacklist category (default: POLICY_VIOLATION)
  • Name
    severity
    Type
    LOW | MEDIUM | HIGH
    Description
    Severity level (default: HIGH)
  • Name
    note
    Type
    string
    Description
    Optional note
  • Name
    reason
    Type
    string
    Description
    Optional reason

Request

POST
{{baseUrl}}/fraud/v1/investigation/{clientId}
curl -X POST "{{baseUrl}}/fraud/v1/investigation/123e4567-e89b-12d3-a456-426614174000" \
  -H "Content-Type: application/json" \
  -H "Authorization: Bearer YOUR_DPOP_TOKEN" \
  -d '{
  "suspended": true,
  "category": "ACCOUNT_ABUSE",
  "severity": "LOW",
  "note": "example",
  "reason": "example"
}'

Success (1/2)

{
  "success": true,
  "message": "Success.",
  "data": {}
}
Update client suspension

Suspend or unsuspend a client and update investigation details.

Path / Query parameters
  • Name
    clientId
    Type
    string
    Description
    Client UUID
Request body
  • Name
    suspended
    Type
    boolean
    Description
    Whether the client is suspended
  • Name
    category
    Type
    ACCOUNT_ABUSE | PAYMENT_FRAUD | ACCESS_VIOLATION | POLICY_VIOLATION | TRUST_SAFETY | AUTOMATION_BOT | GEO_RISK | DEVICE_RISK | KYC_RISK
    Description
    Blacklist category (default: POLICY_VIOLATION)
  • Name
    severity
    Type
    LOW | MEDIUM | HIGH
    Description
    Severity level (default: HIGH)
  • Name
    note
    Type
    string
    Description
    Optional note
  • Name
    reason
    Type
    string
    Description
    Optional reason

Request

PATCH
{{baseUrl}}/fraud/v1/investigation/{clientId}
curl -X PATCH "{{baseUrl}}/fraud/v1/investigation/123e4567-e89b-12d3-a456-426614174000" \
  -H "Content-Type: application/json" \
  -H "Authorization: Bearer YOUR_DPOP_TOKEN" \
  -d '{
  "suspended": true,
  "category": "ACCOUNT_ABUSE",
  "severity": "LOW",
  "note": "example",
  "reason": "example"
}'

Success (1/2)

{
  "success": true,
  "message": "Success.",
  "data": {}
}
Unsuspend client

Restore client access by unsuspending them.

Parameters
  • Name
    clientId
    Type
    string
    Description
    Client UUID
  • Name
    reason
    Type
    string
    Description
    Optional reason for unsuspension (max 500 chars)

Request

DELETE
{{baseUrl}}/fraud/v1/investigation/{clientId}/unsuspend
curl -X DELETE "{{baseUrl}}/fraud/v1/investigation/123e4567-e89b-12d3-a456-426614174000/unsuspend?reason=0" \
  -H "Authorization: Bearer YOUR_DPOP_TOKEN"

Success (1/2)

{
  "success": true,
  "message": "Success.",
  "data": {}
}

Was this page helpful?