Skip to main content
POST
Report fraud

Authorizations

​
Authorization
string
header
required

API key as Bearer token

Headers

​
Reap-Version
enum<string>
required

API version (YYYY-MM-DD)

Available options:
2025-02-14
Example:

"2025-02-14"

​
Idempotency-Key
string

Unique key for safely retrying this request. Up to 255 characters; we recommend a UUIDv4. The first request executes and its response is cached; subsequent requests with the same key replay the cached response (24h retention).

Required string length: 1 - 255

Body

Report fraud against a past card transaction.

​
transactionId
string<uuid>
required

ID of the card transaction to report as fraud

​
type
enum<string>
required

Fraud classification

Available options:
CARD_LOST,
CARD_STOLEN,
ACCOUNT_NUMBER_MISUSE,
OTHER
Example:

"CARD_LOST"

​
cardholderNotifiedAt
string<date-time>

ISO 8601 timestamp when the cardholder was notified of the suspected fraud. When supplied, the reporting window is the earlier of the transaction-based deadline and a shorter window from this timestamp. When omitted, only the transaction-based window applies.

Pattern: ^(?:(?:\d\d[2468][048]|\d\d[13579][26]|\d\d0[48]|[02468][048]00|[13579][26]00)-02-29|\d{4}-(?:(?:0[13578]|1[02])-(?:0[1-9]|[12]\d|3[01])|(?:0[469]|11)-(?:0[1-9]|[12]\d|30)|(?:02)-(?:0[1-9]|1\d|2[0-8])))T(?:(?:[01]\d|2[0-3]):[0-5]\d(?::[0-5]\d(?:\.\d+)?)?(?:Z))$

Response

Fraud alert resource

​
id
string<uuid>
required

Unique fraud alert identifier

​
cardId
string<uuid>
required

ID of the card this alert is for

​
transactionId
string<uuid>
required

ID of the card transaction this alert is for

​
status
enum<string>
required

Current fraud alert status

Available options:
PENDING,
CONFIRMED,
DECLINED,
EXPIRED
Example:

"PENDING"

​
origin
enum<string>
required

How the alert entered the system (DETECTED via fraud monitoring, or REPORTED by the partner)

Available options:
DETECTED,
REPORTED
Example:

"DETECTED"

​
type
enum<string> | null
required

Fraud classification. Present only when status is CONFIRMED; null for others

Available options:
CARD_LOST,
CARD_STOLEN,
ACCOUNT_NUMBER_MISUSE,
OTHER
Example:

"CARD_LOST"

​
detectionReason
string | null
required

Reason supplied with a detected alert, when present

​
cardholderMessage
string | null
required

Cardholder-facing message from the Reap or Card Network, when present. Display only - do not branch on its contents

​
transactionOccurredAt
string<date-time>
required

ISO 8601 timestamp of the underlying transaction (anchors the reporting window)

Pattern: ^(?:(?:\d\d[2468][048]|\d\d[13579][26]|\d\d0[48]|[02468][048]00|[13579][26]00)-02-29|\d{4}-(?:(?:0[13578]|1[02])-(?:0[1-9]|[12]\d|3[01])|(?:0[469]|11)-(?:0[1-9]|[12]\d|30)|(?:02)-(?:0[1-9]|1\d|2[0-8])))T(?:(?:[01]\d|2[0-3]):[0-5]\d(?::[0-5]\d(?:\.\d+)?)?(?:Z))$
​
detectedAt
string<date-time>
required

ISO 8601 timestamp when the alert was raised (anchors the response window)

Pattern: ^(?:(?:\d\d[2468][048]|\d\d[13579][26]|\d\d0[48]|[02468][048]00|[13579][26]00)-02-29|\d{4}-(?:(?:0[13578]|1[02])-(?:0[1-9]|[12]\d|3[01])|(?:0[469]|11)-(?:0[1-9]|[12]\d|30)|(?:02)-(?:0[1-9]|1\d|2[0-8])))T(?:(?:[01]\d|2[0-3]):[0-5]\d(?::[0-5]\d(?:\.\d+)?)?(?:Z))$
​
respondedAt
string<date-time> | null
required

ISO 8601 timestamp when the alert was confirmed or declined, if resolved that way

Pattern: ^(?:(?:\d\d[2468][048]|\d\d[13579][26]|\d\d0[48]|[02468][048]00|[13579][26]00)-02-29|\d{4}-(?:(?:0[13578]|1[02])-(?:0[1-9]|[12]\d|3[01])|(?:0[469]|11)-(?:0[1-9]|[12]\d|30)|(?:02)-(?:0[1-9]|1\d|2[0-8])))T(?:(?:[01]\d|2[0-3]):[0-5]\d(?::[0-5]\d(?:\.\d+)?)?(?:Z))$
​
resolvedAt
string<date-time> | null
required

ISO 8601 timestamp when the alert reached a terminal status

Pattern: ^(?:(?:\d\d[2468][048]|\d\d[13579][26]|\d\d0[48]|[02468][048]00|[13579][26]00)-02-29|\d{4}-(?:(?:0[13578]|1[02])-(?:0[1-9]|[12]\d|3[01])|(?:0[469]|11)-(?:0[1-9]|[12]\d|30)|(?:02)-(?:0[1-9]|1\d|2[0-8])))T(?:(?:[01]\d|2[0-3]):[0-5]\d(?::[0-5]\d(?:\.\d+)?)?(?:Z))$
​
reportableUntil
string<date-time> | null
required

ISO 8601 deadline for a report after an unanswered detected alert expired. Null unless status is EXPIRED

Pattern: ^(?:(?:\d\d[2468][048]|\d\d[13579][26]|\d\d0[48]|[02468][048]00|[13579][26]00)-02-29|\d{4}-(?:(?:0[13578]|1[02])-(?:0[1-9]|[12]\d|3[01])|(?:0[469]|11)-(?:0[1-9]|[12]\d|30)|(?:02)-(?:0[1-9]|1\d|2[0-8])))T(?:(?:[01]\d|2[0-3]):[0-5]\d(?::[0-5]\d(?:\.\d+)?)?(?:Z))$
​
respondableUntil
string<date-time>
required

ISO 8601 deadline for confirming or declining a detected alert

Pattern: ^(?:(?:\d\d[2468][048]|\d\d[13579][26]|\d\d0[48]|[02468][048]00|[13579][26]00)-02-29|\d{4}-(?:(?:0[13578]|1[02])-(?:0[1-9]|[12]\d|3[01])|(?:0[469]|11)-(?:0[1-9]|[12]\d|30)|(?:02)-(?:0[1-9]|1\d|2[0-8])))T(?:(?:[01]\d|2[0-3]):[0-5]\d(?::[0-5]\d(?:\.\d+)?)?(?:Z))$
​
createdAt
string<date-time>
required

ISO 8601 timestamp of creation

Pattern: ^(?:(?:\d\d[2468][048]|\d\d[13579][26]|\d\d0[48]|[02468][048]00|[13579][26]00)-02-29|\d{4}-(?:(?:0[13578]|1[02])-(?:0[1-9]|[12]\d|3[01])|(?:0[469]|11)-(?:0[1-9]|[12]\d|30)|(?:02)-(?:0[1-9]|1\d|2[0-8])))T(?:(?:[01]\d|2[0-3]):[0-5]\d(?::[0-5]\d(?:\.\d+)?)?(?:Z))$
​
updatedAt
string<date-time>
required

ISO 8601 timestamp of last update

Pattern: ^(?:(?:\d\d[2468][048]|\d\d[13579][26]|\d\d0[48]|[02468][048]00|[13579][26]00)-02-29|\d{4}-(?:(?:0[13578]|1[02])-(?:0[1-9]|[12]\d|3[01])|(?:0[469]|11)-(?:0[1-9]|[12]\d|30)|(?:02)-(?:0[1-9]|1\d|2[0-8])))T(?:(?:[01]\d|2[0-3]):[0-5]\d(?::[0-5]\d(?:\.\d+)?)?(?:Z))$