Respond to alert

curl --request POST \
  --url https://sandbox.api.reap.global/fraud-alerts/{id}/respond \
  --header 'Authorization: Bearer <token>' \
  --header 'Content-Type: application/json' \
  --header 'Reap-Version: <reap-version>' \
  --data '
{
  "response": "<string>",
  "type": "CARD_LOST"
}
'

const options = {
  method: 'POST',
  headers: {
    'Reap-Version': '<reap-version>',
    Authorization: 'Bearer <token>',
    'Content-Type': 'application/json'
  },
  body: JSON.stringify({response: '<string>', type: 'CARD_LOST'})
};

fetch('https://sandbox.api.reap.global/fraud-alerts/{id}/respond', options)
  .then(res => res.json())
  .then(res => console.log(res))
  .catch(err => console.error(err));

import requests

url = "https://sandbox.api.reap.global/fraud-alerts/{id}/respond"

payload = {
    "response": "<string>",
    "type": "CARD_LOST"
}
headers = {
    "Reap-Version": "<reap-version>",
    "Authorization": "Bearer <token>",
    "Content-Type": "application/json"
}

response = requests.post(url, json=payload, headers=headers)

print(response.text)

{
  "id": "3c90c3cc-0d44-4b50-8888-8dd25736052a",
  "cardId": "3c90c3cc-0d44-4b50-8888-8dd25736052a",
  "transactionId": "3c90c3cc-0d44-4b50-8888-8dd25736052a",
  "status": "PENDING",
  "origin": "DETECTED",
  "type": "CARD_LOST",
  "detectionReason": "<string>",
  "cardholderMessage": "<string>",
  "transactionOccurredAt": "2023-11-07T05:31:56Z",
  "detectedAt": "2023-11-07T05:31:56Z",
  "respondedAt": "2023-11-07T05:31:56Z",
  "resolvedAt": "2023-11-07T05:31:56Z",
  "reportableUntil": "2023-11-07T05:31:56Z",
  "respondableUntil": "2023-11-07T05:31:56Z",
  "createdAt": "2023-11-07T05:31:56Z",
  "updatedAt": "2023-11-07T05:31:56Z"
}

{
  "error": {
    "code": "<string>",
    "message": "<string>",
    "detail": {}
  }
}

{
  "error": {
    "code": "<string>",
    "message": "<string>",
    "detail": {}
  }
}

{
  "error": {
    "code": "<string>",
    "message": "<string>",
    "detail": {}
  }
}

POST

fraud-alerts

{id}

respond

Respond to alert

curl --request POST \
  --url https://sandbox.api.reap.global/fraud-alerts/{id}/respond \
  --header 'Authorization: Bearer <token>' \
  --header 'Content-Type: application/json' \
  --header 'Reap-Version: <reap-version>' \
  --data '
{
  "response": "<string>",
  "type": "CARD_LOST"
}
'

const options = {
  method: 'POST',
  headers: {
    'Reap-Version': '<reap-version>',
    Authorization: 'Bearer <token>',
    'Content-Type': 'application/json'
  },
  body: JSON.stringify({response: '<string>', type: 'CARD_LOST'})
};

fetch('https://sandbox.api.reap.global/fraud-alerts/{id}/respond', options)
  .then(res => res.json())
  .then(res => console.log(res))
  .catch(err => console.error(err));

import requests

url = "https://sandbox.api.reap.global/fraud-alerts/{id}/respond"

payload = {
    "response": "<string>",
    "type": "CARD_LOST"
}
headers = {
    "Reap-Version": "<reap-version>",
    "Authorization": "Bearer <token>",
    "Content-Type": "application/json"
}

response = requests.post(url, json=payload, headers=headers)

print(response.text)

{
  "id": "3c90c3cc-0d44-4b50-8888-8dd25736052a",
  "cardId": "3c90c3cc-0d44-4b50-8888-8dd25736052a",
  "transactionId": "3c90c3cc-0d44-4b50-8888-8dd25736052a",
  "status": "PENDING",
  "origin": "DETECTED",
  "type": "CARD_LOST",
  "detectionReason": "<string>",
  "cardholderMessage": "<string>",
  "transactionOccurredAt": "2023-11-07T05:31:56Z",
  "detectedAt": "2023-11-07T05:31:56Z",
  "respondedAt": "2023-11-07T05:31:56Z",
  "resolvedAt": "2023-11-07T05:31:56Z",
  "reportableUntil": "2023-11-07T05:31:56Z",
  "respondableUntil": "2023-11-07T05:31:56Z",
  "createdAt": "2023-11-07T05:31:56Z",
  "updatedAt": "2023-11-07T05:31:56Z"
}

{
  "error": {
    "code": "<string>",
    "message": "<string>",
    "detail": {}
  }
}

{
  "error": {
    "code": "<string>",
    "message": "<string>",
    "detail": {}
  }
}

{
  "error": {
    "code": "<string>",
    "message": "<string>",
    "detail": {}
  }
}

Authorizations

Authorization

string

header

required

API key as Bearer token

Headers

Reap-Version

enum<string>

required

API version (YYYY-MM-DD)

Available options:

2025-02-14

Example:

"2025-02-14"

Idempotency-Key

string

Unique key for safely retrying this request. Up to 255 characters; we recommend a UUIDv4. The first request executes and its response is cached; subsequent requests with the same key replay the cached response (24h retention).

Required string length: 1 - 255

Path Parameters

string<uuid>

required

Fraud alert ID

Body

Respond to a pending detected fraud alert. Confirming blocks the card; declining does not.

FraudAlertRespondConfirm
FraudAlertRespondDecline

Confirm a pending detected fraud alert.

response

string

required

Confirm the alert as fraud

Allowed value: "CONFIRMED"

type

enum<string>

required

Fraud classification

Available options:

CARD_LOST,

CARD_STOLEN,

ACCOUNT_NUMBER_MISUSE,

OTHER

Example:

"CARD_LOST"

Response

Fraud alert resource

string<uuid>

required

Unique fraud alert identifier

cardId

string<uuid>

required

ID of the card this alert is for

transactionId

string<uuid>

required

ID of the card transaction this alert is for

status

enum<string>

required

Current fraud alert status

Available options:

PENDING,

CONFIRMED,

DECLINED,

EXPIRED

Example:

"PENDING"

origin

enum<string>

required

How the alert entered the system (DETECTED via fraud monitoring, or REPORTED by the partner)

Available options:

DETECTED,

REPORTED

Example:

"DETECTED"

type

enum<string> | null

required

Fraud classification. Present only when status is CONFIRMED; null for others

Available options:

CARD_LOST,

CARD_STOLEN,

ACCOUNT_NUMBER_MISUSE,

OTHER

Example:

"CARD_LOST"

detectionReason

string | null

required

Reason supplied with a detected alert, when present

cardholderMessage

string | null

required

Cardholder-facing message from the Reap or Card Network, when present. Display only - do not branch on its contents

transactionOccurredAt

string<date-time>

required

ISO 8601 timestamp of the underlying transaction (anchors the reporting window)

Pattern:

^(?:(?:\d\d[2468][048]|\d\d[13579][26]|\d\d0[48]|[02468][048]00|[13579][26]00)-02-29|\d{4}-(?:(?:0[13578]|1[02])-(?:0[1-9]|[12]\d|3[01])|(?:0[469]|11)-(?:0[1-9]|[12]\d|30)|(?:02)-(?:0[1-9]|1\d|2[0-8])))T(?:(?:[01]\d|2[0-3]):[0-5]\d(?::[0-5]\d(?:\.\d+)?)?(?:Z))$

detectedAt

string<date-time>

required

ISO 8601 timestamp when the alert was raised (anchors the response window)

Pattern:

^(?:(?:\d\d[2468][048]|\d\d[13579][26]|\d\d0[48]|[02468][048]00|[13579][26]00)-02-29|\d{4}-(?:(?:0[13578]|1[02])-(?:0[1-9]|[12]\d|3[01])|(?:0[469]|11)-(?:0[1-9]|[12]\d|30)|(?:02)-(?:0[1-9]|1\d|2[0-8])))T(?:(?:[01]\d|2[0-3]):[0-5]\d(?::[0-5]\d(?:\.\d+)?)?(?:Z))$

respondedAt

string<date-time> | null

required

ISO 8601 timestamp when the alert was confirmed or declined, if resolved that way

Pattern:

^(?:(?:\d\d[2468][048]|\d\d[13579][26]|\d\d0[48]|[02468][048]00|[13579][26]00)-02-29|\d{4}-(?:(?:0[13578]|1[02])-(?:0[1-9]|[12]\d|3[01])|(?:0[469]|11)-(?:0[1-9]|[12]\d|30)|(?:02)-(?:0[1-9]|1\d|2[0-8])))T(?:(?:[01]\d|2[0-3]):[0-5]\d(?::[0-5]\d(?:\.\d+)?)?(?:Z))$

resolvedAt

string<date-time> | null

required

ISO 8601 timestamp when the alert reached a terminal status

Pattern:

^(?:(?:\d\d[2468][048]|\d\d[13579][26]|\d\d0[48]|[02468][048]00|[13579][26]00)-02-29|\d{4}-(?:(?:0[13578]|1[02])-(?:0[1-9]|[12]\d|3[01])|(?:0[469]|11)-(?:0[1-9]|[12]\d|30)|(?:02)-(?:0[1-9]|1\d|2[0-8])))T(?:(?:[01]\d|2[0-3]):[0-5]\d(?::[0-5]\d(?:\.\d+)?)?(?:Z))$

reportableUntil

string<date-time> | null

required

ISO 8601 deadline for a report after an unanswered detected alert expired. Null unless status is EXPIRED

Pattern:

^(?:(?:\d\d[2468][048]|\d\d[13579][26]|\d\d0[48]|[02468][048]00|[13579][26]00)-02-29|\d{4}-(?:(?:0[13578]|1[02])-(?:0[1-9]|[12]\d|3[01])|(?:0[469]|11)-(?:0[1-9]|[12]\d|30)|(?:02)-(?:0[1-9]|1\d|2[0-8])))T(?:(?:[01]\d|2[0-3]):[0-5]\d(?::[0-5]\d(?:\.\d+)?)?(?:Z))$

respondableUntil

string<date-time>

required

ISO 8601 deadline for confirming or declining a detected alert

Pattern:

^(?:(?:\d\d[2468][048]|\d\d[13579][26]|\d\d0[48]|[02468][048]00|[13579][26]00)-02-29|\d{4}-(?:(?:0[13578]|1[02])-(?:0[1-9]|[12]\d|3[01])|(?:0[469]|11)-(?:0[1-9]|[12]\d|30)|(?:02)-(?:0[1-9]|1\d|2[0-8])))T(?:(?:[01]\d|2[0-3]):[0-5]\d(?::[0-5]\d(?:\.\d+)?)?(?:Z))$

createdAt

string<date-time>

required

ISO 8601 timestamp of creation

Pattern:

^(?:(?:\d\d[2468][048]|\d\d[13579][26]|\d\d0[48]|[02468][048]00|[13579][26]00)-02-29|\d{4}-(?:(?:0[13578]|1[02])-(?:0[1-9]|[12]\d|3[01])|(?:0[469]|11)-(?:0[1-9]|[12]\d|30)|(?:02)-(?:0[1-9]|1\d|2[0-8])))T(?:(?:[01]\d|2[0-3]):[0-5]\d(?::[0-5]\d(?:\.\d+)?)?(?:Z))$

updatedAt

string<date-time>

required

ISO 8601 timestamp of last update

Pattern:

^(?:(?:\d\d[2468][048]|\d\d[13579][26]|\d\d0[48]|[02468][048]00|[13579][26]00)-02-29|\d{4}-(?:(?:0[13578]|1[02])-(?:0[1-9]|[12]\d|3[01])|(?:0[469]|11)-(?:0[1-9]|[12]\d|30)|(?:02)-(?:0[1-9]|1\d|2[0-8])))T(?:(?:[01]\d|2[0-3]):[0-5]\d(?::[0-5]\d(?:\.\d+)?)?(?:Z))$

⌘I

Setup

Users

Companies

Accounts

Virtual Asset Postings

Cards

Card Shipments

Card Designs

Crypto Deposits

Card Transactions

Fraud Alerts

Activities

Policies

Simulation

Virtual Assets

Webhooks

Respond to alert

Authorizations

Headers

Path Parameters

Body

Response