# Fraud alert received

Webhook sent when a fraud alert is received for a payment.

Endpoint: POST FraudAlertReceived
Version: 2.0.0
Security: signatureAuth

## Request fields (application/json):

  - `event_id` (string, required)
    Unique event identifier.
    Example: "2c871666-c3a4-4a4e-89a8-fc8956e95731"

  - `event_type` (string, required)
    Event type.
    Enum: "FRAUD_ALERT_RECEIVED"

  - `occurred_at` (string, required)
    Date and time when the event occurred.
    Example: "2026-06-22T10:00:00.000000Z"

  - `data` (object, required)
    Event payload containing the reported fraud alert.

  - `data.fraud_alert` (object, required)
    Represents a fraud alert reported for a payment.

  - `data.fraud_alert.id` (string, required)
    Unique fraud alert identifier.
    Example: "fral_01KMG2ABYPF6XS5DMJQ817C429"

  - `data.fraud_alert.merchant_order_id` (string, required)
    Merchant order identifier of the payment associated with the fraud alert.
    Example: "019ef938-06fb-769f-90a9-e61fafcc75a4"

  - `data.fraud_alert.card_scheme` (string)
    Card scheme of the disputed payment. Included when the provider supplies it.
    Example: "VISA"

  - `data.fraud_alert.reason_code` (string, required)
    Fraud reason code reported by the card scheme.
    Example: "9"

  - `data.fraud_alert.amount` (integer, required)
    Fraud alert amount in the minor currency unit.
    Example: 4990

  - `data.fraud_alert.currency` (string, required)
    Three-letter ISO-4217 currency code.
    Example: "USD"

  - `data.fraud_alert.reported_at` (string, required)
    Date and time when the fraud was reported.
    Example: "2026-06-20T00:00:00.000000Z"

  - `data.fraud_alert.created_at` (string, required)
    Date and time when the fraud alert was created.
    Example: "2026-06-21T08:30:00.000000Z"