  1. [    Home ](/)
2. [Integrations](/integrations)
3. Transaction Alert Webhook
 
  Outbound Webhook  

# Transaction Alert Webhook

 

  Overview  Events 2   Messages 2  Connection 

 Transaction Alert Webhook delivers a transaction.flagged callback to the HTTPS endpoint you register. Every request carries an HMAC SHA-256 signature over the raw body in the X-Signature header; verify it against your shared secret before trusting the payload, and compare timestamps to reject replays. Respond 2xx within ten seconds. Non-2xx responses and timeouts are retried five times over 24 hours with exponential backoff and jitter, after which the delivery is marked failed and surfaced in the portal.



 

  Service type Outbound Webhook 

   ### Events

 `transaction.flagged` 

###  Transaction Alert Webhook AsyncAPI 2.6.0 · v1.0.0 

Outbound webhook delivering a signed callback whenever a transaction is flagged by fraud screening.

- `subscriber` https://your-endpoint.example.com/hooks/transaction-alert https
 
   transaction.flagged Delivered when fraud screening flags a transaction for review. Respond 2xx within ten seconds. Non-2xx and timeouts are retried five times over 24 hours with exponential backoff and jitter.

  subscribe  Receive a transaction.flagged callback. `TransactionFlagged`  

  

  

   message TransactionFlagged application/json 

   FieldTypeRequiredDescription    `eventId` `string (uuid)` yes    `eventType` `string` yes    `transactionId` `string` yes    `reason` `string` no Rule or model that raised the alert.   `riskScore` `integer` no    `raisedAt` `string (date-time)` yes     Sample payload Example message — placeholder values 

 ```
{
    "eventId": "00000000-0000-0000-0000-000000000000",
    "eventType": "string",
    "transactionId": "string",
    "reason": "string",
    "riskScore": 0,
    "raisedAt": "2026-01-01T00:00:00Z"
}
```

 

 

### Inline message schema

 ```
{
  "type": "object",
  "properties": {
    "eventId": { "type": "string", "format": "uuid" },
    "eventType": { "type": "string", "const": "transaction.flagged" },
    "transactionId": { "type": "string" },
    "reason": { "type": "string" },
    "riskScore": { "type": "integer", "minimum": 0, "maximum": 100 },
    "raisedAt": { "type": "string", "format": "date-time" }
  },
  "required": ["eventId", "eventType", "transactionId", "raisedAt"]
}
```

 Sample payload Example message — placeholder values 

 ```
{
    "eventId": "00000000-0000-0000-0000-000000000000",
    "eventType": "string",
    "transactionId": "string",
    "reason": "string",
    "riskScore": 0,
    "raisedAt": "2026-01-01T00:00:00Z"
}
```

 

   Payload securityHMAC signature

Retry policy5 attempts over 24 hours, exponential backoff with jitter

 ### Specification files

- [ YAML transaction-alert-webhook.asyncapi.yaml ](/sites/default/files/service-specs/transaction-alert-webhook.asyncapi.yaml)