Transaction Alert Webhook
Transaction Alert Webhook delivers a transaction.flagged callback to the HTTPS endpoint you register. Every request carries an HMAC SHA-256 signature over the raw body in the X-Signature header; verify it against your shared secret before trusting the payload, and compare timestamps to reject replays. Respond 2xx within ten seconds. Non-2xx responses and timeouts are retried five times over 24 hours with exponential backoff and jitter, after which the delivery is marked failed and surfaced in the portal.
- Service type
- Outbound Webhook
Events
transaction.flagged
Transaction Alert Webhook AsyncAPI 2.6.0 · v1.0.0
Outbound webhook delivering a signed callback whenever a transaction is flagged by fraud screening.
-
subscriberhttps://your-endpoint.example.com/hooks/transaction-alert https
transaction.flagged
Delivered when fraud screening flags a transaction for review. Respond 2xx within ten seconds. Non-2xx and timeouts are retried five times over 24 hours with exponential backoff and jitter.
- subscribe
-
Receive a transaction.flagged callback.
TransactionFlagged
| Field | Type | Required | Description |
|---|---|---|---|
eventId |
string (uuid) |
yes | |
eventType |
string |
yes | |
transactionId |
string |
yes | |
reason |
string |
no | Rule or model that raised the alert. |
riskScore |
integer |
no | |
raisedAt |
string (date-time) |
yes |
{
"eventId": "00000000-0000-0000-0000-000000000000",
"eventType": "string",
"transactionId": "string",
"reason": "string",
"riskScore": 0,
"raisedAt": "2026-01-01T00:00:00Z"
}Inline message schema
{
"type": "object",
"properties": {
"eventId": { "type": "string", "format": "uuid" },
"eventType": { "type": "string", "const": "transaction.flagged" },
"transactionId": { "type": "string" },
"reason": { "type": "string" },
"riskScore": { "type": "integer", "minimum": 0, "maximum": 100 },
"raisedAt": { "type": "string", "format": "date-time" }
},
"required": ["eventId", "eventType", "transactionId", "raisedAt"]
}{
"eventId": "00000000-0000-0000-0000-000000000000",
"eventType": "string",
"transactionId": "string",
"reason": "string",
"riskScore": 0,
"raisedAt": "2026-01-01T00:00:00Z"
}- Payload security
- HMAC signature
- Retry policy
- 5 attempts over 24 hours, exponential backoff with jitter