Risk Request

post

https://4f1f4a08-8aba-4366-bbcc-001af05920ab.mock.pstmn.io/risk

Risk-based authentication requests are sent by VCAS to the partner. The partner receives the request and responds with Success, Failure or Stepup.

Recent Requests

Time	Status	User Agent
Retrieving recent requests…

Loading…

Body Params

Risk Request Object

ProcessorId

string

required

Defaults to 5723ae630063ac1a9c3ab079

VCAS provided identifier for the partner. Max. 24 characters.

IssuerId

string

required

Defaults to 5723ae630063ac1a9c3ab080

VCAS provided identifier for the partner. Max. 24 characters.

TransactionId

string

required

Defaults to 00ec043e-40b5-4ce4-95c2-9e83b644f412

VCAS generated transaction reference id. Max. 36 characters. GUID format.

DSTransactionId

string

Defaults to 521fa021-4791-4579-a3e9-76de87c219c0

Directory Server (DS) generated transaction reference id. GUID format.

MerchantChallengeIndicator

string

enum

Indicates whether a challenge is requested from the merchant. Note: Please allow for future values in this field. EMV has reserved up to 99 values for future use.

3RIIndicator

string

enum

Indicates the type of 3RI request for EMV transactions. Note: Please allow for future values in this field. EMV has reserved up to 99 values for future use.

NonPaymentAuthenticationIndicator

string

enum

Defaults to Payment Transaction

Indicates the type of Non-Payment Authentication.

Allowed:

MessageVersion

string

required

Defaults to 2.2.0

Version of the message based on 3DS spec. Examples - 2.2.0, 2.2.0

RDXMessageVersion

string

Defaults to 2.2.4

Version of the RDX protocol being used. This will be used to enable new features without breaking current integrations. Example: 2.2.4

MessageCategory

string

Defaults to 01

Identifies the category of the message for a specific use case; 01=PA, 02=NPA

RiskScore

string

Risk score of the transaction as determined by VCAS. Max. 2 characters.

RuleOutcome

string

enum

Defaults to Success

If the transaction is configured to evaluate risk rules, this will be the outcome of that evaluation.

Allowed:

ExemptionInfo

object

Object containing information related to EMV exemptions as related to the EEA PSD2 regulations.

MerchantAuthInfo

object

Object containing information related to any Merchant Authentication information on EMV requests.

MerchantInfo

object

required

TransactionInfo

object

required

ExtensionData

object

Responses

405

Invalid input

200Successful Risk Response