Webhook event

Card Fraud Alert Created

POSTCARD_FRAUD_ALERT_CREATED

Fired when a fraud alert is created for a card transaction (detected by fraud monitoring, or reported by the partner). Detected alerts must be confirmed or declined within the response window. Card blocks are delivered separately via CARD_STATUS_UPDATED.

Body

application/json

idstringrequired

Unique event identifier for idempotency

typestringrequired

Webhook event type

Available options:CARD_FRAUD_ALERT_CREATED

dataobjectrequired

Show child attributes

idstring<uuid>required

Unique fraud alert identifier

cardIdstring<uuid>required

ID of the card this alert is for

transactionIdstring<uuid>required

ID of the card transaction this alert is for

statusstringrequired

Current fraud alert status

Available options:PENDINGCONFIRMEDDECLINEDEXPIRED

originstringrequired

How the alert entered the system (DETECTED via fraud monitoring, or REPORTED by the partner)

Available options:DETECTEDREPORTED

typestring | nullrequired

Fraud classification. Present only when status is CONFIRMED; null for others

Available options:CARD_LOSTCARD_STOLENACCOUNT_NUMBER_MISUSEOTHER

detectionReasonstring | nullrequired

Reason supplied with a detected alert, when present

cardholderMessagestring | nullrequired

Cardholder-facing message from the First Leeward or Card Network, when present. Display only - do not branch on its contents

transactionOccurredAtstring<date-time>required

ISO 8601 timestamp of the underlying transaction (anchors the reporting window)

detectedAtstring<date-time>required

ISO 8601 timestamp when the alert was raised (anchors the response window)

respondedAtstring<date-time> | nullrequired

ISO 8601 timestamp when the alert was confirmed or declined, if resolved that way

resolvedAtstring<date-time> | nullrequired

ISO 8601 timestamp when the alert reached a terminal status

reportableUntilstring<date-time> | nullrequired

ISO 8601 deadline for a report after an unanswered detected alert expired. Null unless status is EXPIRED

respondableUntilstring<date-time>required

ISO 8601 deadline for confirming or declining a detected alert

createdAtstring<date-time>required

ISO 8601 timestamp of creation

updatedAtstring<date-time>required

ISO 8601 timestamp of last update

Response

200Webhook received successfully. Return any 2xx status to acknowledge.