---
title: "Get Card Transaction Fraud"
method: POST
path: "/prp/1.0/getCardTransactionFraud"
tags: ["Risk"]
---

# Get Card Transaction Fraud

`POST /prp/1.0/getCardTransactionFraud`

Use the Get Card Transaction Fraud endpoint to evaluate the risk associated with specific card transactions and understand if a transaction is fraudulent, then take appropriate action based on predefined criteria. This endpoint provides detailed fraud detection insights, including rules triggered, actions taken, and supplementary fraud prevention decisions. 


See <a href="doc:about-payment-risk-platform" target="_blank">About the Payment Risk Platform</a> for more details.

## Response `default`

- object
  - `status_code` integer, required — The response status code. May return a string for some statuses.
  - `status` string, required — The condition of a process or response
  - `errors` string[] — A list of errors generated while the request was processed
  - `rtoken` string, nullable — A system-generated ID used for tracking
  - `processing_time` number, nullable — The time elapsed in processing the request
  - `echo` object, nullable — A structure that contains transaction ID information
    - `transaction_id` string — An ID that represents an API transaction
    - `provider_timestamp` string, date-time — Store a related timestamp for reporting and troubleshooting purposes
    - `provider_transaction_id` string — Secondary transaction identifier (generated by a provider)
  - `system_timestamp` string, date-time, nullable — A system generated timestamp
  - `response_data` object — A structure for the response data. It can be empty but usually will contain information.
    - `person_uuid` string, required — System-generated UUID of the account holder associated with the transaction event
    - `success_msg` object, required — Details about the transaction event
      - `subtenant_data` object, nullable — Consists of multiple components provide details on PRP's performance and your fraud policy: - `features`&mdash; Contains data for specific features that you choose to return as a record of specific transaction metrics, utilized in your fraud rule policy and to measure your cardholder behavior. For each feature returned, you receive the feature name in `feature_name`, the feature value in `feature_value`, and data type in `feature_type`. - `rule_execution`&mdash; Contains all rules triggered within your fraud policy and the associated data that is configured in PRP for that rule. Includes `rule_id`, `rule_name`, `rule_action`, and other helpful information. - `supplementary_action`&mdash; Contains data on additional actions, excluding the primary action of running fraud rules. For example, sending the transaction to the review queue (`action = REVIEW QUEUE`).
      - `event_id` string, nullable — Unique identifier of the transaction event
      - `galileo_data` object, required — A structure that contains transaction information from PRP
        - `reject` boolean, required — Whether a transaction is recommended to be rejected by PRP. Returns `true` if rejected.
        - `freeze` boolean, required — Whether the account was frozen. Returns `true` if frozen.
        - `notes` string[] — Notes provided associated with the fraud rules of a transaction event
        - `rules_denied` string[] — Specifies fraud rules concerning the transaction event that triggered a denied message
        - `rules_warned` string[] — Specifies fraud rules concerning the transaction event that triggered a denied message
        - `actions` object[] — List of PRP specific data
          - `fn_name` string, required — Name of the rule from PRP
          - `fn_result` string, required — Result of the results of the rule from PRP
          - `fn_note` string — Description of risky acitivity associated with the rule trigger from PRP
          - `freeze` boolean, required — Whether the fraud rule that was triggered contains a freeze flag. Returns `true` if the freeze flag is triggered.
    - `card_uuid` string, nullable — System-generated UUID that identifies the card of the account holder
    - `account_uuid` string, nullable — System-generated UUID that identifies the account of the account holder

---

[API](https://skmtc.net/galileo-ft/apis/program-api.md) · [All operations](https://skmtc.net/galileo-ft/apis/program-api/llms.txt) · [OpenAPI document](https://skmtc-service-staging.skmtc.workers.dev/v1/apis/galileo-ft/program-api/versions/bcd728f97a18/schema)