---
title: "Suspicious Activity Flags (Legacy)"
method: GET
path: "/v1/book/{book_uuid}/suspicious-activity-flags"
tags: ["Detect"]
---

# Suspicious Activity Flags (Legacy)

`GET /v1/book/{book_uuid}/suspicious-activity-flags`

Retrieve a report on possible instances of file tampering on any of the given <<glossary:Book>>'s bank statements, W-2s, and pay stubs.

---

> 🚧 We have a better version!
> This product is superseded by our new Detect offering, which we recommend for all new work. A deprecation plan will be announced in the future.

## Path parameters

- `book_uuid` string, uuid, required

## Response `200`

Success

- SuspiciousActivityFlagsSuccessfulResponse
  - `status` integer — A numerical code that indicates the status of the request.
  - `response` object — An object received from the server that potentially contains data.
    - `book_uuid` string — Unique identifier of the <<glossary:Book>>.
    - `suspicious_activity_results` object[] — Details of the detected suspicious activities.
      - `form_uuid` string — Unique identifier of the form.
      - `form_type` object
        - `name` string — Name of the form type.
      - `account_type` string — Type of account associated with the form.
      - `flags` object[] — Details of the individual suspicious activities flags.
        - `suspicious_activity_detected` boolean — Whether suspicious activity was detected.
        - `reason` string — Reason for the suspicious activity detection.
        - `suspicious_activity_location` object
          - `upload_origin` string — Origin of the upload.
          - `doc_uuid` string — Unique identifier for the document.
          - `suspicious_activity_page_indexes` integer[]
  - `message` string — A textual description that indicates details about this response's status.

## Other responses

- `400` — Client Errors

---

[API](https://skmtc.net/ocrolus/apis/user-management.md) · [All operations](https://skmtc.net/ocrolus/apis/user-management/llms.txt) · [OpenAPI document](https://skmtc-service-staging.skmtc.workers.dev/v1/apis/ocrolus/user-management/revisions/3571ef602d13/schema)