---
title: "Flag or clear fraud status for a user"
method: POST
path: "/v3/users/{user_id}/report_fraud"
tags: ["Users"]
---

# Flag or clear fraud status for a user

`POST /v3/users/{user_id}/report_fraud`

Records a fraud report (or fraud-clearance) for a previously enrolled
user.

Use `is_fraud: true` to flag a user as fraudulent, or `is_fraud: false`
to clear a previous flag. Flagging propagates the user's face, device,
and biometric clusters to the relevant block lists so that subsequent
verifications matching them are rejected. Clearing the flag reverses
these effects.

The response is `202 Accepted` once the request has been validated
and handled.

## Path parameters

- `user_id` string, required

## Response `202`

Fraud report accepted and queued for processing.

- ReportUserFraudAcceptedResponse
  - `status` 'accepted', required — Always `accepted` when the request was queued for processing.
  - `message` string — Human-readable result message.
  - `user_id` string, required — The `user_id` that was reported.

## Other responses

- `400` — Validation error. Possible causes: - `user_id` path parameter is missing. - `is_fraud` is missing or not a boolean. - `reason` is missing when `is_fraud` is `true`, or is not one of the allowed values. - `notes` is missing when `is_fraud` is `false` or `reason` is `OTHER`. - `notes` exceeds 500 characters. - `reported_by` is missing or is not a valid email address.
- `401` — Authentication failed (invalid or missing token).
- `403` — Access denied. Possible causes: - IP address is on the blocklist. - IP not in partner's allowlist.
- `404` — No enrollee found for the given `user_id` and partner.
- `415` — Wrong or missing `Content-Type` header. The request body must be sent as `multipart/form-data`.
- `500` — Unexpected server error.

---

[API](https://skmtc.net/smileidentity/apis/v3-authentication-token-api.md) · [All operations](https://skmtc.net/smileidentity/apis/v3-authentication-token-api/llms.txt) · [OpenAPI document](https://skmtc-service-staging.skmtc.workers.dev/v1/apis/smileidentity/v3-authentication-token-api/revisions/9f178647f9b8/schema)