**Last updated**: 16 July 2026 | [**Change log**](/products/fraudsight/changelog/) # Fraud assessment `POST` your request to the `fraudsight:assess` action link. ## Assessment example request POST `https://try.access.worldpay.com/fraudsight/assessment` Risk assessment request body: Card ```shell curl curl -i -X POST \ https://try.access.worldpay.com/fraudsight/assessment \ -H 'Accept: application/vnd.worldpay.fraudsight-v1.hal+json' \ -H 'Content-Type: application/vnd.worldpay.fraudsight-v1.hal+json' \ -d '{ "transactionReference": "Memory265-13/08/1876", "merchant": { "entity": "default" }, "instruction": { "paymentInstrument": { "type": "card/front", "cardHolderName": "Sherlock Holmes", "cardNumber": "4444333322221111", "cardExpiryDate": { "month": 5, "year": 2035 }, "billingAddress": { "address1": "221B Baker Street", "address2": "Marylebone", "address3": "Westminster", "postalCode": "NW1 6XE", "city": "London", "state": "Greater London", "countryCode": "GB" } }, "value": { "currency": "GBP", "amount": 250 } }, "deviceData": { "provider": { "name": "ravelin", "collectionReference": "rjs-25998f27-ed8d-4b71-a516-d3147f695f20" }, "ipAddress": "192.0.0.0" }, "riskData": { "account": { "email": "sherlock.holmes@example.com", "dateOfBirth": "1854-01-06", "shopperId": "id123" }, "transaction": { "firstName": "Sherlock", "lastName": "Holmes", "phoneNumber": "02031234321" }, "shipping": { "firstName": "James", "lastName": "Moriarty", "address": { "address1": "The Palatine Centre", "address2": "Durham University", "address3": "Stockton Road", "postalCode": "DH1 3LE", "city": "Durham", "state": "County Durham", "countryCode": "GB", "phoneNumber": "01911234321" } }, "custom": { "number1": 1, "number2": 2, "number3": 3, "number4": 4, "number5": 5, "number6": 6, "number7": 7, "number8": 8, "number9": 9, "string1": "text1", "string2": "text2", "string3": "text3", "string4": "text4", "string5": "text5", "string6": "text6", "string7": "text7", "string8": "text8", "string9": "text9" } } }' ``` Token ```shell curl curl -i -X POST \ https://try.access.worldpay.com/fraudsight/assessment \ -H 'Accept: application/vnd.worldpay.fraudsight-v1.hal+json' \ -H 'Content-Type: application/vnd.worldpay.fraudsight-v1.hal+json' \ -d '{ "transactionReference": "Memory265-13/08/1876", "merchant": { "entity": "default" }, "instruction": { "paymentInstrument": { "type": "card/tokenized", "href": "https://try.access.worldpay.com/tokens/MTIzNDU2Nzg5MDEyMzQ1Ng" }, "value": { "currency": "GBP", "amount": 250 } }, "deviceData": { "provider": { "name": "ravelin", "collectionReference": "rjs-25998f27-ed8d-4b71-a516-d3147f695f20" }, "ipAddress": "192.0.0.0" }, "riskData": { "account": { "email": "sherlock.holmes@example.com", "dateOfBirth": "1854-01-06", "shopperId": "id123" }, "transaction": { "firstName": "Sherlock", "lastName": "Holmes", "phoneNumber": "02031234321" }, "shipping": { "firstName": "James", "lastName": "Moriarty", "address": { "address1": "The Palatine Centre", "address2": "Durham University", "address3": "Stockton Road", "postalCode": "DH1 3LE", "city": "Durham", "state": "County Durham", "countryCode": "GB", "phoneNumber": "01911234321" } }, "custom": { "number1": 1, "number2": 2, "number3": 3, "number4": 4, "number5": 5, "number6": 6, "number7": 7, "number8": 8, "number9": 9, "string1": "text1", "string2": "text2", "string3": "text3", "string4": "text4", "string5": "text5", "string6": "text6", "string7": "text7", "string8": "text8", "string9": "text9" } } }' ``` Network token ```shell curl curl -i -X POST \ https://try.access.worldpay.com/fraudsight/assessment \ -H 'Accept: application/vnd.worldpay.fraudsight-v1.hal+json' \ -H 'Content-Type: application/vnd.worldpay.fraudsight-v1.hal+json' \ -d '{ "transactionReference": "Memory265-13/08/1876", "merchant": { "entity": "default" }, "instruction": { "paymentInstrument": { "type": "card/networkToken", "tokenNumber": "4444333322221111", "cardExpiryDate": { "month": 5, "year": 2035 }, "billingAddress": { "address1": "221B Baker Street", "address2": "Marylebone", "address3": "Westminster", "postalCode": "NW1 6XE", "city": "London", "state": "Greater London", "countryCode": "GB" } }, "value": { "currency": "GBP", "amount": 250 } }, "deviceData": { "provider": { "name": "ravelin", "collectionReference": "rjs-25998f27-ed8d-4b71-a516-d3147f695f20" }, "ipAddress": "192.0.0.0" }, "riskData": { "account": { "email": "sherlock.holmes@example.com", "dateOfBirth": "1854-01-06", "shopperId": "id123" }, "transaction": { "firstName": "Sherlock", "lastName": "Holmes", "phoneNumber": "02031234321" }, "shipping": { "firstName": "James", "lastName": "Moriarty", "address": { "address1": "The Palatine Centre", "address2": "Durham University", "address3": "Stockton Road", "postalCode": "DH1 3LE", "city": "Durham", "state": "County Durham", "countryCode": "GB", "phoneNumber": "01911234321" } }, "custom": { "number1": 1, "number2": 2, "number3": 3, "number4": 4, "number5": 5, "number6": 6, "number7": 7, "number8": 8, "number9": 9, "string1": "text1", "string2": "text2", "string3": "text3", "string4": "text4", "string5": "text5", "string6": "text6", "string7": "text7", "string8": "text8", "string9": "text9" } } }' ``` Card (masked) ```shell curl curl -i -X POST \ https://try.access.worldpay.com/fraudsight/assessment \ -H 'Accept: application/vnd.worldpay.fraudsight-v1.hal+json' \ -H 'Content-Type: application/vnd.worldpay.fraudsight-v1.hal+json' \ -d '{ "transactionReference": "Memory265-13/08/1876", "merchant": { "entity": "default" }, "instruction": { "paymentInstrument": { "type": "card/plain+masked", "cardBin": "444411", "lastFour": "4321", "reference": "bf94b2ca-ecce-4e6f-bb38-a77dd8a21156", "cardExpiryDate": { "month": 5, "year": 2035 }, "billingAddress": { "address1": "221B Baker Street", "address2": "Marylebone", "address3": "Westminster", "postalCode": "NW1 6XE", "city": "London", "state": "Greater London", "countryCode": "GB" } }, "value": { "currency": "GBP", "amount": 250 } }, "deviceData": { "provider": { "name": "ravelin", "collectionReference": "rjs-25998f27-ed8d-4b71-a516-d3147f695f20" }, "ipAddress": "192.0.0.0" }, "riskData": { "account": { "email": "sherlock.holmes@example.com", "dateOfBirth": "1854-01-06", "shopperId": "id123" }, "transaction": { "firstName": "Sherlock", "lastName": "Holmes", "phoneNumber": "02031234321" }, "shipping": { "firstName": "James", "lastName": "Moriarty", "address": { "address1": "The Palatine Centre", "address2": "Durham University", "address3": "Stockton Road", "postalCode": "DH1 3LE", "city": "Durham", "state": "County Durham", "countryCode": "GB", "phoneNumber": "01911234321" } }, "custom": { "number1": 1, "number2": 2, "number3": 3, "number4": 4, "number5": 5, "number6": 6, "number7": 7, "number8": 8, "number9": 9, "string1": "text1", "string2": "text2", "string3": "text3", "string4": "text4", "string5": "text5", "string6": "text6", "string7": "text7", "string8": "text8", "string9": "text9" } } }' ``` Card + SCA Exemption request ```shell curl curl -i -X POST \ https://try.access.worldpay.com/fraudsight/assessment \ -H 'Accept: application/vnd.worldpay.fraudsight-v1.hal+json' \ -H 'Content-Type: application/vnd.worldpay.fraudsight-v1.hal+json' \ -d '{ "transactionReference": "Memory265-13/08/1876", "merchant": { "entity": "default" }, "exemption": { "capability": "authorizationAndAuthentication", "request": { "placement": "authorization", "type": "lowValue" } }, "instruction": { "paymentInstrument": { "type": "card/front", "cardHolderName": "Sherlock Holmes", "cardNumber": "4444333322221111", "cardExpiryDate": { "month": 5, "year": 2035 }, "billingAddress": { "address1": "221B Baker Street", "address2": "Marylebone", "address3": "Westminster", "postalCode": "NW1 6XE", "city": "London", "state": "Greater London", "countryCode": "GB" } }, "value": { "currency": "GBP", "amount": 250 } }, "deviceData": { "provider": { "name": "ravelin", "collectionReference": "rjs-25998f27-ed8d-4b71-a516-d3147f695f20" }, "ipAddress": "192.0.0.0" }, "riskData": { "account": { "email": "sherlock.holmes@example.com", "dateOfBirth": "1990-09-09", "shopperId": "id123" }, "transaction": { "firstName": "Sherlock", "lastName": "Holmes", "phoneNumber": "00000000000000" }, "shipping": { "firstName": "James", "lastName": "Moriarty", "address": { "address1": "The Palatine Centre", "address2": "Durham University", "address3": "Stockton Road", "postalCode": "DH1 3LE", "city": "Durham", "state": "County Durham", "countryCode": "GB", "phoneNumber": "01911234321" } }, "custom": { "number1": 1, "number2": 2, "number3": 3, "number4": 4, "number5": 5, "number6": 6, "number7": 7, "number8": 8, "number9": 9, "string1": "text1", "string2": "text2", "string3": "text3", "string4": "text4", "string5": "text5", "string6": "text6", "string7": "text7", "string8": "text8", "string9": "text9" } } }' ``` View the full API request schema ## Assessment responses The response contains the outcome of your `assessment` request. Linking the payment You must apply the `riskProfile` from the FraudSight assessment response in the [Card Payments API](/products/card-payments/authorize-a-payment#fraudsight) to link the Worldpay payment. This allows the data model mature and identify fraudulent transactions. Alternatively make additional [FraudSight update](/products/fraudsight/update) requests. See [linking the FraudSight assessment](/products/fraudsight/assessment#linking-the-fraudsight-assessment) for details. Note: * When manually created risk assessment rules are triggered, the `score` is ignored. It is therefore possible to see an assessment with a low score but still with a `highRisk` outcome. * The `outcome` is always specific to the fraud assessment. If an exemption is provided the `exemption.type` and `exemption.placement` is included in the response. * We return a `WP-CorrelationId` in the headers of service responses. We **highly recommend** you log this. We can use the `WP-CorrelationId` to examine individual service requests. lowRisk ```json { "outcome": "lowRisk", "transactionReference": "123456", "score": 44.2, "riskProfile": { "href": "https://access.worldpay.com/riskprofile/eyJrIjoxLCJkIjoialRBL0FFelBzcnZ" } } ``` highRisk ```json { "outcome": "highRisk", "transactionReference": "123456", "reason": [ "Recent unexpected card activity" ], "score": 97.4, "riskProfile": { "href": "https://access.worldpay.com/riskprofile/eyJrIjoxLCJkIjoialRBL0FFelBzcnZ" } } ``` review ```json { "outcome": "review", "transactionReference": "123456", "reason": [ "Recent unexpected card activity" ], "score": 85.5, "riskProfile": { "href": "https://access.worldpay.com/riskprofile/eyJrIjoxLCJkIjoialRBL0FFelBzcnZ" } } ``` If the `exemption` object is used in the request: lowRisk + exemption(authorization/lowValue) ```json { "outcome": "lowRisk", "transactionReference": "123456", "score": 44.2, "exemption": { "placement": "authorization", "type": "lowValue" }, "riskProfile": { "href": "https://access.worldpay.com/riskprofile/eyJrIjoxLCJkIjoialRBL0FFelBzcnZ" } } ``` lowRisk + exemption(authorization/lowRisk) ```json { "outcome": "lowRisk", "transactionReference": "123456", "score": 44.2, "exemption": { "placement": "authorization", "type": "lowRisk" }, "riskProfile": { "href": "https://access.worldpay.com/riskprofile/eyJrIjoxLCJkIjoialRBL0FFelBzcnZ" } } ``` lowRisk + exemption(authentication/lowRisk) ```json { "outcome": "lowRisk", "transactionReference": "123456", "score": 44.2, "exemption": { "placement": "authentication", "type": "lowRisk" }, "riskProfile": { "href": "https://access.worldpay.com/riskprofile/eyJrIjoxLCJkIjoialRBL0FFelBzcnZ" } } ``` highRisk + exemption ```json { "outcome": "highRisk", "transactionReference": "123456", "reason": [ "Recent unexpected card activity" ], "score": 97.4, "exemption": { "placement": "authorization", "type": "lowValue" }, "riskProfile": { "href": "https://access.worldpay.com/riskprofile/eyJrIjoxLCJkIjoialRBL0FFelBzcnZ" } } ``` review + exemption ```json { "outcome": "review", "transactionReference": "123456", "reason": [ "Recent unexpected card activity" ], "score": 85.5, "exemption": { "placement": "authorization", "type": "lowValue" }, "riskProfile": { "href": "https://access.worldpay.com/riskprofile/eyJrIjoxLCJkIjoialRBL0FFelBzcnZ" } } ``` View the full API response schema ## Linking the FraudSight assessment To improve future risk assessments we need to know the outcome of the payment authorization. - If you are using our [Card Payments API](/products/card-payments/), apply the `riskProfile` provided in the [payment authorization](/products/card-payments/authorize-a-payment#fraudsight) request. - If you are using another payment provider use the [FraudSight update](/products/fraudsight/update) resources. ## Applying the exemption (if applicable) This is only a consideration if you're using the `exemption` object in the request: #### If the placement is `authorization` * apply the `riskProfile` in the [payment authorization](/products/card-payments/authorize-a-payment#fraudsight) request In the event that the exemption is not successful (honoured + authorized) when applied to the payment, the issuer responds with a soft decline ([refusal code 65](/products/reference/refusal-response)). The next logical step is to proceed with [3DS authentication](/products/3ds). #### If the placement is `authentication` * set the `challenge.preference` in the [3DS authentication](/products/3ds/web/authentication) to `noChallengeRequestedTRAPerformed` * apply the `riskProfile` in the [payment authorization](/products/card-payments/authorize-a-payment#fraudsight) request #### If no exemption is provided * perform [3DS authentication](/products/3ds) * apply the `riskProfile` in the [payment authorization](/products/card-payments/authorize-a-payment#fraudsight) request. Without this, the data model will not improve over time **Next steps** [FraudSight testing](/products/fraudsight/testing)