FraudSight (v1)
Request a risk assessment and prevent fraud with this standalone API.
Authentication header
Authorization: {your_credentials}Replace {your_credentials} with your base64-encoded Basic Auth username and password given to you by your Worldpay Implementation Manager.
You must use the Authorization header for any request you send to our FraudSight API.
Accept and Content-Type headers
Content-Type: application/vnd.worldpay.fraudsight-v1.hal+json
Accept: application/vnd.worldpay.fraudsight-v1.hal+jsonWe use the Accept header to identify which version of our API you are using. You must use the Accept header for any request you send to our FraudSight API.
We require the Content-Type header if the request you're sending includes a request body, and if the HTTP method is a POST or a PUT.
DNS whitelisting
Whitelist the following URLs:
https://try.access.worldpay.com/https://access.worldpay.com/
Please ensure you use DNS whitelisting, not explicit IP whitelisting. When you make a request within Access Worldpay, you should always cache the response returned.
You must apply the riskProfile from the FraudSight assessment response in the Card Payments API to link the Worldpay payment. This allows the data model to mature and identify fraudulent transactions. Alternatively make additional FraudSight update requests.
See linking the FraudSight assessment for details.