Last updated: 16 July 2026 | Change log

When combined with order and transaction details, device data (IP address, Device Id, geolocation information, etc.) can be a strong indicator for fraud.

Utilizing device data with our FraudSight API is a two-step process. Step one is to collect the device data. Step two is to submit an assessment (FraudSight API) or payment (Payments API) that will use the device data for evaluation.

Described below is step one for Web (JS).

Ravelin JS library for web sites. For now, we recommend only adding the core library as per the instructions below.

You can see additional details on the Ravelin integration docs.

You must use these exact keys on the corresponding environment when initializing the SDK.

publishable_key_test_Vr7SqPVrpkvlGBPojzhsckmOriasTUBPQ1UdMw

publishable_key_live_Vr7SqPeyQpg6qS5NeD7bCvA2P3f6gfFb5kAui4

<script src="ravelin-core.min.js"></script>
<script>var ravelin = new Ravelin({key: 'publishable_key_...'})</script>

This will set the ravelinDeviceId cookie on your domain, send a page-load event, and then allow you to call:

ravelin.core.id().then(function(id) { ... }) to get the deviceId, e.g. rjs-25998f27-ed8d-4b71-a516-d3147f695f20

Do not attempt to parse or validate the format of the ID as we may change it without warning in the future.

Here is the Ravelin JS script in action. Select an environment and click generate to receive a deviceId.

Ravelin JS supports sending events to a user defined API base URL, useful for bypassing ad-blockers that rely on matching the ravelin.click domain.

Speak to your Worldpay Account Manager for help setting up a custom subdomain.

var rav = new Ravelin({key: 'publishable_key_...', api: 'https://foo.store.com'})

When sending the payment request include the deviceId in fraud.deviceData.collectionReference key:value.

"deviceData": {
  "provider": "ravelin",
  "collectionReference": "rjs-25998f27-ed8d-4b71-a516-example"
}