Risk API 1.0 extends the capabilities of Payment Risk Platform (PRP) to any financial technology companies and banks that do not use SoFi Tech Solutions as their card transaction processor to monitor suspicious card transaction behavior (debit, credit, BNPL, prepaid, etc.). To do so, you send transaction data via Risk API 1.0 along with a Risk Service ID (riskServiceID) assigned to you.
For Risk API 1.0 you use a different URL from other SoFi Tech Solutions APIs, and the status codes have a four-digit prefix (1701).
Base URL
For this API use the tenanted URL that SoFi Tech Solutions assigns you: https://risk-{corename}.{env}.gpsrv.com/endpointName, where
corenameis the name of your core, as assigned by SoFi Tech Solutions.envis the environment:cvfor client validation andpdfor production.
Authentication
Risk API 1.0 uses the same IP address whitelisting and credential approach as the Program API. You can choose to use your existing credentials or be issued new credentials for use with Risk API 1.0.
Follow the authentication steps for the Program API.
Connectivity
Risk API 1.0 does not have a dedicated connectivity endpoint. Basic credential validation and connectivity can be validated by calling the Get Card Transaction Fraud endpoint and receiving a successful response.
Endpoint responses
Risk API 1.0 requests and responses are conventional and are similar to Program API. Requests are made with form-encoded parameters in HTTP posts. Responses are available as JSON messages with snake_case field names.