Get fraud settings
Returns the fraud screening rules: the score threshold, payment counts per shopper and blocked countries. Settings are kept per mode: a test token works on the test settings, a live token on the live ones. Only Comecero staff tokens may call it. Secret and trusted tokens get 403; ask support to change these rules.
AuthorizationBearer <token>A secret, trusted or limited token. See Authentication.
show?stringComma-separated fields to return; all others are left out. Use dot notation for child fields (customer.email). You cannot send show and hide together (400). See Customizing output.
hide?stringComma-separated fields to leave out of the response. Use dot notation for child fields (customer.email). You cannot send show and hide together (400). See Customizing output.
formatted?booleanWhen true, the object also has a formatted child with amounts and dates as display text in the shopper's language and currency (for example $19.99 or November 7, 2026). The default is false. See Localized formatting.
falseThe fraud settings.
application/json- response
The fraud screening rules of the account in the current mode. A field that is null uses the platform default.
object?"settings_fraud"The object type. Always settings_fraud.
"settings_fraud"url?stringThe URL of this object.
uriaccount_id?stringThe ID of the account the settings belong to.
test?booleanTrue for the test mode settings, false for live.
date_created?stringWhen the settings were created.
date-timedate_modified?stringWhen the settings were last changed.
date-timeenable_fraud_screening?|Whether payments are scored for fraud before they are sent to the gateway.
max_score?|Payments that score at or above this value are blocked. From 0 up to (not including) 1. 0 turns score checks off. null uses the platform default.
0 <= value < 1max_successful_payments?|The most successful payments one shopper may make in 24 hours. Further payments are refused. null uses the platform default.
max_failed_payments?|The most failed payments one shopper may have in 24 hours. After that, no more payments are accepted. null uses the platform default.
block_ip_country_mismatch?|Block a payment when the shopper's IP country differs from the billing country.
blocked_countries?array<string>|Two-letter ISO country codes to refuse payments from. null uses the platform list. An empty list blocks no countries.
step_up_enabled?|When on, a payment that scores between max_score and step_up_max_score is sent with a 3-D Secure challenge instead of being blocked. Set by Comecero only.
step_up_max_score?|With step_up_enabled, the score from which a payment is blocked instead of challenged. Set by Comecero only.
formatted?Display text for the dates. Returned only when formatted=true.
curl -X GET 'https://api.comecero.com/api/v1/settings/fraud'{ "object": "settings_fraud", "url": "https://api.comecero.com/api/v1/settings/fraud", "account_id": "AB1234", "test": true, "date_created": "2026-01-12T09:30:00Z", "date_modified": "2026-10-02T14:21:07Z", "enable_fraud_screening": true, "max_score": 0.6, "max_successful_payments": 5, "max_failed_payments": 3, "block_ip_country_mismatch": false, "blocked_countries": null, "step_up_enabled": null, "step_up_max_score": null}Update analytics settings POST
Changes the tracking settings. Send only the fields you want to change. The tracking scripts are rebuilt at once, so the change shows on the next page load. Settings are kept per mode: a test token works on the test settings, a live token on the live ones. Secret and trusted tokens may call it when their permissions include `settings_analytics`. Limited tokens may not.
Update fraud settings POST
Changes the fraud screening rules. Send only the fields you want to change. The 3-D Secure step-up fields can only be changed by Comecero (`403`). Settings are kept per mode: a test token works on the test settings, a live token on the live ones. Only Comecero staff tokens may call it. Secret and trusted tokens get `403`; ask support to change these rules.