Update fraud settings
Changes the fraud screening rules. Send only the fields you want to change. The 3-D Secure step-up fields can only be changed by Comecero (403). Settings are kept per mode: a test token works on the test settings, a live token on the live ones. Only Comecero staff tokens may call it. Secret and trusted tokens get 403; ask support to change these rules.
AuthorizationBearer <token>A secret, trusted or limited token. See Authentication.
show?stringComma-separated fields to return; all others are left out. Use dot notation for child fields (customer.email). You cannot send show and hide together (400). See Customizing output.
hide?stringComma-separated fields to leave out of the response. Use dot notation for child fields (customer.email). You cannot send show and hide together (400). See Customizing output.
formatted?booleanWhen true, the object also has a formatted child with amounts and dates as display text in the shopper's language and currency (for example $19.99 or November 7, 2026). The default is false. See Localized formatting.
falseapplication/json- body
The fraud fields to change. Send only the fields you want to change.
1 <= propertiesenable_fraud_screening?|Whether payments are scored for fraud.
max_score?|The block threshold, from 0 up to (not including) 1. null uses the default.
0 <= value < 1max_successful_payments?|The most successful payments per shopper in 24 hours.
max_failed_payments?|The most failed payments per shopper in 24 hours.
block_ip_country_mismatch?|Block when the IP country differs from the billing country.
blocked_countries?array<string>|Two-letter ISO country codes to refuse. null uses the platform list.
The fraud settings, after the change.
application/json- response
The fraud screening rules of the account in the current mode. A field that is null uses the platform default.
object?"settings_fraud"The object type. Always settings_fraud.
"settings_fraud"url?stringThe URL of this object.
uriaccount_id?stringThe ID of the account the settings belong to.
test?booleanTrue for the test mode settings, false for live.
date_created?stringWhen the settings were created.
date-timedate_modified?stringWhen the settings were last changed.
date-timeenable_fraud_screening?|Whether payments are scored for fraud before they are sent to the gateway.
max_score?|Payments that score at or above this value are blocked. From 0 up to (not including) 1. 0 turns score checks off. null uses the platform default.
0 <= value < 1max_successful_payments?|The most successful payments one shopper may make in 24 hours. Further payments are refused. null uses the platform default.
max_failed_payments?|The most failed payments one shopper may have in 24 hours. After that, no more payments are accepted. null uses the platform default.
block_ip_country_mismatch?|Block a payment when the shopper's IP country differs from the billing country.
blocked_countries?array<string>|Two-letter ISO country codes to refuse payments from. null uses the platform list. An empty list blocks no countries.
step_up_enabled?|When on, a payment that scores between max_score and step_up_max_score is sent with a 3-D Secure challenge instead of being blocked. Set by Comecero only.
step_up_max_score?|With step_up_enabled, the score from which a payment is blocked instead of challenged. Set by Comecero only.
formatted?Display text for the dates. Returned only when formatted=true.
curl -X POST 'https://api.comecero.com/api/v1/settings/fraud' \ -H 'Content-Type: application/json' \ -d '{ "max_score": 0.6, "blocked_countries": [ "XX" ]}'{ "object": "settings_fraud", "url": "https://api.comecero.com/api/v1/settings/fraud", "account_id": "AB1234", "test": true, "date_created": "2026-01-12T09:30:00Z", "date_modified": "2026-10-02T14:21:07Z", "enable_fraud_screening": true, "max_score": 0.6, "max_successful_payments": 5, "max_failed_payments": 3, "block_ip_country_mismatch": false, "blocked_countries": null, "step_up_enabled": null, "step_up_max_score": null}Get fraud settings GET
Returns the fraud screening rules: the score threshold, payment counts per shopper and blocked countries. Settings are kept per mode: a test token works on the test settings, a live token on the live ones. Only Comecero staff tokens may call it. Secret and trusted tokens get `403`; ask support to change these rules.
Get fulfillment settings GET
Returns whether payments are captured and items are fulfilled automatically, and after what delay. Settings are kept per mode: a test token works on the test settings, a live token on the live ones. Secret and trusted tokens may call it when their permissions include `settings_fulfillment`. Limited tokens may not.