# Update fraud settings (/api/settings/update-fraud-settings)

`POST https://api.comecero.com/api/v1/settings/fraud`

Changes the fraud screening rules. Send only the fields you want to change. The 3-D Secure step-up fields can only be changed by Comecero (`403`). Settings are kept per mode: a test token works on the test settings, a live token on the live ones. Only Comecero staff tokens may call it. Secret and trusted tokens get `403`; ask support to change these rules.

## Parameters

- `show` (query): Comma-separated fields to return; all others are left out. Use dot notation for child fields (`customer.email`). You cannot send `show` and `hide` together (`400`). See [Customizing output](https://docs.comecero.com/docs/basic-concepts/customizing-output).
- `hide` (query): Comma-separated fields to leave out of the response. Use dot notation for child fields (`customer.email`). You cannot send `show` and `hide` together (`400`). See [Customizing output](https://docs.comecero.com/docs/basic-concepts/customizing-output).
- `formatted` (query): When `true`, the object also has a `formatted` child with amounts and dates as display text in the shopper's language and currency (for example `$19.99` or `November 7, 2026`). The default is `false`. See [Localized formatting](https://docs.comecero.com/docs/basic-concepts/localized-formatting).

Request body: the `settings_fraud_request` schema.

Responses: 200, 400, 401, 403, 500.

Full schemas: operation `update_fraud_settings` in /openapi.json.