Resolve alerts
| Portal display | API manualStatus | Description |
|---|---|---|
null | Indicates that the alert requires review and resolution. | |
| IN_REVIEW | Indicates that the alert is being actively investigated or reviewed. | |
| TRUE_POSITIVE_REJECT | Indicates that the activity was confirmed or suspected to be fraudulent or high-risk, and the associated activity was rejected (e.g. transaction blocked). | |
| TRUE_POSITIVE_ACCEPT | Indicates that the activity was confirmed or suspected to be fraudulent or high-risk, and the associated activity was accepted (e.g. transaction approved with override). | |
| FALSE_POSITIVE | Indicates the alert was reviewed, and confirmed or assumed to be genuine or low-risk. |
via API
Given the activity results update its status by calling Update Activity results endpointvia Portal
See Features for more detailsRe-evaluate the results
Once all alerts have been resolve, you must re-run the workflow for the entity.- To update the
status: The overallworkflowResult.statuswill only be changed by the system fromREVIEWtoPASSorCLEARafter the workflow is executed again and the steps included in the monitoring workflow confirms that no unresolved hits remain. - To clear
issues: The re-execution will cause the steps to re-evaluate the issues. If all PROs that previously caused anACTIVITYissue are now classified asFALSE_POSITIVE, the issue will be cleared from the workflow result.
via API
To trigger a re-evaluation via API, you will execute the workflow again. Refer to the Execute a workflow for the given service profile documentation.via Portal
The Portal will automatically re-run the workflow for you once all alerts associated with an activity have been resolved (i.e. no alerts with “Needs attention” and “In review” status remain).Detecting manual overrides
It’s crucial to know if a workflow’s result was changed by a person. When an operator manually changes the status (e.g., fromFAIL to PASS), the following fields are populated:
statusOverrideRequestId: The unique ID of the override request.statusOverrideBy: The user who performed the override.statusOverrideAt: The timestamp of the override.
statusOverrideRequestId exists and is not empty.
(Optional) Retrieve all activities
Fetch historical information about the transactions to help get context of the user behavior and investigate.Get Activities request
Get Activities request