Ravelin

Ravelin is a London-based fraud detection and prevention platform offering AI-native, real-time decisioning APIs for online merchants. Their products cover payment fraud, chargeback recovery, account takeover (ATO) protection, refund and policy abuse, marketplace and supplier fraud, and a PSP-agnostic 3D Secure server. Ravelin combines per-merchant machine learning models, graph network analysis, and a consortium database of identity signals to score every customer interaction across checkout, login, registration, and post-transaction events.

4 APIs 8 Features

Fraud PreventionFraud DetectionChargeback PreventionAccount Takeover3D SecureRisk ScoringPaymentsMachine Learning

APIs

Ravelin Merchant API

The Ravelin Merchant API is a REST interface for submitting customer, order, transaction, payment, login, registration, voucher, supplier, dispute, refund, payout, and reclaim e...

Ravelin 3D Secure Server API

A PSP-agnostic, PCI 3DS-validated 3D Secure Server API for authenticating cardholders under EMV 3DS 2.x. Provides the Authentication Request (AReq), Challenge, Result, and Versi...

Ravelin PSP API

A purpose-built API surface for Payment Service Providers (PSPs) embedding Ravelin's risk scoring and dispute capture into their own merchant-facing product. Exposes Score, Tran...

Ravelin Callbacks API

Outbound webhook callbacks delivered by Ravelin to merchant-configured endpoints when manual reviews, order decisions, or refund decisions are completed in the Ravelin dashboard...

Collections

Ravelin 3D Secure Server API

OPEN

Ravelin Callbacks API

OPEN

Ravelin Merchant API

OPEN

Features

Per-Merchant Machine Learning

Custom ML models trained and tuned to each merchant's traffic, products, and fraud patterns rather than a single global model.

Graph Network Analysis

Link analysis across customers, devices, payment instruments, and addresses to surface hidden fraud rings and shared-identity clusters.

Consortium Identity Database

A shared identity-signals consortium spanning 9+ billion identity elements used to enrich risk scoring across all merchants.

Real-Time Decisioning

ALLOW / REVIEW / PREVENT decisions returned synchronously on every checkout, login, registration, voucher, and transaction event.

PSP-Agnostic 3D Secure

A 3DS Server that works with any acquirer or PSP, supports dynamic exemption routing, and is bundled with native iOS and Android 3DS SDKs.

Manual Review Workflow

Built-in dashboard for human review of borderline cases with webhook callbacks to sync decisions back to the merchant's order management system.

Rules Engine

Merchant-authored rules layered on top of ML scores, executed in active or passive mode so new rules can be safely shadow-tested before going live.

Per-Customer Rate Limiting

A built-in 50 events-per-minute-per-customer guardrail that returns a PREVENT action with source RATE_LIMIT to defend against scripted abuse.

Use Cases

Online Payment Fraud and Chargeback Prevention

Scoring checkout and transaction events to block fraudulent orders before they ship and reduce card scheme chargebacks.

Account Takeover (ATO) Protection

Risk-scoring login events to detect credential stuffing, breach reuse, and session hijacking attempts in real time.

Refund and Policy Abuse

Detecting customers who systematically exploit refund, return, and goodwill policies across orders and channels.

Promo, Voucher, and Loyalty Abuse

Scoring voucher and promo redemption events to stop bonus stacking, multi-accounting, and referral fraud.

Marketplace and Supplier Fraud

Risk-scoring suppliers, drivers, couriers, sellers, and other marketplace participants to detect collusion and onboarding fraud.

3D Secure and SCA Optimization

Running EMV 3DS 2.x authentication through Ravelin's 3DS Server with dynamic exemption routing to maximize approval and shift liability where appropriate.

Integrations

Payment Service Providers

Integrates with major PSPs and acquirers via the PSP API and the PSP-agnostic 3DS Server.

Order Management Systems

Order, refund, and manual-review decisions are pushed to downstream OMS via webhook callbacks.

iOS Applications

Native iOS Core, Encrypt, and 3DS SDKs distributed as XCFrameworks.

Android Applications

Native Android Core and 3DS SDKs with bundled ProGuard rules.

Web Applications

RavelinJS browser SDK for device fingerprinting, encryption, and 3DS browser flows.

Solutions

Payment Fraud

End-to-end protection of the checkout and transaction surface for online merchants.

Account Security

Refund Abuse

Detection of refund and return abuse across orders and channels.

Marketplace Risk

Supplier, courier, and seller risk scoring for marketplaces and gig platforms.

3D Secure and Transaction Optimization

PSP-agnostic 3DS Server with exemption routing and native mobile SDKs.

Resources

GitHubOrganization

ReferenceImplementation

ReferenceImplementation

Sources

opencollection: 1.0.0
info:
  name: Ravelin Merchant API
  version: '2'
request:
  auth:
    type: apikey
    key: Authorization
    value: '{{Authorization}}'
    placement: header
items:
- info:
    name: Checkout
    type: folder
  items:
  - info:
      name: Score a Checkout Event
      type: http
    http:
      method: POST
      url: https://api.ravelin.com/v2/checkout
      body:
        type: json
        data: '{}'
    docs: Submit an order at checkout to receive a real-time risk decision before payment is captured. Recommended as the
      primary pre-payment integration point.
- info:
    name: Transactions
    type: folder
  items:
  - info:
      name: Submit a Transaction Event
      type: http
    http:
      method: POST
      url: https://api.ravelin.com/v2/transaction
      body:
        type: json
        data: '{}'
    docs: Submit a transaction attempt (auth, capture, auth_capture, refund, void, preauth) for scoring and to keep Ravelin's
      transaction history in sync with the merchant's PSP.
  - info:
      name: Submit a Payment Method
      type: http
    http:
      method: POST
      url: https://api.ravelin.com/v2/payment-method
      body:
        type: json
        data: '{}'
    docs: Submit a payment method associated with a customer for tokenization, link analysis, and risk scoring.
- info:
    name: Refunds
    type: folder
  items:
  - info:
      name: Submit a Refund Request
      type: http
    http:
      method: POST
      url: https://api.ravelin.com/v2/refund
      body:
        type: json
        data: '{}'
    docs: Submit a refund request for risk scoring against refund-abuse models. Returns an action recommending whether to
      grant the refund.
- info:
    name: Disputes
    type: folder
  items:
  - info:
      name: Submit a Dispute
      type: http
    http:
      method: POST
      url: https://api.ravelin.com/v2/dispute
      body:
        type: json
        data: '{}'
    docs: Notify Ravelin of an issuer-initiated dispute or chargeback so it can feed back into ML training and link analysis.
  - info:
      name: Submit a Reclaim Event
      type: http
    http:
      method: POST
      url: https://api.ravelin.com/v2/reclaim
      body:
        type: json
        data: '{}'
    docs: Submit a customer reclaim or goodwill credit event for refund and policy-abuse scoring.
- info:
    name: Customer
    type: folder
  items:
  - info:
      name: Submit a Customer Profile
      type: http
    http:
      method: POST
      url: https://api.ravelin.com/v2/customer
      body:
        type: json
        data: '{}'
    docs: Submit or update a customer profile (identity, contact, account type, location, device) for risk scoring outside
      of an order context.
  - info:
      name: Apply a Customer Label
      type: http
    http:
      method: POST
      url: https://api.ravelin.com/v2/customer-label
      body:
        type: json
        data: '{}'
    docs: Apply or remove a fraud / trust label on a customer, e.g. to mark a customer as FRAUDULENT after a confirmed chargeback.
      Labels feed back into ML training.
- info:
    name: Authentication
    type: folder
  items:
  - info:
      name: Score a Login Event
      type: http
    http:
      method: POST
      url: https://api.ravelin.com/v3/login
      body:
        type: json
        data: '{}'
    docs: Submit a login attempt (successful or failed) for account takeover scoring. Supports password, social, OTP, U2F,
      RSA, SMS, magic link, reCAPTCHA, biometric, and push authentication mechanisms.
  - info:
      name: Score a Registration Event
      type: http
    http:
      method: POST
      url: https://api.ravelin.com/v2/registration
      body:
        type: json
        data: '{}'
    docs: Score a new customer or supplier registration event for fake-account, breach-credential, and onboarding-fraud risk.
- info:
    name: Vouchers
    type: folder
  items:
  - info:
      name: Submit a Voucher Redemption
      type: http
    http:
      method: POST
      url: https://api.ravelin.com/v2/voucher
      body:
        type: json
        data: '{}'
    docs: Submit a voucher, promo code, or loyalty redemption event for promo-abuse scoring.
  - info:
      name: Pre-Check a Voucher Redemption
      type: http
    http:
      method: POST
      url: https://api.ravelin.com/v2/voucher-check
      body:
        type: json
        data: '{}'
    docs: Pre-flight risk check on a voucher redemption attempt before granting the voucher value.
  - info:
      name: Submit a Payment-Method Voucher Event
      type: http
    http:
      method: POST
      url: https://api.ravelin.com/v2/payment-method-voucher
      body:
        type: json
        data: '{}'
    docs: Submit a voucher event linked to a specific payment method (e.g. card-linked offers) for risk scoring.
- info:
    name: Supplier
    type: folder
  items:
  - info:
      name: Submit a Supplier Event
      type: http
    http:
      method: POST
      url: https://api.ravelin.com/v2/supplier
      body:
        type: json
        data: '{}'
    docs: Submit a supplier, driver, courier, restaurant, shop, or seller profile event for marketplace risk scoring.
  - info:
      name: Apply a Supplier Label
      type: http
    http:
      method: POST
      url: https://api.ravelin.com/v2/supplier-label
      body:
        type: json
        data: '{}'
    docs: Apply or remove a fraud / trust label on a supplier to feed back into ML training.
- info:
    name: Payouts
    type: folder
  items:
  - info:
      name: Submit a Payout Event
      type: http
    http:
      method: POST
      url: https://api.ravelin.com/v2/payout
      body:
        type: json
        data: '{}'
    docs: Submit an outbound payout event (to a supplier, marketplace seller, or recipient) for risk scoring.
- info:
    name: Connect
    type: folder
  items:
  - info:
      name: Submit a Connect Event
      type: http
    http:
      method: POST
      url: https://api.ravelin.com/v2/connect
      body:
        type: json
        data: '{}'
    docs: Submit a Ravelin Connect event for cross-merchant identity and signal sharing across the consortium.
bundled: true