Mastercard · Schema
Mastercard Fraud Alert
A fraud alert or confirmed fraud record within the Mastercard ecosystem. Covers both confirmed fraud submissions to the Fraud and Loss Database (FLD), suspected fraud reports, and Ethoca Alerts for collaborative fraud resolution between merchants, acquirers, and issuers.
Credit CardsDigital IdentityFinancial ServicesFraud DetectionOpen BankingPayments
Properties
| Name | Type | Description |
|---|---|---|
| alertId | string | Unique identifier for the fraud alert. For Ethoca alerts, this is a 25-character identifier generated by Ethoca. |
| alertType | string | Classification of the fraud alert indicating its source and certainty level. |
| alertSource | string | The source system or channel through which the fraud was reported. |
| refId | string | Unique identification generated by the transaction originator using UUID logic to link request and response messages. |
| timestamp | string | Timestamp of the fraud report initiation in ISO 8601 format with timezone offset. |
| icaNumber | string | ICA number of the issuer or acquirer initiating the fraud submission. |
| acquirerId | string | Acquirer ICA number for the transaction being reported as fraud. |
| cardNumber | string | Primary Account Number (PAN) used in the fraudulent transaction. Must pass Luhn algorithm validation. |
| cardProductCode | string | Three-character code identifying the card product type used in the fraudulent transaction. |
| transactionDate | string | Local date at the merchant location when the fraudulent transaction occurred, in YYYYMMDD format. |
| transactionAmount | string | Transaction amount at the merchant location without decimal separators. |
| transactionCurrencyCode | string | ISO 4217 numeric currency code for the transaction amount. |
| billingAmount | string | Amount on the cardholder statement in billing currency, without decimals. |
| billingCurrencyCode | string | ISO 4217 numeric currency code for the billing amount. |
| settlementDate | string | Settlement date of the reported transaction, in YYYYMMDD format. |
| fraudTypeCode | string | Two-character code identifying the reason the transaction was submitted as fraud (e.g., 01=Lost Card, 02=Stolen Card, 03=Never Received Issue, 04=Fraudulent Application, 05=Counterfeit). |
| fraudSubTypeCode | string | Single-character code further identifying the fraud reason (e.g., U=Unknown). Mandatory for issuers, optional for acquirers. |
| fraudPostedDate | string | Date the fraud was posted in FLD by the originator, in YYYYMMDD format. Defaults to system date if not provided. |
| cardholderReportedDate | string | Date the cardholder reported the fraud, in YYYYMMDD format. |
| accountDeviceType | string | Indicates if the account uses magnetic stripe, chip, PIN, contactless, or combinations thereof. |
| cardInPossession | string | Flag indicating if the cardholder was in possession of the card when the fraud occurred. Values: Y (Yes), N (No), U (Unknown). |
| issuerSCAExemption | string | Issuer Strong Customer Authentication (SCA) Exemption value indicating why SCA was not applied. |
| transactionIdentifiers | array | One or more identifiers used to locate the transaction in the Mastercard Data Warehouse. |
| merchant | object | |
| terminal | object | |
| outcome | object | |
| avsResponseCode | string | Address Verification Service response code from the authorization request. |
| authResponseCode | string | Authorization response code indicating the result of the authorization request. |
| cvcInvalidIndicator | string | Indicates whether the Card Verification Code was invalid. |
| memo | string | Brief description by the originator providing context for the fraud report. |
| providerId | string | Identifier for the fraud data provider (e.g., SafeFraud provider). |