# FraudScreeningConfig

A model the API reference uses in a request or a response. The operation pages link every field typed as this model here.

Transaction screening configuration. Screening runs once per transaction, before
authorization, and each rule inside it is configured independently.

## Fields
- `contributors` ([FraudContributors](https://devportal.demo.winkpg.io/docs/api/models/FraudContributors.md)): The screening rules evaluated for this merchant. Null or absent leaves every rule  unconfigured.
  Fields:
  - `velocity` ([VelocityContributorConfig](https://devportal.demo.winkpg.io/docs/api/models/VelocityContributorConfig.md)): Velocity Handler: caps how many transactions, and how much value, a merchant may run in a window.
  - `duplicateTransaction` ([DuplicateTransactionContributorConfig](https://devportal.demo.winkpg.io/docs/api/models/DuplicateTransactionContributorConfig.md)): Duplicate Transaction Manager: flags a repeat of a transaction already seen inside the configured window.
  - `amountRange` ([AmountRangeContributorConfig](https://devportal.demo.winkpg.io/docs/api/models/AmountRangeContributorConfig.md)): Amount Range Handler: flags a transaction whose amount falls outside the configured floor and ceiling.
  - `ipWhitelist` ([IPWhitelistContributorConfig](https://devportal.demo.winkpg.io/docs/api/models/IPWhitelistContributorConfig.md)): Whitelisted IPs: flags a cardholder IP address that matches none of the allowed ranges.
  - `ipBlacklist` ([IPBlacklistContributorConfig](https://devportal.demo.winkpg.io/docs/api/models/IPBlacklistContributorConfig.md)): Blacklisted IPs: flags a cardholder IP address that matches one of the blocked ranges.
  - `ipCountryRestriction` ([IPCountryRestrictionContributorConfig](https://devportal.demo.winkpg.io/docs/api/models/IPCountryRestrictionContributorConfig.md)): Country Restrictions Manager: flags a transaction by the country resolved from the cardholder IP address.
  - `binCountryMismatch` ([BinCountryMismatchContributorConfig](https://devportal.demo.winkpg.io/docs/api/models/BinCountryMismatchContributorConfig.md)): BIN Country Mismatch: flags a transaction whose card issuer country, billing country and  cardholder IP country disagree. Null or absent leaves the rule off.
  - `timeOfDayRestriction` ([TimeOfDayRestrictionContributorConfig](https://devportal.demo.winkpg.io/docs/api/models/TimeOfDayRestrictionContributorConfig.md)): Time of Day Restriction: flags a transaction created outside the merchant's allowed hours.  Null or absent leaves the rule off.
- `reviewHoldDeadlineMinutes` (integer(int32)): How long, in minutes, a transaction held by one of this merchant's screening rules waits for  a reviewer before its deadline passes. Applies to every rule whose action is  `HoldForReview`; a hold requested by an external screening provider follows that  provider's own setting instead. Null applies the platform default of 4320 minutes (three  days). Accepted range 15 to 43200 (30 days). (nullable, min 15, max 43200)
- `reviewHoldExpiryAction` ([ReviewHoldExpiryAction](https://devportal.demo.winkpg.io/docs/api/models/ReviewHoldExpiryAction.md)): What happens to a transaction held by one of this merchant's screening rules when nobody  approves or declines it before the deadline. `Decline` declines it, as a reviewer  rejection would. `ApproveAndContinue` releases it to authorization and records that  the deadline, not a reviewer, approved it. Null applies `Decline`. (nullable)
  Values:
  - `Decline`: Decline the held transaction when the deadline passes, exactly as a reviewer rejection would. The default.
  - `ApproveAndContinue`: Release the held transaction to authorization when the deadline passes, recording that it was approved by expiry rather than by a reviewer.
- `cardTestingBackstopOverride` ([CardTestingBackstopOverride](https://devportal.demo.winkpg.io/docs/api/models/CardTestingBackstopOverride.md)): Lowers the platform card-testing protection for this merchant. `Observe` keeps  detection and alerting but never refuses or stops one of this merchant's transactions;  `Off` turns the protection off for this merchant. Null follows the platform setting.  The override can only lower the protection, never raise it. Changing it requires a  dedicated administrator permission. (nullable)
  Values:
  - `Off`: Count nothing for this merchant: no window, no detection, no enforcement.
  - `Observe`: Count and detect for this merchant, and alert on an attack, but never refuse or stop one of its transactions, even when the platform enforces.

## See also

- [All documentation](https://devportal.demo.winkpg.io/llms.txt): the machine-readable index of every public page on this site.