Analisar risco de uma transação
curl --request POST \
--url https://sandbox.4seletpay.com.br/api/v1/fraud/risk-analyses \
--header 'Authorization: Bearer <token>' \
--header 'Content-Type: application/json' \
--data '
{
"external_reference": "order-1024",
"amount": 25000,
"currency": "BRL",
"payment_method": "credit_card",
"customer": {
"name": "João Silva",
"document": "12345678900",
"email": "joao@exemplo.com.br",
"phone": "+5511999998888"
},
"card": {
"bin": "516292",
"last4": "0000",
"brand": "mastercard"
},
"context": {
"ip": "189.10.20.30",
"user_agent": "MinhaLoja/1.0"
}
}
'import requests
url = "https://sandbox.4seletpay.com.br/api/v1/fraud/risk-analyses"
payload = {
"external_reference": "order-1024",
"amount": 25000,
"currency": "BRL",
"payment_method": "credit_card",
"customer": {
"name": "João Silva",
"document": "12345678900",
"email": "joao@exemplo.com.br",
"phone": "+5511999998888"
},
"card": {
"bin": "516292",
"last4": "0000",
"brand": "mastercard"
},
"context": {
"ip": "189.10.20.30",
"user_agent": "MinhaLoja/1.0"
}
}
headers = {
"Authorization": "Bearer <token>",
"Content-Type": "application/json"
}
response = requests.post(url, json=payload, headers=headers)
print(response.text)const options = {
method: 'POST',
headers: {Authorization: 'Bearer <token>', 'Content-Type': 'application/json'},
body: JSON.stringify({
external_reference: 'order-1024',
amount: 25000,
currency: 'BRL',
payment_method: 'credit_card',
customer: {
name: 'João Silva',
document: '12345678900',
email: 'joao@exemplo.com.br',
phone: '+5511999998888'
},
card: {bin: '516292', last4: '0000', brand: 'mastercard'},
context: {ip: '189.10.20.30', user_agent: 'MinhaLoja/1.0'}
})
};
fetch('https://sandbox.4seletpay.com.br/api/v1/fraud/risk-analyses', options)
.then(res => res.json())
.then(res => console.log(res))
.catch(err => console.error(err));<?php
$curl = curl_init();
curl_setopt_array($curl, [
CURLOPT_URL => "https://sandbox.4seletpay.com.br/api/v1/fraud/risk-analyses",
CURLOPT_RETURNTRANSFER => true,
CURLOPT_ENCODING => "",
CURLOPT_MAXREDIRS => 10,
CURLOPT_TIMEOUT => 30,
CURLOPT_HTTP_VERSION => CURL_HTTP_VERSION_1_1,
CURLOPT_CUSTOMREQUEST => "POST",
CURLOPT_POSTFIELDS => json_encode([
'external_reference' => 'order-1024',
'amount' => 25000,
'currency' => 'BRL',
'payment_method' => 'credit_card',
'customer' => [
'name' => 'João Silva',
'document' => '12345678900',
'email' => 'joao@exemplo.com.br',
'phone' => '+5511999998888'
],
'card' => [
'bin' => '516292',
'last4' => '0000',
'brand' => 'mastercard'
],
'context' => [
'ip' => '189.10.20.30',
'user_agent' => 'MinhaLoja/1.0'
]
]),
CURLOPT_HTTPHEADER => [
"Authorization: Bearer <token>",
"Content-Type: application/json"
],
]);
$response = curl_exec($curl);
$err = curl_error($curl);
curl_close($curl);
if ($err) {
echo "cURL Error #:" . $err;
} else {
echo $response;
}package main
import (
"fmt"
"strings"
"net/http"
"io"
)
func main() {
url := "https://sandbox.4seletpay.com.br/api/v1/fraud/risk-analyses"
payload := strings.NewReader("{\n \"external_reference\": \"order-1024\",\n \"amount\": 25000,\n \"currency\": \"BRL\",\n \"payment_method\": \"credit_card\",\n \"customer\": {\n \"name\": \"João Silva\",\n \"document\": \"12345678900\",\n \"email\": \"joao@exemplo.com.br\",\n \"phone\": \"+5511999998888\"\n },\n \"card\": {\n \"bin\": \"516292\",\n \"last4\": \"0000\",\n \"brand\": \"mastercard\"\n },\n \"context\": {\n \"ip\": \"189.10.20.30\",\n \"user_agent\": \"MinhaLoja/1.0\"\n }\n}")
req, _ := http.NewRequest("POST", url, payload)
req.Header.Add("Authorization", "Bearer <token>")
req.Header.Add("Content-Type", "application/json")
res, _ := http.DefaultClient.Do(req)
defer res.Body.Close()
body, _ := io.ReadAll(res.Body)
fmt.Println(string(body))
}HttpResponse<String> response = Unirest.post("https://sandbox.4seletpay.com.br/api/v1/fraud/risk-analyses")
.header("Authorization", "Bearer <token>")
.header("Content-Type", "application/json")
.body("{\n \"external_reference\": \"order-1024\",\n \"amount\": 25000,\n \"currency\": \"BRL\",\n \"payment_method\": \"credit_card\",\n \"customer\": {\n \"name\": \"João Silva\",\n \"document\": \"12345678900\",\n \"email\": \"joao@exemplo.com.br\",\n \"phone\": \"+5511999998888\"\n },\n \"card\": {\n \"bin\": \"516292\",\n \"last4\": \"0000\",\n \"brand\": \"mastercard\"\n },\n \"context\": {\n \"ip\": \"189.10.20.30\",\n \"user_agent\": \"MinhaLoja/1.0\"\n }\n}")
.asString();require 'uri'
require 'net/http'
url = URI("https://sandbox.4seletpay.com.br/api/v1/fraud/risk-analyses")
http = Net::HTTP.new(url.host, url.port)
http.use_ssl = true
request = Net::HTTP::Post.new(url)
request["Authorization"] = 'Bearer <token>'
request["Content-Type"] = 'application/json'
request.body = "{\n \"external_reference\": \"order-1024\",\n \"amount\": 25000,\n \"currency\": \"BRL\",\n \"payment_method\": \"credit_card\",\n \"customer\": {\n \"name\": \"João Silva\",\n \"document\": \"12345678900\",\n \"email\": \"joao@exemplo.com.br\",\n \"phone\": \"+5511999998888\"\n },\n \"card\": {\n \"bin\": \"516292\",\n \"last4\": \"0000\",\n \"brand\": \"mastercard\"\n },\n \"context\": {\n \"ip\": \"189.10.20.30\",\n \"user_agent\": \"MinhaLoja/1.0\"\n }\n}"
response = http.request(request)
puts response.read_body{
"object": "risk_analysis",
"id": "fan_a1b2c3d4e5f6g7h8",
"external_reference": "order-1024",
"status": "completed",
"risk_score": 30,
"risk_level": "low",
"recommendation": "follow",
"decision": "ALLOW",
"reasons": [
"NEW_CUSTOMER"
],
"analyzed_at": "2026-07-27T12:00:00-03:00"
}Análise de fraude
Analisar risco
Avalia o risco de fraude de uma transação e devolve uma recomendação, uma nota de risco (0–100), o nível e os motivos. Cada análise concluída é cobrada. Autenticada pela chave de API.
POST
/
v1
/
fraud
/
risk-analyses
Analisar risco de uma transação
curl --request POST \
--url https://sandbox.4seletpay.com.br/api/v1/fraud/risk-analyses \
--header 'Authorization: Bearer <token>' \
--header 'Content-Type: application/json' \
--data '
{
"external_reference": "order-1024",
"amount": 25000,
"currency": "BRL",
"payment_method": "credit_card",
"customer": {
"name": "João Silva",
"document": "12345678900",
"email": "joao@exemplo.com.br",
"phone": "+5511999998888"
},
"card": {
"bin": "516292",
"last4": "0000",
"brand": "mastercard"
},
"context": {
"ip": "189.10.20.30",
"user_agent": "MinhaLoja/1.0"
}
}
'import requests
url = "https://sandbox.4seletpay.com.br/api/v1/fraud/risk-analyses"
payload = {
"external_reference": "order-1024",
"amount": 25000,
"currency": "BRL",
"payment_method": "credit_card",
"customer": {
"name": "João Silva",
"document": "12345678900",
"email": "joao@exemplo.com.br",
"phone": "+5511999998888"
},
"card": {
"bin": "516292",
"last4": "0000",
"brand": "mastercard"
},
"context": {
"ip": "189.10.20.30",
"user_agent": "MinhaLoja/1.0"
}
}
headers = {
"Authorization": "Bearer <token>",
"Content-Type": "application/json"
}
response = requests.post(url, json=payload, headers=headers)
print(response.text)const options = {
method: 'POST',
headers: {Authorization: 'Bearer <token>', 'Content-Type': 'application/json'},
body: JSON.stringify({
external_reference: 'order-1024',
amount: 25000,
currency: 'BRL',
payment_method: 'credit_card',
customer: {
name: 'João Silva',
document: '12345678900',
email: 'joao@exemplo.com.br',
phone: '+5511999998888'
},
card: {bin: '516292', last4: '0000', brand: 'mastercard'},
context: {ip: '189.10.20.30', user_agent: 'MinhaLoja/1.0'}
})
};
fetch('https://sandbox.4seletpay.com.br/api/v1/fraud/risk-analyses', options)
.then(res => res.json())
.then(res => console.log(res))
.catch(err => console.error(err));<?php
$curl = curl_init();
curl_setopt_array($curl, [
CURLOPT_URL => "https://sandbox.4seletpay.com.br/api/v1/fraud/risk-analyses",
CURLOPT_RETURNTRANSFER => true,
CURLOPT_ENCODING => "",
CURLOPT_MAXREDIRS => 10,
CURLOPT_TIMEOUT => 30,
CURLOPT_HTTP_VERSION => CURL_HTTP_VERSION_1_1,
CURLOPT_CUSTOMREQUEST => "POST",
CURLOPT_POSTFIELDS => json_encode([
'external_reference' => 'order-1024',
'amount' => 25000,
'currency' => 'BRL',
'payment_method' => 'credit_card',
'customer' => [
'name' => 'João Silva',
'document' => '12345678900',
'email' => 'joao@exemplo.com.br',
'phone' => '+5511999998888'
],
'card' => [
'bin' => '516292',
'last4' => '0000',
'brand' => 'mastercard'
],
'context' => [
'ip' => '189.10.20.30',
'user_agent' => 'MinhaLoja/1.0'
]
]),
CURLOPT_HTTPHEADER => [
"Authorization: Bearer <token>",
"Content-Type: application/json"
],
]);
$response = curl_exec($curl);
$err = curl_error($curl);
curl_close($curl);
if ($err) {
echo "cURL Error #:" . $err;
} else {
echo $response;
}package main
import (
"fmt"
"strings"
"net/http"
"io"
)
func main() {
url := "https://sandbox.4seletpay.com.br/api/v1/fraud/risk-analyses"
payload := strings.NewReader("{\n \"external_reference\": \"order-1024\",\n \"amount\": 25000,\n \"currency\": \"BRL\",\n \"payment_method\": \"credit_card\",\n \"customer\": {\n \"name\": \"João Silva\",\n \"document\": \"12345678900\",\n \"email\": \"joao@exemplo.com.br\",\n \"phone\": \"+5511999998888\"\n },\n \"card\": {\n \"bin\": \"516292\",\n \"last4\": \"0000\",\n \"brand\": \"mastercard\"\n },\n \"context\": {\n \"ip\": \"189.10.20.30\",\n \"user_agent\": \"MinhaLoja/1.0\"\n }\n}")
req, _ := http.NewRequest("POST", url, payload)
req.Header.Add("Authorization", "Bearer <token>")
req.Header.Add("Content-Type", "application/json")
res, _ := http.DefaultClient.Do(req)
defer res.Body.Close()
body, _ := io.ReadAll(res.Body)
fmt.Println(string(body))
}HttpResponse<String> response = Unirest.post("https://sandbox.4seletpay.com.br/api/v1/fraud/risk-analyses")
.header("Authorization", "Bearer <token>")
.header("Content-Type", "application/json")
.body("{\n \"external_reference\": \"order-1024\",\n \"amount\": 25000,\n \"currency\": \"BRL\",\n \"payment_method\": \"credit_card\",\n \"customer\": {\n \"name\": \"João Silva\",\n \"document\": \"12345678900\",\n \"email\": \"joao@exemplo.com.br\",\n \"phone\": \"+5511999998888\"\n },\n \"card\": {\n \"bin\": \"516292\",\n \"last4\": \"0000\",\n \"brand\": \"mastercard\"\n },\n \"context\": {\n \"ip\": \"189.10.20.30\",\n \"user_agent\": \"MinhaLoja/1.0\"\n }\n}")
.asString();require 'uri'
require 'net/http'
url = URI("https://sandbox.4seletpay.com.br/api/v1/fraud/risk-analyses")
http = Net::HTTP.new(url.host, url.port)
http.use_ssl = true
request = Net::HTTP::Post.new(url)
request["Authorization"] = 'Bearer <token>'
request["Content-Type"] = 'application/json'
request.body = "{\n \"external_reference\": \"order-1024\",\n \"amount\": 25000,\n \"currency\": \"BRL\",\n \"payment_method\": \"credit_card\",\n \"customer\": {\n \"name\": \"João Silva\",\n \"document\": \"12345678900\",\n \"email\": \"joao@exemplo.com.br\",\n \"phone\": \"+5511999998888\"\n },\n \"card\": {\n \"bin\": \"516292\",\n \"last4\": \"0000\",\n \"brand\": \"mastercard\"\n },\n \"context\": {\n \"ip\": \"189.10.20.30\",\n \"user_agent\": \"MinhaLoja/1.0\"\n }\n}"
response = http.request(request)
puts response.read_body{
"object": "risk_analysis",
"id": "fan_a1b2c3d4e5f6g7h8",
"external_reference": "order-1024",
"status": "completed",
"risk_score": 30,
"risk_level": "low",
"recommendation": "follow",
"decision": "ALLOW",
"reasons": [
"NEW_CUSTOMER"
],
"analyzed_at": "2026-07-27T12:00:00-03:00"
}Esta rota usa a sua chave de API (secret key), não o token de login (JWT) das demais rotas. Envie
Authorization: Bearer sk_.... Veja Chave de API.Envie apenas o BIN (
card.bin, 6 dígitos) e os últimos 4 dígitos (card.last4). Número completo, CVV ou validade do cartão fazem a chamada retornar 422 (forbidden_card_field).Use o header opcional
Idempotency-Key para garantir que um reenvio da mesma transação não gere uma nova análise (nem nova cobrança). Veja idempotência.O
amount é em centavos (25000 = R$ 250,00). Todos os dados do cliente, do cartão e do contexto são opcionais, mas quanto mais dados, melhor a análise — o e-mail, o documento e o IP têm peso importante no risco.Authorizations
Chave de API (secret key) da conta, no formato sk_live_... (produção) ou sk_test_... (Ambiente de Sandbox). Envie no header Authorization: Bearer <chave>. Autentica todas as rotas da API v2 e as rotas de Análise de Fraude. A chave identifica a conta, então a API v2 não usa o header account. Uma chave só é aceita no ambiente em que foi criada. Gere a sua no dashboard em Configurações → Chaves de API.
Headers
Chave de idempotência opcional. Repetir a mesma chave com o mesmo corpo devolve a análise original sem cobrar de novo; a mesma chave com corpo diferente retorna 422.
Example:
"order-9f2b1a"
Body
application/json
Valor da transação em centavos (10000 = R$ 100,00)
Required range:
x >= 0Example:
25000
Moeda no padrão ISO 4217 (3 letras)
Required string length:
3Example:
"BRL"
Seu identificador da transação (aparece na resposta)
Maximum string length:
191Example:
"order-1024"
Maximum string length:
30Example:
"credit_card"
Show child attributes
Show child attributes
Apenas BIN e últimos 4 dígitos. Enviar o número completo, o CVV ou a validade faz a requisição retornar 422 (forbidden_card_field).
Show child attributes
Show child attributes
Show child attributes
Show child attributes
Response
Análise concluída
Resultado de uma análise de risco
Example:
"risk_analysis"
Código da análise (use-o para consultar depois)
Example:
"fan_a1b2c3d4e5f6g7h8"
Example:
"order-1024"
Available options:
completed, unavailable, failed Example:
"completed"
Nota de risco de 0 (baixo) a 100 (alto)
Required range:
0 <= x <= 100Example:
30
Available options:
low, medium, high Example:
"low"
Ação sugerida: seguir, validar melhor ou recusar
Available options:
follow, additional_validation, reject Example:
"follow"
Decisão do motor: aprovar, revisar ou recusar
Available options:
ALLOW, CHALLENGE, DENY Example:
"ALLOW"
Códigos dos motivos que pesaram na decisão
Example:
["NEW_CUSTOMER"]
Example:
"2026-07-27T12:00:00-03:00"