# Fraud Detection Report The Fraud Detection Report offers insight into the performance of your [Fraud Detection](https://www.checkout.com/docs/business-operations/prevent-fraud.md) risk strategies. It contains a summary per transaction of data points, rules assessed, and outcomes at each stage in the risk assessment journey. It also identifies any fraudulent transactions. This report enables you to analyze the performance of your risk rules and find patterns to help develop new rules and improve your strategies. --- ## Report availability The report is available on demand and refreshes at 1:00 AM UTC every day. See instructions on how to download the report on demand or on a schedule: - [In the Dashboard](https://www.checkout.com/docs/business-operations/retrieve-reports.md#Generate_reports_in_the_Dashboard) - [Using the API](https://www.checkout.com/docs/business-operations/retrieve-reports.md#Retrieve_reports_via_API) - [Using Secure File Transfer Protocol](https://www.checkout.com/docs/business-operations/retrieve-reports.md#Access_reports_via_SFTP) (SFTP) - [Using webhooks](https://www.checkout.com/docs/business-operations/retrieve-reports.md#Receive_reports_using_webhooks) --- ## Report format The report is provided as a CSV file. The file name uses the following formats by default: - API and SFTP – `fraud_detection_{EntityID}_{Start Date: YYYYMMDD}_{End Date:YYYYMMDD}_1.csv` - Dashboard scheduled reports – `{Start Date: YYYYMMDD}_{End Date:YYYYMMDD}_fraud_detection` For SFTP, the report is uploaded in the following folder structure:
`{Entity_name} > reports-{Entity_name} > fraud_detection` --- ## Pre-filter by field via SFTP For targeted insight and efficient processing, you can pre-filter your scheduled SFTP report by one of the following fields and send them to specific recipients. For example, pre-filter by card bank identification number (BIN) country and send each country's data to the relevant owner. - BIN - Card Type - Issuing Bank - Card BIN Country - Payment Type - Scheme --- ## Sample report [Download a sample Fraud Detection Report](https://www.checkout.com/docs/files/Fraud_Detection_sample_report.csv) (CSV file). > **Information** > > If you're using Safari, hold the _Option_ key when you download. --- ## Report fields The report includes the following fields in this order: | Field name | Description | | --- | --- | | Entity ID
`string` | The entity's unique identifier, prefixed with `ent_`. | | Preauth Timestamp
`date-time` | The date and time when pre-authorization was attempted, in UTC.
Standard – ISO 8601 code
Format – `yyyy-mm-ddThh:mm:ss.sss` | | Payment ID
`string` | The payment's unique identifier, prefixed with `pay_`. | | Preauth Processing Decision
`string` | The decision made at the pre-authorization stage.

Example – `TRY_EXEMPTIONS` | | 3DS Outcome
`string` | The outcome of 3D Secure (3DS) authentication. This can be one of:

- `Authenticated` – The payment was authenticated successfully.
- `Expired` – The authentication expired.
- `Failed` – The payment failed authentication.
- `No 3ds` – 3DS was not applicable to the payment. | | Authorisation Outcome
`string` | The outcome of the authorization attempt. This can be one of:

- `Authorised` – The payment was authorized successfully.
- `Declined` – The payment was declined.
- `Terminated` – The authorization attempt failed. | | Postauth Processing Decision
`string` | The decision made after authorization. This can be one of:

- `CAPTURE`
- `SKIPPED`
- `TERMINATED` | | Current Status
`string` | The payment's current status. This can be one of:

- `Captured`
- `Pending`
- `Terminated` | | Preauth Response
`string` | The rules assessed at the pre-authorization stage.

Example – `Global risk settings` | | 3DS Response Code Summary
`string` | The summary that provides more information about the 3DS [response code](https://www.checkout.com/docs/developer-resources/codes/api-response-codes.md). | | Authorisation Response Code
`string` | The response code for the authorization attempt. | | Authorisation Response Code Summary
`string` | The summary that provides more information about the authorization response code. | | Postauth Response
`string` | The rules assessed at the post-authorization stage. | | Checkout Fraud Score
`number` | The [risk score](https://www.checkout.com/docs/business-operations/prevent-fraud/upgrade-to-pro.md#Risk_scores) Checkout.com gave the transaction. | | Fraud Issue Date
`date-time` | The date and time when the fraud issue was reported, in UTC.
Standard – ISO 8601 code
Format – `yyyy-mm-ddThh:mm:ss.sss` | | Fraud Reason
`string` | The reason for identifying the payment as fraudulent. | | Fraud Type
`string` | The type of fraud reported. | | Scheme
`string` | The card scheme. This can be one of:

- `AMEX` / `AMERICAN EXPRESS`
- `CABAL`
- `CARTES BANCAIRES` / `CARTES_BANCAIRES`
- `DANKORT`
- `DINERS CLUB` / `DINERS`
- `DISCOVER`
- `EBT`
- `EFTPOS`
- `ELO`
- `INTERNATIONAL`
- `JCB`
- `MAESTRO`
- `MASTERCARD`
- `RUPAY`
- `TROY`
- `UNKNOWN`
- `UPI`
- `VERVE`
- `VISA` | | Card Type
`string` | The type of card. This can be one of:

- `Charge` / `CHARGE`
- `Credit` / `CREDIT`
- `Debit` / `DEBIT`
- `Deferred Debit` / `DEFERRED DEBIT`
- `Prepaid` / `PREPAID` | | Card BIN Country
`string` | The country of the bank identification number (BIN).
Standard – [ISO alpha-2 country code](https://www.checkout.com/docs/developer-resources/testing/codes/country-codes.md)
Example – `US` | | BIN
`string` | The card's bank identification number.

Format – Six–eight digit number | | Card Fingerprint
`string` | The card's unique fingerprint. | | Issuing Bank
`string` | The name of the issuing bank. | | Card Category
`string` | The category of the card. This can be one of:

- `COMMERCIAL`
- `CONSUMER` | | Payment Amount
`number` | The amount of the payment. | | Payment Currency Code
`string` | The currency in which the payment was processed.
Standard – [ISO 4217 code](https://www.checkout.com/docs/developer-resources/testing/codes/currency-codes.md)
Example – `USD` | | Payment Amount USD
`number` | The payment amount represented in US dollars. | | Payment Type
`string` | The type of payment method used. This can be one of:

- `INSTALLMENT`
- `MOTO`
- `RECURRING`
- `REGULAR`
- `SUBSCRIPTION`
- `UNSCHEDULED` | | Request Reference
`string` | The [reference](https://api-reference.checkout.com/tag/Payments/#operation/requestAPaymentOrPayout!path=0/reference&t=request) for the payment request. | | Card Holder Name
`string` | The cardholder's name. | | Customer Name
`string` | The customer's name. | | Customer Email
`string` | The customer's email address. | | Customer IP
`string` | The customer's IP address. | | Billing Address 1
`string` | The first line of the billing address. | | Billing Address 2
`string` | The second line of the billing address. | | Billing City
`string` | The city of the billing address. | | Billing Zip
`string` | The ZIP code or post code of the billing address. | | Phone Country Code
`string` | The country code of the customer's phone number. | | Phone Number
`string` | The customer's phone number. | | Shipping Address 1
`string` | The first line of the shipping address. | | Shipping Address 2
`string` | The second line of the shipping address. | | Shipping City
`string` | The city of the shipping address. | | Shipping Zip
`string` | The ZIP code or post code of the shipping address. | | CVV Code
`string` | The card's card verification value (CVV). | | ECI
`string` | The Electronic Commerce Indicator value. | | Is Merchant Initiated
`boolean` | Indicates if the payment is a merchant-initiated transaction. | | Sub Entity ID
`number` | The sub-entity's unique identifier, prefixed with `ent_`. | | Browser Fingerprint
`string` | The unique fingerprint of the customer's browser. | | Meta Data
`string` | Any metadata related to the payment. |