Fraud & Policies

Protect your business with fraud controls and retry policies.

Fraud Policies

Set organization-level risk controls for payment intents.

Available Controls


Get Fraud Policy

Response:

Set Fraud Policy

Merge Behavior

Policies are merged, not replaced:
  • blocked_bins are added to existing list
  • allowed_bins are added to existing list
  • Other fields are overwritten

Per-Request Override

Override fraud policy for a specific payment:

Audit Trail

View policy changes:

Retry Policies

Configure how failed subscription payments are retried.

Get Retry Policy

Response:

Set Retry Policy

Delay Format


Policy Hierarchy

Policies are applied in order:
  1. Plan-level — Specific to subscription plan
  2. Org-level — Default for organization (empty plan_id)
  3. Global — System default (3 retries at 15m, 1h, 24h)

List Retry Policies


Delete Retry Policy


Error Codes


Best Practices

Fraud Policies

  1. Start Conservative — Set lower limits initially
  2. Monitor Blocks — Review blocked payments regularly
  3. Whitelist Trusted — Use allowed_bins for known customers
  4. Velocity Limits — Prevent card testing attacks

Retry Policies

  1. Gradual Delays — Start short, increase over time
  2. Plan-Specific — Higher-value plans may need more retries
  3. Notify Customers — Send emails before final retry
  4. Grace Period — Allow time for customers to update payment