POST
/beacon/account_risk/v1/evaluateDeprecatedEvaluate bank account risk
Evaluates the risk of accounts associated with a linked Item. Supply the account, user, evaluation, reason, and device context needed to correlate and assess the risk event. This operation is deprecated.
- RetriesRetries up to 2×, 500ms backoff, 30s timeout.
Request data for evaluating risk on accounts associated with a linked Item.
client_idstringoptional
Your Plaid API `client_id`. The `client_id` is required and may be provided either in the `PLAID-CLIENT-ID` header or as part of a request body.
secretstringoptional
Your Plaid API `secret`. The `secret` is required and may be provided either in the `PLAID-SECRET` header or as part of a request body.
access_tokenstringoptional
The access token associated with the Item for which data is being requested.
optionsobjectoptional
An optional object to filter `/beacon/account_risk/v1/evaluate` results to a subset of the accounts on the linked Item.
client_user_idstringoptional
A unique ID that identifies the end user in your system. This ID is used to correlate requests by a user with multiple evaluations and/or multiple linked accounts. Personally identifiable information, such as an email address or phone number, should not be used in the `client_user_id`.
client_evaluation_idstringoptional
Unique identifier of what you are looking to evaluate (account add, information change, etc.) to allow us to tie the activity to the decisions and possible fraud outcome sent via our feedback endpoints. You can use your internal request ID or similar.
evaluation_reasonstringoptional
Description of the reason you want to evaluate risk.
`ONBOARDING`: user links a first bank account as part of the onboarding flow of your platform.
`NEW_ACCOUNT`: user links another bank account or replaces the currently linked bank account on your platform.
`INFORMATION_CHANGE`: user changes their information on your platform, e.g., updating their phone number.
`DORMANT_USER`: you decide to re-evaluate a user that becomes active after a period of inactivity.
`OTHER`: any other reasons not listed here
Possible values: `ONBOARDING`, `NEW_ACCOUNT`, `INFORMATION_CHANGE`, `DORMANT_USER`, `OTHER`
deviceobjectoptional
Details about the end user's device. These fields are optional, but strongly recommended to increase the accuracy of results when using Signal Transaction Scores. When using a Balance-only Ruleset, these fields are ignored if the Signal Addendum has been signed; if it has not been signed, using these fields will result in an error.
evaluate_timestringoptional
The time the event for evaluation has occurred. Populate this field for backfilling data. If you don't populate this field, we'll use the timestamp at the time of receipt. Use ISO 8601 format (YYYY-MM-DDTHH:mm:ssZ).
200Returns a request identifier and the accounts for which risk evaluation was requested.
request_idstringrequired
A unique identifier for the request, which can be used for troubleshooting. This identifier, like all Plaid identifiers, is case sensitive.
accountsarray<BeaconAccountRiskEvaluateAccount>required
The accounts for which a risk evaluation has been requested.
defaultReturned when the risk evaluation request cannot be processed; inspect `error_type`, `error_code`, and `error_message` for details.
error_typestringrequired
A broad categorization of the error. Safe for programmatic use.
error_codestringrequired
The particular error code. Safe for programmatic use.
error_code_reasonstringoptional
The specific reason for the error code. Currently, reasons are only supported for OAuth-based item errors; `null` will be returned otherwise. Safe for programmatic use.
Possible values:
`OAUTH_INVALID_TOKEN`: The user's OAuth connection to this institution has been invalidated.
`OAUTH_CONSENT_EXPIRED`: The user's access consent for this OAuth connection to this institution has expired.
`OAUTH_USER_REVOKED`: The user's OAuth connection to this institution is invalid because the user revoked their connection.
error_messagestringrequired
A developer-friendly representation of the error code. This may change over time and is not safe for programmatic use.
display_messagestringrequired
A user-friendly representation of the error code. `null` if the error is not related to user action.
This may change over time and is not safe for programmatic use.
request_idstringoptional
A unique ID identifying the request, to be used for troubleshooting purposes. This field will be omitted in errors provided by webhooks.
causesarrayoptional
In this product, a request can pertain to more than one Item. If an error is returned for such a request, `causes` will return an array of errors containing a breakdown of these errors on the individual Item level, if any can be identified.
`causes` will be provided for the `error_type` `ASSET_REPORT_ERROR` or `CHECK_REPORT_ERROR`. `causes` will also not be populated inside an error nested within a `warning` object.
statusintegeroptional
The HTTP status code associated with the error. This will only be returned in the response body when the error information is provided via a webhook.
documentation_urlstringoptional
The URL of a Plaid documentation page with more information about the error
suggested_actionstringoptional
Suggested steps for resolving the error
required_account_subtypesarray<string>optional
A list of the account subtypes that were requested via the `account_filters` parameter in `/link/token/create`. Currently only populated for `NO_ACCOUNTS` errors from Items with `investments_auth` as an enabled product.
provided_account_subtypesarray<string>optional
A list of the account subtypes that were extracted but did not match the requested subtypes via the `account_filters` parameter in `/link/token/create`. Currently only populated for `NO_ACCOUNTS` errors from Items with `investments_auth` as an enabled product.
Error handling
client_user_id must be between 1 and 36 characters when provided. evaluation_reason must be one of ONBOARDING, NEW_ACCOUNT, INFORMATION_CHANGE, DORMANT_USER, or OTHER, and evaluate_time must use ISO 8601 format when provided. access_token must identify the linked Item whose accounts are being evaluated.