Everything you need to integrate Naiza fraud detection and AML screening APIs into your application.

Overview

Naiza provides a RESTful JSON API for real-time fraud detection. Submit events with customer, device, and session context to receive instant ALLOW / BLOCK / REVIEW decisions with risk scores and matched rules.

Base URL: https://api.naiza.ai/api/v1

Authentication uses the x-api-key header with keys formatted as naiza_api_sk_live_... or naiza_api_sk_test_...

Decision Types

  • ALLOW — No fraud signals detected; proceed normally
  • REVIEW — Suspicious indicators found; require additional verification
  • BLOCK — High-confidence fraud detected; deny access immediately

Risk Score

Risk scores accumulate from SCORE-type rules during evaluation. A score of 100 or above triggers a REVIEW decision.

  • 0-25 Low — Normal behavior, minimal fraud indicators
  • 26-50 Medium — Some suspicious indicators present
  • 51-75 High — Multiple fraud indicators detected
  • 76-100+ Critical — Strong fraud signals; score >= 100 triggers REVIEW

Rate Limits

Default quota is 10,000 req/hr on a 1 hour rolling window. Exceeding the limit returns HTTP 429 with a Retry-After header.

Response time

Responses may include an observed duration field for that request. That value is not a latency SLA.

Guides and API Reference

Interactive documentation covers Getting Started, Tenant Onboarding, Web SDK, Quick Start, Event Monitoring, AML Integration, Integration Examples, API Reference, Code Examples, and Best Practices. Each guide has a unique URL such as /docs/guides/getting-started and /docs/api-reference/events.

API Documentation

Everything you need to integrate Naiza's fraud detection API into your application

Guides

API Reference

API Overview

Naiza fraud detection API overview: base URL, versioning, and the event, decision, list, webhook, and AML surface.

Authentication

Authenticate the Naiza fraud API with server API keys and Web SDK tokens. Keep secrets off the browser.

Web SDK API

Naiza Web SDK API for device fingerprinting and browser signals used in login and payment fraud detection.

Events API

Events API for fraud detection: submit logins, payments, and signups, then read ALLOW, REVIEW, or BLOCK.

Sessions API

Group fraud events into sessions and inspect timelines for account takeover and multi-accounting investigations.

Error Handling

Handle Naiza fraud API errors: status codes, payload shapes, retries, and what not to retry after a timeout.

Rate Limiting

Naiza fraud API rate limits: quota headers, throttling behavior, and how to back off without dropping decisions.

Decisions API

Decisions API for fraud evaluation. Events use ALLOW, REVIEW, or BLOCK. Some payloads also document approve, deny, and review.

Lists API

Manage fraud allowlists and blocklists: add confirmed-bad devices, exempt trusted identifiers, and keep REVIEW in between.

Feedback API

Write investigation outcomes back to Naiza so fraud rules and review queues learn from confirmed ALLOW, REVIEW, and BLOCK cases.

Webhooks API

Configure fraud and AML webhooks: deliver decisions, retry failed posts, and keep case systems idempotent.

AML Screening API

AML screening API for sanctions, PEP, and watchlist checks on customers and counterparties in Saudi onboarding and payments.