Everything you need to integrate Naiza fraud detection and AML screening APIs into your application.

Overview

Naiza provides a RESTful JSON API for real-time fraud detection. Submit events with customer, device, and session context to receive instant ALLOW / BLOCK / REVIEW decisions with risk scores and matched rules.

Base URL: https://api.naiza.ai/api/v1

Authentication uses the x-api-key header with keys formatted as naiza_api_sk_live_... or naiza_api_sk_test_...

Decision Types

  • ALLOW — No fraud signals detected; proceed normally
  • REVIEW — Suspicious indicators found; require additional verification
  • BLOCK — High-confidence fraud detected; deny access immediately

Risk Score

Risk scores accumulate from SCORE-type rules during evaluation. A score of 100 or above triggers a REVIEW decision.

  • 0-25 Low — Normal behavior, minimal fraud indicators
  • 26-50 Medium — Some suspicious indicators present
  • 51-75 High — Multiple fraud indicators detected
  • 76-100+ Critical — Strong fraud signals; score >= 100 triggers REVIEW

Rate Limits

Default quota is 10,000 req/hr on a 1 hour rolling window. Exceeding the limit returns HTTP 429 with a Retry-After header.

Response time

Use the observed duration field in responses to track request processing time and monitor your integration.

Guides and API Reference

Interactive documentation covers Getting Started, Tenant Onboarding, Web SDK, Quick Start, Event Monitoring, AML Integration, Integration Examples, API Reference, Code Examples, and Best Practices. Each guide has a unique URL such as /docs/guides/getting-started and /docs/api-reference/events.

API Documentation

Everything you need to integrate Naiza's fraud detection API into your application

Guides

API Reference

API Overview

Naiza fraud detection API overview: base URL, authentication, versioning, and endpoints for events, decisions, lists, webhooks, and AML screening.

Authentication

Naiza fraud API authentication: use server API keys and short-lived Web SDK tokens, set request headers, and test your first authenticated call.

Web SDK API

Naiza Web SDK API for device fingerprinting: issue browser tokens, send device signals, and connect fingerprints to login and payment events.

Events API

Events API for fraud detection: submit login, payment, and signup events, then read the decision, risk score, and matching rules from Naiza.

Sessions API

Sessions API for fraud investigations: group events by session, inspect activity timelines, and connect account takeover and multi-accounting signals.

Error Handling

Naiza fraud API error handling: read HTTP status codes and error responses, configure retries, and recover requests after a timeout.

Rate Limiting

Naiza fraud API rate limits: read quota headers, handle HTTP 429 responses, and set retry delays while keeping event processing under control.

Decisions API

Decisions API reference: how Naiza evaluates an event and returns ALLOW, REVIEW, or BLOCK with the score and the rules that produced the decision.

Lists API

Manage fraud allowlists and blocklists: add confirmed-bad devices, exempt trusted identifiers, and keep REVIEW in between.

Feedback API

Write investigation outcomes back to Naiza so fraud rules and review queues learn from confirmed ALLOW, REVIEW, and BLOCK cases.

Webhooks API

Naiza fraud and AML webhooks: subscribe to decisions, verify signatures, retry deliveries, and connect each result to the right investigation case.

AML Screening API Reference

AML screening API for sanctions, PEP, and watchlist checks on customers and counterparties in Saudi onboarding and payments.