Enums

transaction_type

Allowed values (case-insensitive; stored uppercase):

Value	Typical use
`PAYIN`	Payment / funds in
`PAYOUT`	Disbursement
`RECURRING`	Recurring charge
`P2P`	Peer to peer
`TRANSFER`	Transfer
`REVERSAL`	Reversal / chargeback
`CASHOUT`	Cash withdrawal

payment_method

Value	Notes
`CARD`	Card. Include `client_type` when applicable (WEB, POS, MOBILE_APP)
`BANK_TRANSFER`	Bank transfer
`DIGITAL_WALLET`	Digital wallet
`PSE`	PSE (Colombia)
`BREB`	Bre-B instant payments (Colombia)
`CASH`	Cash
`CRYPTO`	Crypto

merchant_risk_tier

LOW, MEDIUM, HIGH — your precomputed merchant risk band.

client_type (optional)

WEB, WEB_BROWSER, MOBILE_APP, API, POS

fraud_type (feedback)

Required on POST /feedback when is_fraud=true. Omit the field when is_fraud=false. Pick the value that best describes the case after confirming fraud (investigation, chargeback, fraud alert, etc.):

Value	Meaning	When to use
`CARD_TESTING`	Stolen card testing	Small or sequential authorizations to validate PANs before a larger charge
`ATO`	Account takeover — compromised legitimate account	Unauthorized access: stolen credentials, sudden device/IP change, hijacked session
`MONEY_MULE`	Money mule account	Account receives illicit funds and quickly forwards or withdraws them
`SYNTHETIC_IDENTITY`	Synthetic identity	Fabricated profile (mix of real and fake data) used to open accounts or build credit
`FRIENDLY_FRAUD`	Friendly fraud (first-party)	Cardholder denies a charge they actually made or abuses the chargeback process
`MERCHANT_COLLUSION`	Merchant collusion	Merchant knowingly participates: fake transactions, profit splitting, covert processing
`ACCOUNT_FARMING`	Account farming	Bulk creation or hoarding of inactive accounts for later fraud use
`LAUNDERING`	Money laundering	Patterns to hide fund origin: structuring, round-tripping, layered transfers
`UNKNOWN`	Undetermined type	Confirmed fraud but no clear classification; use only if no other value applies

If the transaction was legitimate, send is_fraud=false and do not include fraud_type.

risk_level (response)

LOW, MEDIUM, HIGH, CRITICAL

decision (response)

Value	Meaning
`APPROVE`	Auto-accept
`REVIEW`	Manual review queue
`REJECT`	Block

decision_source (response)

Client-facing values: MODEL, RULES, FALLBACK.

Kairo Connect

Kairo Shield — Introduction

Kairo Shield — Getting started

Kairo Shield — API

Kairo Shield — Reference

Kairo Shield — Webhooks

Kairo Shield — Summary

transaction_type

payment_method

merchant_risk_tier

client_type (optional)

fraud_type (feedback)

risk_level (response)

decision (response)

decision_source (response)

​transaction_type

​payment_method

​merchant_risk_tier

​client_type (optional)

​fraud_type (feedback)

​risk_level (response)

​decision (response)

​decision_source (response)

transaction_type

payment_method

merchant_risk_tier

client_type (optional)

fraud_type (feedback)

risk_level (response)

decision (response)

decision_source (response)