---
title: "Validate fraud prevention headers"
method: GET
path: "/test/fraud-prevention-headers/validate"
---

# Validate fraud prevention headers

`GET /test/fraud-prevention-headers/validate`

This resource validates fraud prevention headers submitted with this HTTP request.

## Headers

- `Accept` string, required
- `Authorization` string, required
- `Gov-*` string, required

## Response `200`

- object — Test Fraud Prevention Headers Response
  - `specVersion` string, required — The version of fraud prevention headers specification that the request was validated against. This value will change when a major version of the specification is released.
  - `message` string, required — A summary of the overall outcome of the fraud prevention header checks.
  - `errors` object[]
    - `code` union, required — A machine-readable code indicating the type of error.
      - 'INVALID_HEADER' — basic checks show that the header value supplied is not valid.
      - 'INVALID_HEADERS' — basic checks show that at least 1 of the header values supplied is not valid.
      - 'MISSING_HEADER' — header required for the connection method is not supplied.
      - 'EMPTY_HEADER' — header required for the connection method is empty.
    - `message` string, required — A description of the error.
    - `headers` string[], required — A list of headers that have the error.
  - `warnings` object[]
    - `code` union, required — A machine-readable code indicating the type of error.
      - 'POTENTIALLY_INVALID_HEADER' — basic checks show that the header value supplied is potentially invalid as per the current specification.
      - 'UNEXPECTED_HEADER' — header value supplied is not a fraud prevention header, or the fraud prevention header is not spelt correctly.
    - `message` string, required — A description of the error.
    - `headers` string[], required — A list of headers that have the advisory.

---

[API](https://skmtc.dev/hmrc/apis/txm-fph-validator-api.md) · [All operations](https://skmtc.dev/hmrc/apis/txm-fph-validator-api/llms.txt) · [OpenAPI document](https://skmtc-service-production.skmtc.workers.dev/v1/apis/hmrc/txm-fph-validator-api/revisions/afc3053ce245/schema)