---
title: "Authorized Order Review (Asynchronous)"
method: POST
path: "/api/submit"
tags: ["Post-Authorization Flow"]
---

# Authorized Order Review (Asynchronous)

`POST /api/submit`

The `/submit` endpoint sends transaction data to Riskified after the gateway authorizes the transaction for fraud analysis. Because this is an asynchronous endpoint, the fraud decision is returned via your pre-configured notification URL. If your account is under Shop Protection, transactions are automatically submitted for review.

The `/submit` endpoint returns a synchronous response confirming receipt of the order. Riskified’s fraud decision is then sent asynchronously to your notification endpoint.

If order data changes after an initial approved decision, call `/submit` again with the updated order details to receive a new decision. When sending updated order details, be sure to pass the same order ID that was used in the initial `/submit` request.

>Note for existing integrations:
If your integration already uses the `/create` or `/update` endpoints, no additional work is required. These endpoints provide the same order submission and decisioning functionality as `/submit`, and automatically send transactions to Riskified for review.

## Headers

- `x-riskified-shop-domain` string, required
- `x-riskified-hmac-sha256` string, required
- `content_type` 'application/json', required
- `accept` 'application/vnd.riskified.com; version=2', required

## Request body

- OrderWrapper
  - `order` Order, required
    - `id` string, required — The unique identifier for the order.
    - `email` string, required — The customer's email address.
    - `created_at` string, date-time, required — The date and time (ISO8601) when the order was first created.
    - `currency` string, required — The three letter code (ISO 4217) for the currency used for the payment.
    - `gateway` string, required — The payment gateway used. If the transaction was processed using 3D Secure (3DS), append `_3ds` to the gateway name, for example, `adyen_3ds`.
    - `browser_ip` string, required — The customer's browser IP address at the time of order checkout.
    - `total_price` number, float, required — The sum of all the prices of all the items in the order, taxes and discounts included (must be positive). Please note, rewards (e.g. gift cards) or store credits should be reflected under the charge_free_payment_details object, but shouldn't be subtracted from the total price.
    - `total_discounts` number, float, required — The total amount of the discounts to be applied to the price of the order.
    - `referring_site` string — The webpage from which the customer accessed the shop.
    - `line_items` LineItem[], required — A list of line item objects, each one containing information about an item in the order.
      - union
        - PhysicalLineItem — A line item that is a physical product. This is the default type of line item.
          - `price` number, float, required — The price of one unit of the product.
          - `quantity` integer, required — The number of items that were ordered.
          - `title` string, required — The title of the item.
          - `product_id` string, required — The id of the item. Limited to 256 characters
          - `category` string, required — The category of the item. For event tickets, the category of the event.
          - `brand` string — The brand name of the item.
          - `product_type` 'physical', required — The product type should contain one the following value: physical.
          - `requires_shipping` boolean, required — States whether or not the item requires shipping. This field is important for merchants dealing with digital goods.
          - `sku` string — A unique identifier of the item in the fulfillment.
          - `condition` string — Description of the physical condition of the item, mostly relevant for used items.
          - `seller` Seller
            - `customer` Customer, required
              - …
            - `correspondence` integer — Number of messages sent between the customer and the seller.
            - `price_negotiated` boolean — True if the seller and customer negotiated the price between themselves.
            - `starting_price` string, float — The original price of the order, prior to any negotiation between seller and customer.
          - `sub_category` string — The sub-category of the item. For event tickets, the sub-category of the event.
          - `delivered_at` string — The planned delivery date of the product or item.
          - `delivered_to` 'shipping_address' | 'store_pickup' — **(Conditional Requirement)** Required for mixed shipment orders. The delivery type must contain one of the following values shipping_address: The Order's shipping address is the end user's entered address. store_pickup: If the end user selects store pickup, the shipping address value should contain the store's address.
          - `drop_point` string — If the end user is handing the package at a drop-off point, the shipping address value should contain the drop off location address
          - `size` string — The size of the item (e.g. shirt or shoe size)
          - `registry_type` 'wedding' | 'baby' | 'other' — The registry type must contain one of the following values: wedding, baby, other
          - `shipping_address_id` string — **(Conditional Requirement)** unique ID, is required in case of multiple shipping addresses.
        - DigitalLineItem
          - `price` number, float, required — The price of one unit of the product.
          - `quantity` integer, required — The number of items that were ordered.
          - `title` string, required — The title of the item.
          - `product_id` string, required — The id of the item. Limited to 256 characters
          - `category` string, required — The category of the item. For event tickets, the category of the event.
          - `brand` string — The brand name of the item.
          - `product_type` 'digital', required — The product type should contain the following value: digital
          - `requires_shipping` boolean, required — Should be `false` for digital items. States whether or not the item requires shipping.
          - `sku` string — A unique identifier of the item in the fulfillment.
          - `condition` string — Description of the physical condition of the item, mostly relevant for used items.
          - `seller` Seller
            - `customer` Customer, required
              - …
            - `correspondence` integer — Number of messages sent between the customer and the seller.
            - `price_negotiated` boolean — True if the seller and customer negotiated the price between themselves.
            - `starting_price` string, float — The original price of the order, prior to any negotiation between seller and customer.
          - `sub_category` string — The sub-category of the item. For event tickets, the sub-category of the event.
          - `delivered_at` string — The planned delivery date of the product or item.
          - `delivered_to` 'shipping_address' | 'store_pickup' — **(Conditional Requirement)** Required for mixed shipment orders. The delivery type must contain one of the following values shipping_address: The Order's shipping address is the end user's entered address. store_pickup: If the end user selects store pickup, the shipping address value should contain the store's address.
          - `drop_point` string — If the end user is handing the package at a drop-off point, the shipping address value should contain the drop off location address
          - `size` string — The size of the item (e.g. shirt or shoe size)
          - `registry_type` 'wedding' | 'baby' | 'other' — The registry type must contain one of the following values: wedding, baby, other
          - `shipping_address_id` string — **(Conditional Requirement)** unique ID, is required in case of multiple shipping addresses.
          - `sender_name` string — The sender name.
          - `photo_uploaded` boolean — Indicating whether a photo was uploaded.
          - `photo_url` string — The photo url (if uploaded).
          - `message` string — The card's message.
          - `display_name` string — The display name.
          - `greeting_photo_url` string — The greeting photo url (if exists).
          - `greeting_message` string — The greeting message.
          - `card_type` string — The card's type.
          - `recipient` Recipient, required
            - `email` string, required — Recipient email address
            - `phone` string — Recipient phone number
            - `social` SocialDetails
              - …
            - `account_number` string — **(Conditional Requirement)** Required for ACH transactions. The full account number.
            - `routing_number` string — **(Conditional Requirement)** Required for ACH transactions. The routing number (ABA) of the customer's bank.
            - `crypto_wallet` CryptoWallet — A crypto wallet associated with the customer account.
              - …
        - TravelLineItem
          - `price` number, float, required — The price of one unit of the product.
          - `quantity` integer, required — The number of items that were ordered.
          - `title` string, required — The title of the item.
          - `product_id` string, required — The id of the item. Limited to 256 characters
          - `category` string, required — The category of the item. For event tickets, the category of the event.
          - `brand` string — The brand name of the item.
          - `product_type` 'travel', required — The product type should contain the following value: travel.
          - `requires_shipping` boolean, required — Should be `false` for travel items that don't require shipping.
          - `sku` string — A unique identifier of the item in the fulfillment.
          - `condition` string — Description of the physical condition of the item, mostly relevant for used items.
          - `seller` Seller
            - `customer` Customer, required
              - …
            - `correspondence` integer — Number of messages sent between the customer and the seller.
            - `price_negotiated` boolean — True if the seller and customer negotiated the price between themselves.
            - `starting_price` string, float — The original price of the order, prior to any negotiation between seller and customer.
          - `sub_category` string — The sub-category of the item. For event tickets, the sub-category of the event.
          - `delivered_at` string — The planned delivery date of the product or item.
          - `delivered_to` 'shipping_address' | 'store_pickup' — **(Conditional Requirement)** Required for mixed shipment orders. The delivery type must contain one of the following values shipping_address: The Order's shipping address is the end user's entered address. store_pickup: If the end user selects store pickup, the shipping address value should contain the store's address.
          - `drop_point` string — If the end user is handing the package at a drop-off point, the shipping address value should contain the drop off location address
          - `size` string — The size of the item (e.g. shirt or shoe size)
          - `registry_type` 'wedding' | 'baby' | 'other' — The registry type must contain one of the following values: wedding, baby, other
          - `shipping_address_id` string — **(Conditional Requirement)** unique ID, is required in case of multiple shipping addresses.
          - `leg_id` string, required — The current leg id.For flight tickets, flight number (e.g. '101').For bus tickets, bus number (e.g: 'A7').
          - `departure_city` string, required — The name of the city of departure for the current leg.
          - `departure_country_code` string, required — The 2 letter country code (ISO 3166-1 alpha-2) for the departure country of the current leg.
          - `arrival_city` string, required — The name of the city of arrival for the current leg.
          - `arrival_country_code` string, required — The 2 letter country code (ISO 3166-1 alpha-2) for the arrival country of the current leg.
          - `departure_date` string, date-time, required — Date and time of departure for the current leg. Add corresponding timezone indication or ensure correct UTC standardization (ISO8601) e.g. 2019-07-24T20:55:00+2:00
          - `carrier_code` string — A publicly agreed code describing the carrier/company conducting the current leg. For Flights: The IATA 2 letter carrier code.
          - `route_index` integer, required — A running index (starts with 1), describing the order of routes by time. Each route_index and leg_index combination constitutes an individual line item. The two (2) route example below requires four (4) line items. E.g: If an order contains 2 Routes: New-York->London->Paris (connection in London) New-York->London should have route_index=1, leg_index=1 London->Paris should have route_index=1, leg_index=2 Paris->London->New-York Paris->London should have route_index=2, leg_index=1 London->New-York should have route_index=2, leg_index=2
          - `leg_index` integer, required — A running index (starts with 1), describing the order of legs in the same route. For more details, see route_index field.
          - `transport_method` 'plane' | 'ship' | 'bus' | 'train' | 'tram', required — The method of transportation.
          - `departure_port_code` string — Departure port code for the current leg. For flights: the 3 letter IATA airport code.
          - `arrival_port_code` string — Arrival port code for the current leg. For flights: the 3 letter IATA airport code.
          - `arrival_date` string, date-time — **(Conditional Requirement)** Required for Flights. Date and time of arrival for the current leg. Add corresponding timezone indication or ensure correct UTC standardization (ISO8601) e.g. 2019-07-24T20:55:00+2:00
          - `carrier_name` string — The name of the carrier/company conducting the current leg.
          - `ticket_class` string — The class for this leg's ticket (e.g. business, economy, first).
        - RidesLineItem
          - `price` number, float, required — The price of one unit of the product.
          - `quantity` integer, required — The number of items that were ordered.
          - `title` string, required — The title of the item.
          - `product_id` string, required — The id of the item. Limited to 256 characters
          - `category` string, required — The category of the item. For event tickets, the category of the event.
          - `brand` string — The brand name of the item.
          - `product_type` 'ride', required — The product type should contain the following value: ride.
          - `requires_shipping` boolean, required — Should be `false` for digital items. States whether or not the item requires shipping.
          - `sku` string — A unique identifier of the item in the fulfillment.
          - `condition` string — Description of the physical condition of the item, mostly relevant for used items.
          - `seller` Seller
            - `customer` Customer, required
              - …
            - `correspondence` integer — Number of messages sent between the customer and the seller.
            - `price_negotiated` boolean — True if the seller and customer negotiated the price between themselves.
            - `starting_price` string, float — The original price of the order, prior to any negotiation between seller and customer.
          - `sub_category` string — The sub-category of the item. For event tickets, the sub-category of the event.
          - `delivered_at` string — The planned delivery date of the product or item.
          - `delivered_to` 'shipping_address' | 'store_pickup' — **(Conditional Requirement)** Required for mixed shipment orders. The delivery type must contain one of the following values shipping_address: The Order's shipping address is the end user's entered address. store_pickup: If the end user selects store pickup, the shipping address value should contain the store's address.
          - `drop_point` string — If the end user is handing the package at a drop-off point, the shipping address value should contain the drop off location address
          - `size` string — The size of the item (e.g. shirt or shoe size)
          - `registry_type` 'wedding' | 'baby' | 'other' — The registry type must contain one of the following values: wedding, baby, other
          - `shipping_address_id` string — **(Conditional Requirement)** unique ID, is required in case of multiple shipping addresses.
          - `pickup_date` string, date-time, required — Ride pickup date. Add corresponding timezone indication or ensure correct UTC standardization (ISO8601) e.g. 2019-07-24T14:55:00+2:00
          - `route_index` integer, required — A running index (starts with 1), describing the order of routes by time. E.g: A return trip will be represented in two line_items, the onward trip line_item will be assigned with route_index = 1, the return trip line_item with route_index = 2.
          - `leg_index` integer, required — A running index (starts with 1), describing the order of legs in the same route. E.g: Will always equal 1, unless the rider needs to change a vehicle within a route.
          - `pickup_latitude` number, float — The latitude part of the pickup location coordinates.
          - `pickup_longitude` number, float — The longitude part of the pickup location coordinates.
          - `pickup_address` Address[] — Pickup location address.
            - `first_name` string, required — The first name of the person associated with the address.
            - `last_name` string, required — The last name of the person associated with the address.
            - `address1` string, required — The street name of the address.
            - `country` string, required — The name of the country address.
            - `country_code` string, required — The 2 letter country code (ISO 3166-1 alpha-2) of the country address
            - `phone` string, required — The phone number at the address.
            - `city` string, required — The city of the address.
            - `zip` string, required — The zip or postal code of the address.
            - `address2` string — An optional additional field for the street address.
            - `company` string — Required if the address is associated to a company. The company of the person associated with the address.
            - `additional_phone` string — Additional phone number at the address.
            - `verified_phone` boolean — Indicates whether the provided phone number was verified.
            - `province` string, required — The name of the state or province of the address.
            - `province_code` string — The two-letter abbreviation of the state or province of the address.
            - `neighborhood` string — The district or city division of the address. The neighborhood should be provided if used in a country’s official postal addresses. Examples of this include the Colonia in Mexico or Bairro in Brazil.
            - `latitude` number, float — The latitude coordinates of the address.
            - `longitude` number, float — The longitude coordinates of the address.
            - `id` string — unique ID, is required in case of multiple shipping addresses.
          - `dropoff_date` string, date-time — Ride dropoff date. Add corresponding timezone indication or ensure correct UTC standardization (ISO8601) e.g. 2019-07-24T14:55:00+2:00
          - `dropoff_latitude` number, float — The latitude part of the dropoff location coordinates.
          - `dropoff_longitude` number, float — The longitude part of the dropoff location coordinates.
          - `dropoff_address` Address[] — Dropoff location address.
            - `first_name` string, required — The first name of the person associated with the address.
            - `last_name` string, required — The last name of the person associated with the address.
            - `address1` string, required — The street name of the address.
            - `country` string, required — The name of the country address.
            - `country_code` string, required — The 2 letter country code (ISO 3166-1 alpha-2) of the country address
            - `phone` string, required — The phone number at the address.
            - `city` string, required — The city of the address.
            - `zip` string, required — The zip or postal code of the address.
            - `address2` string — An optional additional field for the street address.
            - `company` string — Required if the address is associated to a company. The company of the person associated with the address.
            - `additional_phone` string — Additional phone number at the address.
            - `verified_phone` boolean — Indicates whether the provided phone number was verified.
            - `province` string, required — The name of the state or province of the address.
            - `province_code` string — The two-letter abbreviation of the state or province of the address.
            - `neighborhood` string — The district or city division of the address. The neighborhood should be provided if used in a country’s official postal addresses. Examples of this include the Colonia in Mexico or Bairro in Brazil.
            - `latitude` number, float — The latitude coordinates of the address.
            - `longitude` number, float — The longitude coordinates of the address.
            - `id` string — unique ID, is required in case of multiple shipping addresses.
          - `transport_method` 'taxi' | 'car' | 'rv' | 'bus' | 'plane' | 'ship' | 'train' | 'tram' | 'cruise' — The transport method used, such as: taxi, car, rv, bus, plane, ship, train, tram, cruise
          - `price_by` string — Pricing method: meter/fixed.
          - `vehicle_class` string — Vehicle class, such as: economy, executive, van, etc.
          - `carrier_name` string — Ride/taxi company name.
          - `driver_id` string — Driver ID/vehicle number (if self driven).
          - `tariff` string — Relevant tariff for the ride, such as: regular, night, 2, etc.
          - `note_to_driver` string — Additional message to driver.
          - `meet_n_greet` string — Airport/pickup meet and greet message.
          - `cancellation_policy` string — Reservation cancellation policy.
          - `authorized_payment` number, float — Authorized pre-payment value for this ride (order currency).
          - `damage_excess` number, float — Amount the customer is liable for in case of damage to the vehicle.
        - EventsLineItem
          - `price` number, float, required — The price of one unit of the product.
          - `quantity` integer, required — The number of items that were ordered.
          - `title` string, required — The title of the item.
          - `product_id` string, required — The id of the item. Limited to 256 characters
          - `category` string, required — The category of the item. For event tickets, the category of the event.
          - `brand` string — The brand name of the item.
          - `product_type` 'event', required — The product type should contain the following value: event
          - `requires_shipping` boolean, required — Should be equal to `false` for the digital items that don't require shipping.
          - `sku` string — A unique identifier of the item in the fulfillment.
          - `condition` string — Description of the physical condition of the item, mostly relevant for used items.
          - `seller` Seller
            - `customer` Customer, required
              - …
            - `correspondence` integer — Number of messages sent between the customer and the seller.
            - `price_negotiated` boolean — True if the seller and customer negotiated the price between themselves.
            - `starting_price` string, float — The original price of the order, prior to any negotiation between seller and customer.
          - `sub_category` string — The sub-category of the item. For event tickets, the sub-category of the event.
          - `delivered_at` string — The planned delivery date of the product or item.
          - `delivered_to` 'shipping_address' | 'store_pickup' — **(Conditional Requirement)** Required for mixed shipment orders. The delivery type must contain one of the following values shipping_address: The Order's shipping address is the end user's entered address. store_pickup: If the end user selects store pickup, the shipping address value should contain the store's address.
          - `drop_point` string — If the end user is handing the package at a drop-off point, the shipping address value should contain the drop off location address
          - `size` string — The size of the item (e.g. shirt or shoe size)
          - `registry_type` 'wedding' | 'baby' | 'other' — The registry type must contain one of the following values: wedding, baby, other
          - `shipping_address_id` string — **(Conditional Requirement)** unique ID, is required in case of multiple shipping addresses.
          - `event_date` string, date-time, required — The date and time (ISO8601) of the event.
          - `city` string, required — The city where the event will take place in.
          - `country_code` string, required — The 2 letter country code (ISO 3166-1 alpha-2) of the country where the event takes place.
          - `section` string — The assigned seating section in the venue.
          - `latitude` number, float — The latitude part of the coordinates of the event location.
          - `longitude` number, float — The longitude part of the coordinates of the event location.
        - AccommodationLineItem
          - `price` number, float, required — The price of one unit of the product.
          - `quantity` integer, required — The number of items that were ordered.
          - `title` string, required — The title of the item.
          - `product_id` string, required — The id of the item. Limited to 256 characters
          - `category` string, required — The category of the item. For event tickets, the category of the event.
          - `brand` string — The brand name of the item.
          - `product_type` 'accommodation', required — The product type should contain the following value: ccommodation
          - `requires_shipping` boolean, required — Should be `false` for the items that don't require shipping.
          - `sku` string — A unique identifier of the item in the fulfillment.
          - `condition` string — Description of the physical condition of the item, mostly relevant for used items.
          - `seller` Seller
            - `customer` Customer, required
              - …
            - `correspondence` integer — Number of messages sent between the customer and the seller.
            - `price_negotiated` boolean — True if the seller and customer negotiated the price between themselves.
            - `starting_price` string, float — The original price of the order, prior to any negotiation between seller and customer.
          - `sub_category` string — The sub-category of the item. For event tickets, the sub-category of the event.
          - `delivered_at` string — The planned delivery date of the product or item.
          - `delivered_to` 'shipping_address' | 'store_pickup' — **(Conditional Requirement)** Required for mixed shipment orders. The delivery type must contain one of the following values shipping_address: The Order's shipping address is the end user's entered address. store_pickup: If the end user selects store pickup, the shipping address value should contain the store's address.
          - `drop_point` string — If the end user is handing the package at a drop-off point, the shipping address value should contain the drop off location address
          - `size` string — The size of the item (e.g. shirt or shoe size)
          - `registry_type` 'wedding' | 'baby' | 'other' — The registry type must contain one of the following values: wedding, baby, other
          - `shipping_address_id` string — **(Conditional Requirement)** unique ID, is required in case of multiple shipping addresses.
          - `check_in_date` string, date-time, required — The room check-in date (ISO8601).
          - `city` string, required — The accommodation city.
          - `country_code` string, required — The 2 letter country code (ISO 3166-1 alpha-2) of the country where the accommodation is located.
          - `check_out_date` string, date-time — The room check-out date.
          - `accommodation_type` string — The accommodation type, such as hotel, B&B, etc.
          - `room_type` string — The room type, such as single, double, suite, etc.
          - `number_of_guests` integer — The number of guests expected in the room.
          - `rating` string — The accommodation rating, as published on the merchant's website.
          - `cancellation_policy` string, required — The booking cancellation policy.
        - RemittanceLineItem
          - `price` number, float, required — The price of the remittance line item.
          - `quantity` 1, required — Quantity must always be 1 for remittance line items.
          - `title` string, required — Describes the remittance type (e.g., ACH Transfer, Cash Transfer, Bank Deposit, Cash at Agent, Mobile wallet).
          - `category` string, required — The category of the item: ACH, Wallet Deposit, etc.
          - `product_type` 'remittance', required — Specifies that this line item is a remittance type.
          - `product_id` string, required — The id of the item. Limited to 256 characters
          - `requires_shipping` true, required — Always true for remittance line items.
          - `recipient` RecipientACH
            - `account_number` string, required — Required for bank deposits. The full account number.
            - `routing_number` string, required — Required for bank deposits. The routing number (ABA) of the customer's bank.
            - `bank_code` string — Bank code.
            - `email` string — Recipient email address
            - `created_at` number — Time when recipient was added to customer's account.
            - `updated_at` number — Time when recipient details were last updated.
            - `self_recipient` boolean, required — Indication if the money are transfered to the account owner.
        - CryptoLineItem — Represents a cryptocurrency transaction line item.
          - `price` number, float, required — The amount spent (in order currency) on cryptocurrency or asset(s).
          - `quantity` 1, required — Quantity must always be 1 for cryptocurrency transactions.
          - `title` string, required — The abbreviation of the cryptocurrency in all caps.
          - `product_id` string, required — The full asset name of the cryptocurrency.
          - `product_type` 'crypto', required — Specifies that this line item represents a digital asset.
          - `category` 'one_time_buy' | 'one_time_sell' | 'one_time_order' | 'recurring_buy' | 'recurring_sell' | 'checkout' | 'nft', required — The type of cryptocurrency transaction. Use `checkout` if purchasing at a third party merchant using cryptocurrency.
          - `brand` string — The brand name of the item.
          - `requires_shipping` false | true, required — States whether or not the item requires shipping. Should be set to False unless crypto is being sent to another customer as remittance.
          - `sku` string — A unique identifier of the item in the fulfillment.
          - `condition` string — Description of the physical condition of the item, mostly relevant for used items.
          - `seller` Seller
            - `customer` Customer, required
              - …
            - `correspondence` integer — Number of messages sent between the customer and the seller.
            - `price_negotiated` boolean — True if the seller and customer negotiated the price between themselves.
            - `starting_price` string, float — The original price of the order, prior to any negotiation between seller and customer.
          - `sub_category` string — The sub-category of the item. For event tickets, the sub-category of the event.
          - `delivered_at` string, date-time — The timestamp indicating when the cryptocurrency was delivered to the wallet.
          - `delivered_to` 'shipping_address' | 'store_pickup' — **(Conditional Requirement)** Required for mixed shipment orders. The delivery type must contain one of the following values shipping_address: The Order's shipping address is the end user's entered address. store_pickup: If the end user selects store pickup, the shipping address value should contain the store's address.
          - `recipient` RecipientCrypto, required
            - `email` string, email — Recipient email address.
            - `phone` string — Recipient phone number.
            - `crypto_wallet` CryptoWallet, required — A crypto wallet associated with the customer account.
              - …
          - `drop_point` string — If the end user is handing the package at a drop-off point, the shipping address value should contain the drop off location address
          - `size` string — The size of the item (e.g. shirt or shoe size)
          - `registry_type` 'wedding' | 'baby' | 'other' — The registry type must contain one of the following values: wedding, baby, other
          - `shipping_address_id` string — **(Conditional Requirement)** unique ID, is required in case of multiple shipping addresses.
          - `sender_name` string — The sender name.
          - `photo_uploaded` boolean — Indicating whether a photo was uploaded.
          - `photo_url` string — The photo url (if uploaded).
          - `message` string — The card's message.
          - `display_name` string — The display name.
          - `greeting_photo_url` string — The greeting photo url (if exists).
          - `greeting_message` string — The greeting message.
          - `card_type` string — The card's type.
        - GiftcardLineItem
          - `price` number, float, required — The price of one unit of the product.
          - `quantity` integer, required — The number of items that were ordered.
          - `title` string, required — The title of the item.
          - `product_id` string, required — The id of the item. Limited to 256 characters
          - `category` string, required — The category of the item. For event tickets, the category of the event.
          - `brand` string — The brand name of the item.
          - `product_type` 'giftcard', required — The product type should contain the following value: giftcard
          - `requires_shipping` boolean, required — States whether or not the item requires shipping. Set to True for a physical gift card and False for a digital gift card.
          - `sku` string — A unique identifier of the item in the fulfillment.
          - `condition` string — Description of the physical condition of the item, mostly relevant for used items.
          - `seller` Seller
            - `customer` Customer, required
              - …
            - `correspondence` integer — Number of messages sent between the customer and the seller.
            - `price_negotiated` boolean — True if the seller and customer negotiated the price between themselves.
            - `starting_price` string, float — The original price of the order, prior to any negotiation between seller and customer.
          - `sub_category` string — The sub-category of the item. For event tickets, the sub-category of the event.
          - `delivered_at` string — The planned delivery date of the product or item.
          - `delivered_to` 'shipping_address' | 'store_pickup' — **(Conditional Requirement)** Required for mixed shipment orders. The delivery type must contain one of the following values shipping_address: The Order's shipping address is the end user's entered address. store_pickup: If the end user selects store pickup, the shipping address value should contain the store's address.
          - `drop_point` string — If the end user is handing the package at a drop-off point, the shipping address value should contain the drop off location address
          - `size` string — The size of the item (e.g. shirt or shoe size)
          - `registry_type` 'wedding' | 'baby' | 'other' — The registry type must contain one of the following values: wedding, baby, other
          - `shipping_address_id` string — **(Conditional Requirement)** unique ID, is required in case of multiple shipping addresses.
          - `sender_name` string — The sender name.
          - `photo_uploaded` boolean — Indicating whether a photo was uploaded.
          - `photo_url` string — The photo url (if uploaded).
          - `message` string — The card's message.
          - `display_name` string — The display name.
          - `greeting_photo_url` string — The greeting photo url (if exists).
          - `greeting_message` string — The greeting message.
          - `card_type` string — The card's type.
          - `recipient` Recipient, required
            - `email` string, required — Recipient email address
            - `phone` string — Recipient phone number
            - `social` SocialDetails
              - …
            - `account_number` string — **(Conditional Requirement)** Required for ACH transactions. The full account number.
            - `routing_number` string — **(Conditional Requirement)** Required for ACH transactions. The routing number (ABA) of the customer's bank.
            - `crypto_wallet` CryptoWallet — A crypto wallet associated with the customer account.
              - …
    - `shipping_lines` ShippingLine[] — **(Conditional Requirement)** A list of shipping line objects, each of which details the shipping methods used. Required when a physical item is being shipped OR for money remittance RECIPIENT data.
      - `price` number, float, required — The price of the shipping method. Should be defaulted to 0 for money remittance.
      - `title` string, required — The title of the shipping method. Should be "Bank Deposit" for money remittance.
      - `code` string — Code of the shipping method.
      - `company` string — The name of the shipping company.
      - `shipping_address_id` string — **(Conditional Requirement)** unique ID, is required in case of multiple shipping addresses.
    - `payment_details` PaymentDetails[], required — A list of payment details. Should be passed as an array of nested payment_details objects. In cases where several payment methods are sent in the array, the first payment method shall correspond to the first billing address, etc.
      - union
        - CreditCardPaymentDetailsPreAuth
          - `payment_type` 'card', required — Indicates the type of payment.
          - `credit_card_bin` string, required — The issuer identification number (IIN), formerly known as bank identification number (BIN) of the customer's credit card. Made up of the first 6 or 8 digits of the credit card number (per value received from the Payment Service Providers/tokenization response).
          - `credit_card_company` string — **(Conditional Requirement)** Required for PSD2 Optimization implementation. The company who issued the customer's credit card
          - `credit_card_number` string, required — The credit card number, with leading digits redacted with Xs (only the last four digits are not hidden)
          - `credit_card_country` string — **(Conditional Requirement)** Required for PSD2 Optimization implementation. The issuer 2 letter country code. These codes are used to identify the country name
          - `credit_card_token` string — The token returned from the credit card company
          - `cardholder_name` string — Name of the cardholder
          - `mid` string — The merchant account id at the payment gateway
          - `id` string — A unique identifier of the payment detail object within the array of payment details. When this is not provided, a default running number will be attached to each element in the payment details array.
          - `stored_payment_created_at` string, date-time — **(Conditional Requirement)** Required for CVV recommendations. Date and time (ISO8601) when the payment method was saved to the customer's account
          - `stored_payment_updated_at` string, date-time — **(Conditional Requirement)** Required for CVV recommendations. Most recent date and time (ISO8601) when the saved payment method was updated by the customer
          - `installments` integer — **(Conditional Requirement)** Required for merchants residing in Brazil Number of payment installments
          - `acquirer_bin` string — The acquirer identification number (IIN), formerly known as bank identification number (BIN) of the merchant's acquirer
          - `acquirer_region` 'NONEU' | 'EU' — **(Conditional Requirement)** Required for PSD2 Optimization implementation.
          - `expiry_month` integer — The payment expiration month.
          - `expiry_year` integer — The payment expiration year; a 4-digit integer formatted as YYYY
          - `initial_payment_amount` number, float — The initial amount paid.
          - `payment_frequency` integer — The frequency of payments made.
          - `billing_address_id` string — **(Conditional Requirement)** Unique ID, is required in case of multiple billing addresses.
        - PaypalPaymentDetailsDetailsPreAuth
          - `payment_type` 'paypal', required — Indicates the type of payment.
          - `payer_email` string, required — The payer email assigned to his paypal account as received from paypal
          - `mid` string — The merchant account id at the payment gateway
          - `id` string — A unique identifier of the payment detail object within the array of payment details. When this is not provided, a default running number will be attached to each element in the payment details array.
          - `acquirer_bin` string — The acquirer identification number (IIN), formerly known as bank identification number (BIN) of the merchant's acquirer
        - BankWirePaymentDetails
          - `payment_type` 'bank_transfer', required — Indicates the type of payment.
          - `account_number` string, required — The full account number
          - `routing_number` string, required — The routing number (ABA) of the customer's bank
          - `token` string — **(Conditional Requirement)** Required for Plaid Partner integration. The Plaid processor_token value created by calling /processor/token/create. Please see further documentation for Plaid integration.
          - `account_balance` AccountBalance — An object containing account balance information as provided by the Payment Service Provider or bank. If provided, this object should contain all required fields.
            - `available_balance` integer, required — The amount in the customer’s bank account.
            - `service_name` 'plaid' | 'mx' | 'stripe' | 'truelayer' | 'klarna' | 'visa' | 'mastercard' | 'yodlee', required — The service used to complete the transaction and to request the bank account balance.
            - `updated_at` string, date-time, required — The date and time (ISO8601) when the account balance was queried.
            - `currency_code` string, required — The three letter code (ISO 4217) for the currency of the account balance.
          - `account_identity` AccountIdentity — An object containing identity information about the purchasing customer as provided by the Payment Service Provider or bank.
            - `names` string[] — A list of names associated with the bank account.
            - `addresses` AccountIdentityAddress[] — A list of addresses associated with the customer bank account.
              - …
            - `phone_numbers` string[] — A list of phone numbers associated with the customer bank account.
            - `emails` string[] — A list of emails associated with the customer bank account.
        - DigitalWalletsPaymentDetails
          - `payment_type` 'apple_pay' | 'google_pay' | 'samsung_pay' | 'wechat_pay' | 'amazon_pay' | 'alipay', required — Indicates the type of payment.
          - `credit_card_bin` string — The issuer identification number (IIN), formerly known as bank identification number (BIN) of the customer's credit card. Made up of the first 6 or 8 digits of the credit card number (per value received from the Payment Service Providers/tokenization response).
          - `credit_card_company` string — **(Conditional Requirement)** Required for PSD2 Optimization implementation. The company who issued the customer's credit card
          - `credit_card_number` string — The credit card number, with leading digits redacted with Xs (only the last four digits are not hidden)
          - `credit_card_country` string — **(Conditional Requirement)** Required for PSD2 Optimization implementation. The issuer 2 letter country code. These codes are used to identify the country name
          - `credit_card_token` string — The token returned from the credit card company
          - `cardholder_name` string — Name of the cardholder
          - `mid` string — The merchant account id at the payment gateway
          - `id` string — A unique identifier of the payment detail object within the array of payment details. When this is not provided, a default running number will be attached to each element in the payment details array.
          - `stored_payment_created_at` string, date-time — **(Conditional Requirement)** Required for CVV recommendations. Date and time (ISO8601) when the payment method was saved to the customer's account
          - `stored_payment_updated_at` string, date-time — **(Conditional Requirement)** Required for CVV recommendations. Most recent date and time (ISO8601) when the saved payment method was updated by the customer
          - `installments` integer — **(Conditional Requirement)** Required for merchants residing in Brazil Number of payment installments
          - `acquirer_bin` string — The acquirer identification number (IIN), formerly known as bank identification number (BIN) of the merchant's acquirer
          - `acquirer_region` 'NONEU' | 'EU' — **(Conditional Requirement)** Required for PSD2 Optimization implementation.
          - `expiry_month` integer — The payment expiration month.
          - `expiry_year` integer — The payment expiration year; a 4-digit integer formatted as YYYY
          - `initial_payment_amount` number, float — The initial amount paid.
          - `payment_frequency` integer — The frequency of payments made.
          - `billing_address_id` string — **(Conditional Requirement)** Unique ID, is required in case of multiple billing addresses.
        - BuyNowPayLaterPaymentDetails
          - `payment_type` 'bnpl', required — Indicates the type of payment.
          - `payment_frequency` integer — Number of days between each payment.
          - `initial_payment_amount` number, float — Dollar amount of the first installment.
          - `installments` integer — Number of payment installments.
        - NonChbPaymentDetails
          - `payment_type` 'gift_card' | 'store_credit' | 'rewards_points', required — Indicates the type of payment.
    - `customer` Customer, required
      - `email` string, required — The customer's email address.
      - `verified_email` boolean — **(Recommended)** Indicates whether the merchant verified the customer’s email.
      - `first_name` string, required — The first name of the customer.
      - `last_name` string, required — The last name of the customer.
      - `id` string — The customer’s unique ID in the merchant’s system. Required in the case of a registered customer.
      - `created_at` string, required — The timestamp of the initial registration of the customer's account in the merchant's systems.
      - `orders_count` integer — The number of orders made by the customer on the site in the past.
      - `account_type` string — Required if there are multiple account types. The customer’s account type. Recommended values include: * guest * registered * premium * business
      - `phone` string — The customer’s phone number.
      - `verified_phone` boolean — Indicates whether the customer's phone number was verified.
      - `date_of_birth` string, date — Customer’s date of birth. Date part only (ISO8601).
      - `gender` 'male' | 'female' — The customer's gender. **Possible values:** - `male` - `female`
      - `user_name` string — Required in case the site user name is not the email address.
      - `address` Address
        - `first_name` string, required — The first name of the person associated with the address.
        - `last_name` string, required — The last name of the person associated with the address.
        - `address1` string, required — The street name of the address.
        - `country` string, required — The name of the country address.
        - `country_code` string, required — The 2 letter country code (ISO 3166-1 alpha-2) of the country address
        - `phone` string, required — The phone number at the address.
        - `city` string, required — The city of the address.
        - `zip` string, required — The zip or postal code of the address.
        - `address2` string — An optional additional field for the street address.
        - `company` string — Required if the address is associated to a company. The company of the person associated with the address.
        - `additional_phone` string — Additional phone number at the address.
        - `verified_phone` boolean — Indicates whether the provided phone number was verified.
        - `province` string, required — The name of the state or province of the address.
        - `province_code` string — The two-letter abbreviation of the state or province of the address.
        - `neighborhood` string — The district or city division of the address. The neighborhood should be provided if used in a country’s official postal addresses. Examples of this include the Colonia in Mexico or Bairro in Brazil.
        - `latitude` number, float — The latitude coordinates of the address.
        - `longitude` number, float — The longitude coordinates of the address.
        - `id` string — unique ID, is required in case of multiple shipping addresses.
    - `billing_address` Address[], required — The mailing address associated with the payment method.
      - `first_name` string, required — The first name of the person associated with the address.
      - `last_name` string, required — The last name of the person associated with the address.
      - `address1` string, required — The street name of the address.
      - `country` string, required — The name of the country address.
      - `country_code` string, required — The 2 letter country code (ISO 3166-1 alpha-2) of the country address
      - `phone` string, required — The phone number at the address.
      - `city` string, required — The city of the address.
      - `zip` string, required — The zip or postal code of the address.
      - `address2` string — An optional additional field for the street address.
      - `company` string — Required if the address is associated to a company. The company of the person associated with the address.
      - `additional_phone` string — Additional phone number at the address.
      - `verified_phone` boolean — Indicates whether the provided phone number was verified.
      - `province` string, required — The name of the state or province of the address.
      - `province_code` string — The two-letter abbreviation of the state or province of the address.
      - `neighborhood` string — The district or city division of the address. The neighborhood should be provided if used in a country’s official postal addresses. Examples of this include the Colonia in Mexico or Bairro in Brazil.
      - `latitude` number, float — The latitude coordinates of the address.
      - `longitude` number, float — The longitude coordinates of the address.
      - `id` string — unique ID, is required in case of multiple shipping addresses.
    - `shipping_address` Address[] — **(Conditional Requirement)** The mailing address to where the order will be shipped. Required when a physical item is being shipped OR for money remittance RECIPIENT data.
      - `first_name` string, required — The first name of the person associated with the address.
      - `last_name` string, required — The last name of the person associated with the address.
      - `address1` string, required — The street name of the address.
      - `country` string, required — The name of the country address.
      - `country_code` string, required — The 2 letter country code (ISO 3166-1 alpha-2) of the country address
      - `phone` string, required — The phone number at the address.
      - `city` string, required — The city of the address.
      - `zip` string, required — The zip or postal code of the address.
      - `address2` string — An optional additional field for the street address.
      - `company` string — Required if the address is associated to a company. The company of the person associated with the address.
      - `additional_phone` string — Additional phone number at the address.
      - `verified_phone` boolean — Indicates whether the provided phone number was verified.
      - `province` string, required — The name of the state or province of the address.
      - `province_code` string — The two-letter abbreviation of the state or province of the address.
      - `neighborhood` string — The district or city division of the address. The neighborhood should be provided if used in a country’s official postal addresses. Examples of this include the Colonia in Mexico or Bairro in Brazil.
      - `latitude` number, float — The latitude coordinates of the address.
      - `longitude` number, float — The longitude coordinates of the address.
      - `id` string — unique ID, is required in case of multiple shipping addresses.
    - `source` 'desktop_web' | 'mobile_web' | 'mobile_app' | 'mobile_app_android' | 'mobile_app_ios' | 'web' | 'chat' | 'third_party' | 'phone' | 'in_store' | 'shopify_draft_order' | 'unknown' | 'subscription' | 'ai_agent', required — The platform that the order originated from.
    - `ai_agent` 'chatgpt' | 'gemini' | 'copilot' | 'perplexity' — Should only be populated for autonomous agentic orders — i.e. where the AI agent completes the checkout end-to-end without the consumer manually interacting with the merchant site. For orders where an agent refers the consumer to the merchant site and the consumer completes checkout manually, use the existing referring_site field instead.
    - `client_details` ClientDetails, required — An object containing technical information regarding the customer’s browsing session
      - `user_agent` string, required — The full User-Agent sent from the client.
      - `accept_language` string, required — List of two-letter language codes sent from the client.
    - `name` string — A secondary identifier for the order (if exists).
    - `cart_token` string, required — Session ID for this order. Must match the `session_details.cart_token` value set by the Beacon JavaScript snippet. For standard integrations, this value is automatically generated by Beacon. For merchants who manage their own sessions, the same session ID must be passed to both the Beacon and this field. Must remain consistent throughout a purchase flow. Max 100 characters.
    - `checkout_id` string — **(Conditional Requirement)** The unique identifier of the Checkout that created this order. Use if checkout has previously been created for this order.
    - `updated_at` string, date-time — The date and time (ISO8601) when the order was last modified.
    - `note` string — The text of an optional note that a shop owner can attach to the order.
    - `passengers` Passenger[] — **(Conditional Requirement)** Required only for Merchants from the travel industry. A list of passenger objects, each one containing information about a passenger in the order. Required only for Merchants from the travel industry.
      - `first_name` string, required — The first name of the passenger.
      - `last_name` string, required — The last name (surname) of the person associated with the address.
      - `date_of_birth` string, date, required — Date of birth for the passenger. Date part only (ISO8601).
      - `nationality_code` string, required — The 2 letter country code (ISO 3166-1 alpha-2) matching the passenger's nationality country.
      - `document_number` string — The used document (Passport,ID,Visa) identification number.
      - `document_type` string — The document type used for identification of the passenger (one of [Passport,ID,Visa]).
      - `insurance_type` string — The passenger's insurance type/plan for his trip.
      - `insurance_price` number, float — The passenger's insurance plan price matching the order currency.
      - `document_issue_date` string, date — The issuing date of the passenger document (date part only using ISO8601 format).
      - `document_expiration_date` string, date — The expiration date of the passenger document (date part only using ISO8601 format).
      - `passenger_type` string — Type of passenger - (Senior/Adult/Child).
    - `discount_codes` DiscountCode[] — A list of discount code objects, each one containing information about an item in the order.
      - `amount` number, float, required — The amount of the discount.
      - `code` string — The code of the discount.
    - `vendor_id` string — An unique id representing the selling vendor.
    - `vendor_name` string — **(Conditional Requirement)** Required if there is an affiliated partner. The name of the selling vendor. Examples of affiliated partners include: metasearch engine, white label partner.
    - `order_type` 'test' — **(Conditional Requirement)** Usually omitted, set to 'test' when sending test orders (will be excluded from review). Required when sending test orders.
    - `submission_reason` 'failed_verification' | 'rule_decision' | 'third_party' | 'manual_decision' | 'policy_decision' — **(Conditional Requirement)** The underlying reason for submitting the order to review. Required if there are different segments for review.
    - `decision` DecisionDetails
      - `external_status` 'approved' | 'declined' | 'cancelled' | 'declined_fraud' | 'declined_business', required
      - `decided_at` string, date-time — When the order was decided, ISO8601 format.
      - `reason` string — A reason for the decision.
      - `amount` number, float — The amount the decision is relevant on.
      - `currency` string — The three letter code (ISO 4217) for the currency used for the payment.
      - `notes` string — Free text for describing the decision.
    - `charge_free_payment_details` ChargeFreePaymentDetails[] — **(Conditional Requirement)** A partial sum of an order as non risk (e.g. gift card amount). Required for credit card and gift card/store credit payments, for Travel/Flights industries.
      - `amount` number, float — Amount
      - `gateway` string — Payment gateway
    - `partner_sub_merchant_id` string — **(Conditional Requirement)**: Required only for Resell Partners. A unique id representing a specific merchant onboarded by a Riskified Resell Partner. The value in this field serves to identify the merchant, and therefore must be unique. This value will be presented in Riskified’s UI, and therefore it is recommended to be human readable.
    - `invoice_id` string, nullable — ID of the invoice associated with the order. Merchants who want to split orders across separate invoices can use this field to assign each order to the relevant invoice. For example: all orders with invoice_id = "europe" go to Invoice A, and all orders with invoice_id = "north-america" go to Invoice B. **Note:** To use this field, merchants must coordinate with Riskified to ensure invoices are set up correctly in Riskified's Billing system. Alternatively, existing order fields (e.g., shipping country) can be used to split orders across invoices — coordinate with your Account Manager to set this up.

## Response `200`

Successful operation

- SubmitResponseSubmitted — Submitted Response
  - `order` object
    - `id` string, required — Unique ID of order being acted upon. Note: This value should be later reflected also as order.id on the subsequent calls
    - `status` 'submitted', required — Textual status describing the result of Riskified analysis. Always 'submitted' for the a-sync flow order that is under review by Riskified.
    - `description` string, required — Additional context on Riskified decision.
    - `old_status` string — Old order status

## Other responses

- `400` — Bad request
- `401` — Unauthorized
- `404` — Not found
- `429` — Too many requests
- `500` — Contact Riskified support
- `504` — Temporary error, please retry

---

[API](https://skmtc.dev/riskified/apis/chargeback-guarantee.md) · [All operations](https://skmtc.dev/riskified/apis/chargeback-guarantee/llms.txt) · [OpenAPI document](https://skmtc-service-production.skmtc.workers.dev/v1/apis/riskified/chargeback-guarantee/revisions/2b7df5bce861/schema)