> ## Documentation Index
> Fetch the complete documentation index at: https://docs.vultlocal.com/llms.txt
> Use this file to discover all available pages before exploring further.

# Suspicious Transactions

> Fraud detection and transaction monitoring

<Warning>
  This section covers transactions flagged by the automated fraud detection system. Review and action these promptly.
</Warning>

## Overview

The fraud detection system monitors all transactions and flags suspicious activity based on:

<CardGroup cols={4}>
  <Card title="Amount" icon="coins">
    Unusually large transactions
  </Card>

  <Card title="Frequency" icon="clock">
    Rapid transaction patterns
  </Card>

  <Card title="Behavior" icon="activity">
    Deviation from normal patterns
  </Card>

  <Card title="Recipients" icon="users">
    New or suspicious recipients
  </Card>
</CardGroup>

***

## Endpoints

<CardGroup cols={2}>
  <Card title="List Suspicious" icon="list" color="#ef4444" href="/api-reference/suspicious-transactions/list">
    `GET /api/v1/transactions/suspicious`

    List flagged transactions with filtering
  </Card>

  <Card title="Summary Stats" icon="chart-bar" color="#f59e0b" href="/api-reference/suspicious-transactions/summary">
    `GET /api/v1/transactions/suspicious/summary`

    Aggregated statistics for dashboards
  </Card>
</CardGroup>

***

## Severity Levels

<Tabs>
  <Tab title="Low">
    **Risk Score: 0-30**

    Minor anomalies that may be explained by normal behavior variations.

    * Small amount deviations
    * Slightly unusual timing
    * New recipient (first transaction)
  </Tab>

  <Tab title="Medium">
    **Risk Score: 31-60**

    Notable patterns that warrant review but may not indicate fraud.

    * Multiple transactions in short window
    * Amount significantly above average
    * Geographic inconsistency
  </Tab>

  <Tab title="High">
    **Risk Score: 61-85**

    Significant risk indicators requiring prompt attention.

    * Amount 10x+ above average
    * Multiple flags triggered
    * Velocity limits exceeded
  </Tab>

  <Tab title="Critical">
    **Risk Score: 86-100**

    Requires immediate investigation. May involve automatic blocking.

    * Known fraud patterns matched
    * Suspicious account linkages
    * Compliance rule violations
  </Tab>
</Tabs>

***

## Review Status

<CardGroup cols={4}>
  <Card title="Pending" icon="clock" color="#6366f1">
    Awaiting initial review
  </Card>

  <Card title="Under Review" icon="search" color="#f59e0b">
    Being investigated
  </Card>

  <Card title="Cleared" icon="check-circle" color="#10b981">
    Marked as legitimate
  </Card>

  <Card title="Confirmed" icon="alert-triangle" color="#ef4444">
    Confirmed as fraud
  </Card>
</CardGroup>

***

## Filtering Options

<AccordionGroup>
  <Accordion title="Date Range" icon="calendar">
    Filter by `from_date` and `to_date` (YYYY-MM-DD format).

    Default: Last 30 days
  </Accordion>

  <Accordion title="Severity" icon="thermometer">
    Filter by `severity`: `low`, `medium`, `high`, `critical`, or `all`
  </Accordion>

  <Accordion title="Status" icon="filter">
    Filter by `status`: `pending`, `under_review`, `cleared`, `confirmed`, or `all`
  </Accordion>

  <Accordion title="Subscriber/Agent" icon="user">
    Filter by specific `subscriber_id` or `agent_id`
  </Accordion>

  <Accordion title="Amount Range" icon="coins">
    Filter with `min_amount` and `max_amount`
  </Accordion>

  <Accordion title="Transaction Type" icon="tag">
    Filter by `transaction_type`: `transfer_p2p`, `agent_cashin`, `pos_payment`, etc.
  </Accordion>
</AccordionGroup>

***

## Response Structure

<Tabs>
  <Tab title="Transaction List">
    ```json theme={null}
    {
      "success": true,
      "data": {
        "transactions": [
          {
            "id": "sus_abc123",
            "transaction_id": "txn_xyz789",
            "type": "transfer_p2p",
            "amount": 500000,
            "risk_score": 85,
            "severity": "high",
            "review_status": "pending",
            "flags": ["unusual_amount", "new_recipient"],
            "suspicious_indicators": [
              "Amount 10x higher than average",
              "First transaction to this recipient"
            ],
            "created_at": "2025-01-15T10:30:00Z"
          }
        ],
        "pagination": {
          "current_page": 1,
          "total_pages": 3,
          "total_records": 45
        }
      }
    }
    ```
  </Tab>

  <Tab title="Summary Stats">
    ```json theme={null}
    {
      "success": true,
      "data": {
        "total_suspicious": 45,
        "pending_review": 20,
        "under_review": 10,
        "cleared": 12,
        "confirmed_fraud": 3,
        "by_severity": {
          "low": 15,
          "medium": 18,
          "high": 10,
          "critical": 2
        },
        "total_amount_flagged": 15000000,
        "avg_risk_score": 65.5
      }
    }
    ```
  </Tab>
</Tabs>

***

## Dashboard Integration

<Info>
  Use the summary endpoint to power real-time fraud monitoring dashboards.
</Info>

Key metrics to display:

* **Total Pending** - Transactions awaiting review
* **High/Critical Count** - Urgent items
* **Amount at Risk** - Total flagged amount
* **Trend** - Compare to previous period

***

## Related

<CardGroup cols={2}>
  <Card title="Compliance Alerts" icon="bell" href="/api-reference/compliance/alerts">
    Manage compliance alerts and resolutions
  </Card>

  <Card title="Monitoring Rules" icon="settings" href="/api-reference/compliance/rules">
    Configure fraud detection rules
  </Card>
</CardGroup>