# Anti-fraud system rejected transaction

When a transaction is declined during an Anti-fraud system check, Xsolla sends transaction details in the webhook with the afs_reject type to the webhook URL. To receive this webhook, contact your Customer Success Manager or email csm@xsolla.com.

When you save the webhook URL in Publisher Account, you can give permissions to receive detailed information in webhooks. To do that, set the following toggle to active in Publisher Account in the Project settings > Webhooks > Advanced settings section.


  Note
  If you registered in Publisher Account on or before January 22, 2025, you can find the toggles in the Project settings > Webhooks > Testing > Payments > Advanced settings section.



  
    
        Toggle
        Description
    
  
  
    
        Show info about transactions via saved payment methods
        Information is passed in the following custom parameters of the webhook:saved_payment_method:0 — the saved payment method was not used1 —  the payment method was saved when making the current payment2 — the previously saved payment method is usedpayment_type:1 — one-time payment2 — recurring payment

Endpoint: POST afs-rejected-transaction
Version: 1.0

## Request fields (application/json):

  - `notification_type` (string, required)
    Notification type.

  - `settings` (object)
    Custom project settings (object).

  - `settings.project_id` (integer)
    Project ID. You can find this parameter in your [Publisher Account](https://publisher.xsolla.com/) next to the name of the project.

  - `settings.merchant_id` (integer)
    Merchant ID.

  - `user` (object)
    User details (object).

  - `user.ip` (string)
    User IP.

  - `user.phone` (string)
    User phone.

  - `user.email` (string)
    User email.

  - `user.id` (string, required)
    User ID.

  - `user.name` (string)
    Username.

  - `user.country` (string)
    User’s country. Two-letter uppercase [ISO 3166-1 alpha-2](https://en.wikipedia.org/wiki/ISO_3166-1_alpha-2) country code.

  - `user.zip` (string)
    User’s ZIP or postal code.

  - `transaction` (object, required)
    Transaction details (object).

  - `transaction.id` (integer)
    Transaction ID.

  - `transaction.external_id` (string)
    Transaction external ID.

  - `transaction.dry_run` (integer)
    Test transaction. The parameter has the 1 value if it is a test transaction, or is not sent if the transaction is real.

  - `transaction.agreement` (integer)
    Agreement ID.

  - `refund_details` (object)
    Refund details (object).

  - `refund_details.code` (integer)
    Code ID.

  - `refund_details.reason` (string)
    Refund reason.

  - `refund_details.author` (string)
    Refund initiator.

## Response 400 fields (application/json):

  - `error` (object)

  - `error.code` (string)

  - `error.message` (string)


## Response 204 fields

## Response 500 fields