Guides Use cases API Changelog

Get transfer risk rules

Retrieve the risk rules that contributed to a transfer's risk decision.

This endpoint has limited availability and must be enabled for your account by Moov.

To access this endpoint using an access token you'll need to specify the /accounts/{accountID}/transfers.read scope.

GET
/transfers/{transferID}/risk-outcomes
curl -X GET "https://api.moov.io/transfers/{transferID}/risk-outcomes" \
  -H "Authorization: Bearer {token}" \
  -H "X-Moov-Version: v2026.10.00"
import { Moov } from "@moovio/sdk";

const moov = new Moov({
  security: {
    username: "",
    password: "",
  },
});

async function run() {
  const result = await moov.transfers.getRiskOutcomes({
    transferID: "<id>",
  });

  console.log(result);
}

run();
declare(strict_types=1);

require 'vendor/autoload.php';

use Moov\MoovPhp;
use Moov\MoovPhp\Models\Components;

$sdk = MoovPhp\Moov::builder()
    ->setSecurity(
        new Components\Security(
            username: '',
            password: '',
        )
    )
    ->build();



$response = $sdk->transfers->getRiskOutcomes(
    transferID: '<id>'
);

if ($response->partnerRiskOutcomesResponse !== null) {
    // handle response
}
package hello.world;

import io.moov.sdk.Moov;
import io.moov.sdk.models.components.Security;
import io.moov.sdk.models.operations.GetTransferRiskOutcomesResponse;
import java.lang.Exception;

public class Application {

    public static void main(String[] args) throws Exception {

        Moov sdk = Moov.builder()
                .security(Security.builder()
                    .username("")
                    .password("")
                    .build())
            .build();

        GetTransferRiskOutcomesResponse res = sdk.transfers().getRiskOutcomes()
                .transferID("<id>")
                .call();

        if (res.partnerRiskOutcomesResponse().isPresent()) {
            System.out.println(res.partnerRiskOutcomesResponse().get());
        }
    }
}
from moovio_sdk import Moov
from moovio_sdk.models import components


with Moov(
    security=components.Security(
        username="",
        password="",
    ),
) as moov:

    res = moov.transfers.get_risk_outcomes(transfer_id="<id>")

    # Handle response
    print(res)
require 'moov_ruby'

Models = ::Moov::Models
s = ::Moov::Client.new(
  security: Models::Components::Security.new(
    username: '',
    password: ''
  )
)
res = s.transfers.get_risk_outcomes(transfer_id: '<id>')

unless res.partner_risk_outcomes_response.nil?
  # handle response
end
using Moov.Sdk;
using Moov.Sdk.Models.Components;

var sdk = new MoovClient(security: new Security() {
    Username = "",
    Password = "",
});

var res = await sdk.Transfers.GetRiskOutcomesAsync(transferID: "<id>");

// handle response
The request completed successfully.
application/json
Example
{
  "contributingRules": [
    {
      "name": "Velocity"
    },
    {
      "name": "Device"
    }
  ],
  "transferID": "d09a94b6-cb1f-4d3f-a34a-a0f56b7b8b2a"
}

Response headers

x-request-id

string required
A unique identifier used to trace requests.
The request contained missing or expired authentication.

Response headers

x-request-id

string required
A unique identifier used to trace requests.
The user is not authorized to make the request.

Response headers

x-request-id

string required
A unique identifier used to trace requests.
The requested resource was not found.

Response headers

x-request-id

string required
A unique identifier used to trace requests.
Request was refused due to rate limiting.

Response headers

x-request-id

string required
A unique identifier used to trace requests.
The request failed due to an unexpected error.

Response headers

x-request-id

string required
A unique identifier used to trace requests.
The request failed because a downstream service failed to respond.

Response headers

x-request-id

string required
A unique identifier used to trace requests.

Headers

X-Moov-Version

string
Set this header to v2026.10.00 to use the API described in this specification. When omitted, the server defaults to v2024.01.00, which may not match the behavior documented here.
Possible values: v2026.10.00

X-Account-ID

string
The account the transfer belongs to. When omitted, the account is resolved from the calling credentials.

Path parameters

transferID

string required
Identifier for the transfer.

Response

application/json

The risk rules that contributed to a transfer's risk decision.

This information has limited availability and must be enabled for your account by Moov.

contributingRules

array<object> required
The risk rules that contributed to the decision. May be empty when no rules are disclosed.
Show child attributes

name

string
Human-readable name of the contributing risk rule.

transferID

string required
Identifier of the transfer these outcomes belong to.
A unique identifier for a Moov resource. Supports UUID format (xxxxxxxx-xxxx-xxxx-xxxx-xxxxxxxxxxxx) or typed format with base32-encoded UUID and type suffix (e.g., kuoaydiojf7uszaokc2ggnaaaa_xfer).