FMS Alert Schema

The FmsRiskAlert is the enriched payload sent to bank FMS webhooks. The gateway emits action_requested: "MONITOR". ELEVATE_RISK_SCORE is in the type and is not emitted while the alert is advisory.

See FMS Webhooks Guide for complete integration documentation.

interface FmsRiskAlert {
  alert_id: string;
  version: string;
  timestamp_utc: string;
  source_sdk_version: string;

  urgency: "HIGH" | "MEDIUM" | "LOW";
  action_requested: "MONITOR" | "ELEVATE_RISK_SCORE";

  indicators: {
    target_mule_account?: string;
    mule_bank_bic?: string;
    scammer_alias?: string;
    malicious_urls?: string[];
  };

  enrichment: {
    domain_analysis: Array<{
      url: string;
      registrar: string;
      registration_date: string;
      domain_age_days: number;
      risk_flag: string;
    }>;
  };

  extraction_metadata: {
    extraction_tier: string;
    confidence: number;
    document_type: string;
    processing_latency_ms: number;
  };

  client_verification: {
    extraction_tier: string;
    sdk_version: string;
    platform_attestation: string | null;
    local_crypto_hash: string;
  };

  gateway_signature: string;
}