> ## Documentation Index
> Fetch the complete documentation index at: https://developers.pcibooking.net/llms.txt
> Use this file to discover all available pages before exploring further.

# Risk Assessment

> Assess fraud risk on a stored card token using payer details, billing address, and device metadata. Returns a risk score.

Score a token for fraud risk indicators before processing a payment.

## What It Does

Risk assessment analyzes the stored card data against the payer's billing information and IP address. It returns a risk level with contributing factors such as country mismatches and anonymous proxy usage. Use it as an input to your fraud prevention workflow.

## When to Use It

* Before processing high-value transactions.
* When a token is used from an unusual context.
* As part of automated fraud screening.

## How It Works

Send the token's cardURI along with the payer's billing details to the [risk assessment endpoint](/api-reference/manage-tokens/risk-assessment). PCI Booking cross-references the card's issuer country, the payer's billing country, and the client's IP geolocation to produce a risk score.

```bash theme={null}
curl -X POST \
  'https://service.pcibooking.net/api/payments/paycard/{token}/op/validate' \
  -H 'Authorization: PCIBOOKING apikey={your-api-key}' \
  -H 'Content-Type: application/json' \
  -d '{
    "ClientIPAddress": "203.0.113.42",
    "CountryCode": "US",
    "City": "New York",
    "StateProvince": "NY",
    "FirstName": "John",
    "LastName": "Smith"
  }'
```

```json Example response theme={null}
{
  "RiskLevel": "Low",
  "Description": "Mismatch between billing address and credit card issuer country.",
  "CountryByIP": "US",
  "IssuerCountry": "GB",
  "IssuerName": "BARCLAYS BANK PLC",
  "CardBrand": "VISA",
  "CardType": "CREDIT",
  "CardCategory": "CLASSIC",
  "CountryFromBillingAddress": "US",
  "AnonymousProxyUsed": false
}
```

## Risk Levels

| Level        | Meaning                                                                                                    |
| ------------ | ---------------------------------------------------------------------------------------------------------- |
| **VeryHigh** | Anonymous proxy detected, or mismatch between billing address, card issuer country, and client IP address. |
| **High**     | Mismatch between billing address and card issuer country.                                                  |
| **Low**      | Billing address and card issuer country match, but do not match the client's IP address.                   |
| **VeryLow**  | Billing address, card issuer country, and client IP address all match.                                     |

<Info>
  Risk assessment is an advisory signal. Combine it with your own fraud rules to make accept/decline decisions.
</Info>

## Next Steps

<CardGroup cols={2}>
  <Card title="Use Tokens Overview" icon="book" href="/use-tokens/overview">
    All ways to use your tokens.
  </Card>

  <Card title="Charge" icon="book" href="/use-tokens/charge">
    Process a payment after assessing risk.
  </Card>
</CardGroup>