Payment Outcome Feedback

Reports what really happened to a payment you scored, so your account's payment model, rule weights and reputation memory learn from it.

Overview#

feedback/payment is a POST method with a JSON body. Send the transaction_id you used with Payment Fraud Detection and the outcome: approved, declined, chargeback, refunded, fraud_confirmed or legit_confirmed. Add a reason (decline code, chargeback reason) and occurred_at when you have them. See Feedback and learning for how the outcomes are used.

When to call it#

• When an order is delivered (approved), declined, refunded or charged back.
• When your risk team confirms fraud on an order, or clears an order that was held (fraud_confirmed / legit_confirmed).

How it works#

• The outcome is written onto every scoring of that transaction_id in your account and data.status is applied.
• If Gurdx has not scored that transaction yet, the outcome is kept and data.status is pending: it is applied automatically when the transaction is scored. For orders that were never scored by Gurdx (history from before your integration), add customer_id, customer_email, customer_phone, customer_ip or customer_device_id so the outcome still feeds reputation.
• Sending the same outcome again returns label: "unchanged", so retries are safe. A chargeback or fraud_confirmed is never replaced by a later approved, declined or refunded; only legit_confirmed overrides it.

Notes#

• Free: not counted against your quota, available on every plan.
• Test mode validates and returns a sample result without storing anything.
• Missing or invalid fields return error 131 (invalid_feedback) with HTTP 200.

Request#

• Authenticate with the key parameter or an Authorization: Bearer header.
• Free — not counted against your quota.
• Available on: Free trial Standard Premium Pay-as-you-go

Parameters#

Every method also accepts format, lang, mode, userID. See Options.

Code samples#

curl -X POST "https://gurdx.cretip.com/api/feedback/payment" \
  -H "Authorization: Bearer YOUR_API_KEY" \
  -H "Content-Type: application/json" \
  -d '{
    "transaction_id": "ORD-10492",
    "outcome": "chargeback",
    "reason": "fraudulent",
    "occurred_at": "2026-10-20T14:05:00Z"
}'

<?php

$payload = [
    'transaction_id' => 'ORD-10492',
    'outcome' => 'chargeback',
    'reason' => 'fraudulent',
    'occurred_at' => '2026-10-20T14:05:00Z',
];

$ch = curl_init('https://gurdx.cretip.com/api/feedback/payment');
curl_setopt_array($ch, [
    CURLOPT_POST => true,
    CURLOPT_RETURNTRANSFER => true,
    CURLOPT_HTTPHEADER => ['Authorization: Bearer YOUR_API_KEY', 'Content-Type: application/json'],
    CURLOPT_POSTFIELDS => json_encode($payload),
]);
$result = json_decode(curl_exec($ch), true);

if ($result['status'] !== 'success') {
    error_log($result['code'].': '.$result['description']);
}

const res = await fetch('https://gurdx.cretip.com/api/feedback/payment', {
  method: 'POST',
  headers: {
    Authorization: 'Bearer YOUR_API_KEY',
    'Content-Type': 'application/json',
  },
  body: JSON.stringify({
    "transaction_id": "ORD-10492",
    "outcome": "chargeback",
    "reason": "fraudulent",
    "occurred_at": "2026-10-20T14:05:00Z"
}),
});
const result = await res.json();

if (result.status !== 'success') {
  console.error(result.code, result.description);
}

import requests

res = requests.post(
    "https://gurdx.cretip.com/api/feedback/payment",
    headers={"Authorization": "Bearer YOUR_API_KEY"},
    json={
        "transaction_id": "ORD-10492",
        "outcome": "chargeback",
        "reason": "fraudulent",
        "occurred_at": "2026-10-20T14:05:00Z",
    },
)
result = res.json()

if result["status"] != "success":
    print(result["code"], result["description"])

Response#

Success#

{
    "data": {
        "transaction_id": "ORD-10492",
        "outcome": "chargeback",
        "status": "applied",
        "matched": 1,
        "label": "created"
    },
    "status": "success",
    "executionTime": 4
}

Error#

Errors are delivered with HTTP 200 — always check the status field.

{
    "status": "error",
    "code": 101,
    "type": "invalid_key",
    "description": "The API Key is missing or invalid."
}

Response fields#