Record a Decision

Records a decision with a reason code (reviews.decide). waiting_on_customer pauses the due time. A decision your second-approver setting covers waits for a person to approve it in the portal. A decision your API credential proposes that clears the subject (not_a_match, no_concern) always waits for a person, whatever the setting (approval_rule: api_clearance), and that person must be independent of your API credentials: not the one who created the credential, and not in a role that can create, rotate or revoke credentials (Admin, Technical) — in practice your Compliance role. With no such person on your team the decision is refused (409 second_approver_unavailable). Approving, sending back and withdrawing are done by people in the portal.

Review kind	Decisions
`possible_sanctions_match`, `possible_pep_match`, `screening_review`	`waiting_on_customer`, `not_a_match`, `confirmed_match`
`manual`	`waiting_on_customer`, `no_concern`, `concern_confirmed`

POST

intelligence

reviews

{id}

decisions

Record a decision

curl --request POST \
  --url https://api.antonpayments.com/v1/intelligence/reviews/{id}/decisions \
  --header 'Authorization: Bearer <token>' \
  --header 'Content-Type: application/json' \
  --header 'DPoP: <api-key>' \
  --header 'Idempotency-Key: <idempotency-key>' \
  --data '
{
  "note": "<string>"
}
'

const options = {
  method: 'POST',
  headers: {
    'Idempotency-Key': '<idempotency-key>',
    Authorization: 'Bearer <token>',
    DPoP: '<api-key>',
    'Content-Type': 'application/json'
  },
  body: JSON.stringify({note: '<string>'})
};

fetch('https://api.antonpayments.com/v1/intelligence/reviews/{id}/decisions', options)
  .then(res => res.json())
  .then(res => console.log(res))
  .catch(err => console.error(err));

<?php

$curl = curl_init();

curl_setopt_array($curl, [
  CURLOPT_URL => "https://api.antonpayments.com/v1/intelligence/reviews/{id}/decisions",
  CURLOPT_RETURNTRANSFER => true,
  CURLOPT_ENCODING => "",
  CURLOPT_MAXREDIRS => 10,
  CURLOPT_TIMEOUT => 30,
  CURLOPT_HTTP_VERSION => CURL_HTTP_VERSION_1_1,
  CURLOPT_CUSTOMREQUEST => "POST",
  CURLOPT_POSTFIELDS => json_encode([
    'note' => '<string>'
  ]),
  CURLOPT_HTTPHEADER => [
    "Authorization: Bearer <token>",
    "Content-Type: application/json",
    "DPoP: <api-key>",
    "Idempotency-Key: <idempotency-key>"
  ],
]);

$response = curl_exec($curl);
$err = curl_error($curl);

curl_close($curl);

if ($err) {
  echo "cURL Error #:" . $err;
} else {
  echo $response;
}

package main

import (
	"fmt"
	"strings"
	"net/http"
	"io"
)

func main() {

	url := "https://api.antonpayments.com/v1/intelligence/reviews/{id}/decisions"

	payload := strings.NewReader("{\n  \"note\": \"<string>\"\n}")

	req, _ := http.NewRequest("POST", url, payload)

	req.Header.Add("Idempotency-Key", "<idempotency-key>")
	req.Header.Add("Authorization", "Bearer <token>")
	req.Header.Add("DPoP", "<api-key>")
	req.Header.Add("Content-Type", "application/json")

	res, _ := http.DefaultClient.Do(req)

	defer res.Body.Close()
	body, _ := io.ReadAll(res.Body)

	fmt.Println(string(body))

}

{
  "data": {
    "review": {
      "id": "irv_01JB8QK2",
      "number": "RV-0142",
      "kind": "possible_sanctions_match",
      "priority": "high",
      "status": "open",
      "source": "evaluation",
      "subject": {
        "type": "person",
        "display": "V*** S***",
        "reference": "cust_7731"
      },
      "opened_by": {
        "type": "user",
        "id": "<string>"
      },
      "overdue": true,
      "created_at": "2026-04-15T14:30:00Z",
      "updated_at": "2026-04-15T14:30:00Z",
      "outcome": "waiting_on_customer",
      "evaluation_id": "<string>",
      "linked_evaluation_id": "<string>",
      "linked_review_id": "<string>",
      "open_reason": "unusual_activity",
      "owner_id": "<string>",
      "due_at": "2026-04-15T14:30:00Z",
      "paused_at": "2026-04-15T14:30:00Z",
      "closed_at": "2026-04-15T14:30:00Z"
    },
    "decision": {
      "id": "ird_01JB9A",
      "decision": "waiting_on_customer",
      "reason_code": "dob_needed",
      "note_recorded": true,
      "proposed_by": {
        "type": "user",
        "id": "<string>"
      },
      "requires_approval": true,
      "created_at": "2026-04-15T14:30:00Z",
      "approval_rule": "sanctions_pep",
      "approval": {
        "id": "<string>",
        "outcome": "approved",
        "by": {
          "type": "user",
          "id": "<string>"
        },
        "note_recorded": true,
        "created_at": "2026-04-15T14:30:00Z"
      }
    }
  }
}

{
  "error": {
    "code": "module_not_enabled",
    "message": "this feature is not enabled for your account"
  }
}

{
  "error": {
    "message": "insufficient funds for this payout",
    "code": "insufficient_balance"
  }
}

{
  "error": {
    "message": "insufficient funds for this payout",
    "code": "insufficient_balance"
  }
}

{
  "error": {
    "message": "insufficient funds for this payout",
    "code": "insufficient_balance"
  }
}

Authorizations

DPoP

string

header

required

Per-request DPoP proof JWT (RFC 9449). MUST accompany the Authorization: DPoP <access_token> header on every protected operation. The proof is signed by the merchant's private DPoP key and carries htm, htu, iat, jti, and ath claims.

Headers

Idempotency-Key

string

required

Unique key identifying this operation. Sending the same key twice returns the original response instead of creating a duplicate. Keys are retained for 24 hours.

Maximum string length: 255

Path Parameters

string

required

Review ID.

Pattern: ^irv_[a-zA-Z0-9]+$

Body

application/json

decision

enum<string>

required

The first five are decisions you can record through this API. release and cancel are votes on a payout your rule held, and approved, rejected and expired are how such a review can close; both are made in the portal.

Available options:

waiting_on_customer,

not_a_match,

confirmed_match,

no_concern,

concern_confirmed,

release,

cancel,

approved,

rejected,

expired

reason_code

enum<string>

required

Accepted per decision: waiting_on_customer — dob_needed, id_document_needed, more_information_needed; not_a_match — dob_differs, nationality_differs, id_document_verified, different_entity_type, location_differs; confirmed_match — identity_confirmed, exact_identifier_match, customer_confirmed; no_concern — activity_explained, documents_verified; concern_confirmed — suspicious_activity, policy_breach; other with any decision.

Available options:

dob_needed,

id_document_needed,

more_information_needed,

dob_differs,

nationality_differs,

id_document_verified,

different_entity_type,

location_differs,

identity_confirmed,

exact_identifier_match,

customer_confirmed,

activity_explained,

documents_verified,

suspicious_activity,

policy_breach,

other

note

string

Stored in a vault; never returned by the API.

Maximum string length: 2000

Response

The decision and the review after it.

data

object

required

Show child attributes

⌘I

Record a decision

curl --request POST \
  --url https://api.antonpayments.com/v1/intelligence/reviews/{id}/decisions \
  --header 'Authorization: Bearer <token>' \
  --header 'Content-Type: application/json' \
  --header 'DPoP: <api-key>' \
  --header 'Idempotency-Key: <idempotency-key>' \
  --data '
{
  "note": "<string>"
}
'

const options = {
  method: 'POST',
  headers: {
    'Idempotency-Key': '<idempotency-key>',
    Authorization: 'Bearer <token>',
    DPoP: '<api-key>',
    'Content-Type': 'application/json'
  },
  body: JSON.stringify({note: '<string>'})
};

fetch('https://api.antonpayments.com/v1/intelligence/reviews/{id}/decisions', options)
  .then(res => res.json())
  .then(res => console.log(res))
  .catch(err => console.error(err));

<?php

$curl = curl_init();

curl_setopt_array($curl, [
  CURLOPT_URL => "https://api.antonpayments.com/v1/intelligence/reviews/{id}/decisions",
  CURLOPT_RETURNTRANSFER => true,
  CURLOPT_ENCODING => "",
  CURLOPT_MAXREDIRS => 10,
  CURLOPT_TIMEOUT => 30,
  CURLOPT_HTTP_VERSION => CURL_HTTP_VERSION_1_1,
  CURLOPT_CUSTOMREQUEST => "POST",
  CURLOPT_POSTFIELDS => json_encode([
    'note' => '<string>'
  ]),
  CURLOPT_HTTPHEADER => [
    "Authorization: Bearer <token>",
    "Content-Type: application/json",
    "DPoP: <api-key>",
    "Idempotency-Key: <idempotency-key>"
  ],
]);

$response = curl_exec($curl);
$err = curl_error($curl);

curl_close($curl);

if ($err) {
  echo "cURL Error #:" . $err;
} else {
  echo $response;
}

package main

import (
	"fmt"
	"strings"
	"net/http"
	"io"
)

func main() {

	url := "https://api.antonpayments.com/v1/intelligence/reviews/{id}/decisions"

	payload := strings.NewReader("{\n  \"note\": \"<string>\"\n}")

	req, _ := http.NewRequest("POST", url, payload)

	req.Header.Add("Idempotency-Key", "<idempotency-key>")
	req.Header.Add("Authorization", "Bearer <token>")
	req.Header.Add("DPoP", "<api-key>")
	req.Header.Add("Content-Type", "application/json")

	res, _ := http.DefaultClient.Do(req)

	defer res.Body.Close()
	body, _ := io.ReadAll(res.Body)

	fmt.Println(string(body))

}

{
  "data": {
    "review": {
      "id": "irv_01JB8QK2",
      "number": "RV-0142",
      "kind": "possible_sanctions_match",
      "priority": "high",
      "status": "open",
      "source": "evaluation",
      "subject": {
        "type": "person",
        "display": "V*** S***",
        "reference": "cust_7731"
      },
      "opened_by": {
        "type": "user",
        "id": "<string>"
      },
      "overdue": true,
      "created_at": "2026-04-15T14:30:00Z",
      "updated_at": "2026-04-15T14:30:00Z",
      "outcome": "waiting_on_customer",
      "evaluation_id": "<string>",
      "linked_evaluation_id": "<string>",
      "linked_review_id": "<string>",
      "open_reason": "unusual_activity",
      "owner_id": "<string>",
      "due_at": "2026-04-15T14:30:00Z",
      "paused_at": "2026-04-15T14:30:00Z",
      "closed_at": "2026-04-15T14:30:00Z"
    },
    "decision": {
      "id": "ird_01JB9A",
      "decision": "waiting_on_customer",
      "reason_code": "dob_needed",
      "note_recorded": true,
      "proposed_by": {
        "type": "user",
        "id": "<string>"
      },
      "requires_approval": true,
      "created_at": "2026-04-15T14:30:00Z",
      "approval_rule": "sanctions_pep",
      "approval": {
        "id": "<string>",
        "outcome": "approved",
        "by": {
          "type": "user",
          "id": "<string>"
        },
        "note_recorded": true,
        "created_at": "2026-04-15T14:30:00Z"
      }
    }
  }
}

{
  "error": {
    "code": "module_not_enabled",
    "message": "this feature is not enabled for your account"
  }
}

{
  "error": {
    "message": "insufficient funds for this payout",
    "code": "insufficient_balance"
  }
}

{
  "error": {
    "message": "insufficient funds for this payout",
    "code": "insufficient_balance"
  }
}

{
  "error": {
    "message": "insufficient funds for this payout",
    "code": "insufficient_balance"
  }
}

Overview

Cross-Cutting

Reference Data

Beneficiaries

Instruments

Intelligence

Reviews

Verifications

Payouts

Batches

Balances

Accounts

Webhooks

Pricing

FX

Corridors

Record a Decision

Authorizations

Headers

Path Parameters

Body

Response