{
  "id": "evt_risk001",
  "type": "account.risk_flagged",
  "data": {
    "sideshiftAccountId": "acct_alias_2",
    "externalId": "creator_456",
    "status": "flagged",
    "riskFlagId": "duplicate_identity_idpf_123_acct_alias_2",
    "riskType": "duplicate_identity_profile",
    "riskReasons": [
      "same_identity_profile_seen_on_multiple_connect_accounts"
    ],
    "severity": "high",
    "duplicateOfAccountIds": [
      "acct_alias_1"
    ],
    "identityProfileId": "idpf_123",
    "bankAccountFingerprintAvailable": false
  },
  "timestamp": "2026-03-13T12:00:01.000Z"
}

Accountrisk flagged

Sent when SideShift detects an account-level fraud/risk signal for a Connect account.

Today this event is emitted for duplicate identity-profile reuse under the same integration, when the same KYC identity profile is observed on more than one SideShift Connect account. Use this as a stop-review signal before sending additional transfers.

Bank-account duplicate detection is not emitted today because SideShift does not receive raw bank details or a stable bank-account fingerprint from the embedded payout provider.

WEBHOOK

account.risk_flagged

{
  "id": "evt_risk001",
  "type": "account.risk_flagged",
  "data": {
    "sideshiftAccountId": "acct_alias_2",
    "externalId": "creator_456",
    "status": "flagged",
    "riskFlagId": "duplicate_identity_idpf_123_acct_alias_2",
    "riskType": "duplicate_identity_profile",
    "riskReasons": [
      "same_identity_profile_seen_on_multiple_connect_accounts"
    ],
    "severity": "high",
    "duplicateOfAccountIds": [
      "acct_alias_1"
    ],
    "identityProfileId": "idpf_123",
    "bankAccountFingerprintAvailable": false
  },
  "timestamp": "2026-03-13T12:00:01.000Z"
}

Authorizations

x-api-key

string

header

required

Your SideShift Connect API key (sk_live_* or sk_test_*). Generate from Settings → Connect.

Body

application/json

string

Unique event ID

type

string

Example:

"account.risk_flagged"

data

object

Show child attributes

timestamp

string<date-time>

Response

200

Webhook acknowledged

⌘I