---
title: "Quarantine Under Review Webhook"
source_url: https://docs.rapyd.net/en/quarantine-under-review-webhook.html
lang: en
---

# Quarantine Under Review Webhook

The **QUARANTINE_UNDER_REVIEW** webhook is sent when Rapyd puts a transaction into quarantine.

> **Note:**
>
> The endpoint for webhooks is unique for each client. To set up a webhook endpoint, see [Defining a Webhook Endpoint](https://docs.rapyd.net/en/defining-a-webhook-endpoint.md "Defining a Webhook Endpoint").

### Parameters

### Webhook Header Parameters

- - Content-Type
  - Indicates that the data appears in JSON format. Set to **application/json**.
- - salt
  - Random string.
- - signature
  - Signature calculated for each webhook individually.

    See [Webhook Authentication](https://docs.rapyd.net/en/webhook-authentication.md "Webhook Authentication").
- - timestamp
  - Timestamp for the webhook, in [Unix time](https://docs.rapyd.net/en/glossary.md#UUID-945d98cf-adae-e1cf-2606-c7fae8b4a7e1_unix_time "Unix time") (seconds).

### Webhook Root Parameters

- - created_at
  - Time that the webhook was created, in [Unix time](https://docs.rapyd.net/en/glossary.md#UUID-945d98cf-adae-e1cf-2606-c7fae8b4a7e1_unix_time "Unix time").

    > **Note:**
    >
    > Inside the `data` object, some webhooks have another `created_at` field that refers to a different event.
- - data
  - Contains the actual data of the webhook.

    For details, see below.
- - extended_timestamp
  - Time in milliseconds that the webhook was created, in [Unix time](https://docs.rapyd.net/en/glossary.md#UUID-945d98cf-adae-e1cf-2606-c7fae8b4a7e1_unix_time "Unix time").
- - id
  - ID of the webhook. String starting with **wh_**.
- - status
  - Status of the webhook. One of the following:

    - **NEW**
    - **CLO** - Closed.
    - **ERR** - Error.
    - **RET** - Re-sent.

    > **Note:**
    >
    > Inside the `data` object, some webhooks have another `status` field that refers to a different event.
- - trigger_operation_id
  - ID of the operation that triggered the webhook. UUID.
- - type
  - Name of the webhook type.

    > **Note:**
    >
    > The name in the Client Portal is different.

### Webhook Data Parameters

- - action_flow_id
  - ID of the action flow. UUID.
- - action_type
  - The action that triggered the quarantine. One of the following:

    - **bank_account_issuing_transfer**
    - **create_bank_account**
    - **create_ewallet**
    - **create_ewallet_contact**
    - **create_payment**
    - **create_payout**
    - **ewallet_transfer_funds**
    - **identity_verification**
    - **personalize_issued_card**
    - **transfer_funds_between_ewallets**
    - **update_contact_compliance_profile**
    - **update_ewallet**
    - **update_ewallet_contact**
- - created_at
  - Time of creation of the quarantine, in [Unix time](https://docs.rapyd.net/en/glossary.md#UUID-945d98cf-adae-e1cf-2606-c7fae8b4a7e1_unix_time "Unix time").
- - duplicated_action_flow_id
  - ID of the duplicate action flow. Relevant to payouts.
- - error_code
  - Error code that is linked to the quarantine.
- - limits
  - Describes the limit that the action breached. Contains the following fields:

    - - breach_value
      - The value of the measured bucket if the transaction is approved.
    - - compliance_profile
      - The compliance level of the wallet.
    - - limit_name
      - Name of the limit.
    - - limit_value
      - Value of the limit.
    - - wallet_token
      - ID of the wallet relevant to the transaction. String starting with **ewallet_**. Limits and the compliance level are set for this wallet. Relevant when `reason` is set to **limits**.
- - reason
  - The reason that the transaction is placed in quarantine:

    - **compliance** - Compliance issues.
    - **limits** - Breached limit.
    - **rapyd_protect** - Rapyd Protect issues.
- - resolved_at
  - Time the quarantine was resolved, in [Unix time](https://docs.rapyd.net/en/glossary.md#UUID-945d98cf-adae-e1cf-2606-c7fae8b4a7e1_unix_time "Unix time"). Value is **0** when not resolved.
- - source
  - The Rapyd service that quarantined the action:

    - **compliance**
    - **rapyd_protect**
- - status
  - Status of the quarantine:

    - **HLD** - Quarantine under review.
    - **DEC** - Quarantine release declined.
    - **REL** - Quarantine released.
    - **REF** - Quarantine release failed.
- - target_tokens
  - ID of the relevant payout. One element of a string array, starting with **payout_**.
- - token
  - ID of the quarantine. String starting with **qm_**.
- - updated_at
  - Time the quarantine was last updated, in [Unix time](https://docs.rapyd.net/en/glossary.md#UUID-945d98cf-adae-e1cf-2606-c7fae8b4a7e1_unix_time "Unix time").

- QUARANTINE_UNDER_REVIEW Webhook
- ```json
  {
      "id": "wh_540b8a22cd77283ec2a721362e4de32d",
      "data": {
          "token": "qm_a5169383ddd6f0e04f716601dbc7375e",
          "target_tokens": [
              "payout_71987d8e65a4e7a68a5ea000e1984a24"
  			],
          "limits": null,
          "reason": "compliance",
          "source": "compliance",
          "status": "HLD",
          "created_at": 1646532379,
          "error_code": null,
          "updated_at": 1646532379,
          "action_type": "create_payout",
          "resolved_at": 0,
          "action_flow_id": "6a8840f9-5ebd-423c-8eab-b397b5ef81f1",
          "duplicated_action_flow_id": null
      },
      "type": "QUARANTINE_UNDER_REVIEW",
      "status": "NEW",
      "created_at": 1646532379,
      "extended_timestamp": 1646532379934,
      "trigger_operation_id": "f0c9ecbf-a238-4fa9-b0d5-a00aa3e322e6"
  }
  ```