Documentação

English

Português
Español

English

Português
Español

Appearance

Whitelist (Antifraud) ​

Access prerequisites

  • Permission (module): manageAntifraudWhitelist
  • License/Feature: None
  • Menu container: GENERAL → Audit group

What it is / when to use ​

The Whitelist screen (/antifraud-whitelist) lists the wallets and accounts marked as trusted by the antifraud engine. Entries on the whitelist reduce friction: rules such as isWalletWhitelisted / isUserWhitelisted carry safe severity and help prevent blocks on legitimate, recurring operations (e.g., the customer's own wallet, an approved partner account).

Use this screen to audit which addresses/accounts are exempt from certain risk rules, who approved them, and why.

Prerequisites ​

  • Permission: module manageAntifraudWhitelist. Permission is dual — CPM enum on the backend + dynamic module in the DB.
  • License/Feature: none.
  • Dependencies on other screens: entries are consumed by AntifraudService during real-time evaluations (category whitelist).

Step by step ​

Consult ​

  1. Open the menu GENERAL → Audit → Whitelist.
  2. The table loads the entries (local pagination: 10/20/50 per page).
  3. Consult the wallet, account, who approved it, the reason, and the inclusion date.

Add an entry ​

  1. Click Add at the top of the screen to open the form.
  2. Enter the Wallet and Account (required) and, optionally, the Reason for inclusion.
  3. Click Save to whitelist.
  4. The system requests step-up re-authentication — confirm your identity with password/MFA to finish.
  5. The Approved by field is filled automatically with the authenticated operator.

Remove an entry ​

  1. On the desired row, click the trash icon (Actions column).
  2. Confirm the step-up re-authentication when prompted.
  3. The removal is permanent (hard delete) and the entry no longer affects risk evaluations.

Filters and columns ​

Filter / ColumnWhat it showsData source
WalletTrusted wallet addresswallet
AccountAssociated accountaccount
Approved byAdministrator who added the entryapproved_by
ReasonJustification for inclusionreason
Created atInclusion date/time (formatted)createdAt
ActionsRemove the entry (requires step-up)—

Business rules / considerations ​

Attention

  • Being added to the whitelist lowers the risk score for that source/destination — it is a security decision. Always record who approved it and the reason, as this is the audit trail for the exemption.
  • Whitelist is not a blacklist: trusting a wallet does not prevent other rules (amount, velocity, time of day) from still triggering. It only affects rules in the whitelist category.
  • Adding and removing require step-up (password/MFA re-authentication, ~5 min window). The same wallet cannot be added twice — the system rejects duplicates.