cbr-finapi-rs 0.1.0

Typed async client for CBR public APIs (TsPI, EBS, GIS AntiFraud)
Documentation 
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61

# cbr-finapi-rs

Typed Rust client for CBR public interfaces (AntiFraud, TSPI, EBS).

## Regulatory Scope

Implements AntiFraud integration under 161-FZ with 12-sign OD-2506 model.

## Features

- Typed request and decision models.
- Async client mode via `client` feature.
- Built-in `429` handling with `Retry-After` support (fallback linear backoff).
- Forward-compatible unknown fraud sign parsing.
- Optional request metadata for ATM/credential/cross-border signals.

## OD-2506 Fraud Signs (12/12)

| OD-2506 Sign | Enum Variant | Meaning |
| --- | --- | --- |
| 1 | `ReceiverInDatabase` | Receiver account linked to known fraud indicators. |
| 2 | `DeviceInDatabase` | Device linked to known fraud indicators. |
| 3 | `AtypicalTransaction` | Deviation from normal customer transaction profile. |
| 4 | `SuspiciousSbpTransfer` | Suspicious fast-payment pattern. |
| 5 | `SuspiciousNfcActivity` | Suspicious NFC/token usage pattern. |
| 6 | `MultipleAccountsFromSingleDevice` | One device tied to many unrelated accounts. |
| 7 | `InconsistentGeolocation` | Geo/location data inconsistent with expected behavior. |
| 8 | `HighVelocityTransfersInShortWindow` | Unusual transfer burst in short period. |
| 9 | `RemoteAccessToolDetected` | Indicators of remote-control session malware. |
| 10 | `KnownProxyOrVpnEndpoint` | Connection endpoint flagged as anonymization/proxy risk. |
| 11 | `SocialEngineeringPatternDetected` | Signals of social-engineering coercion pattern. |
| 12 | `ExternalOperatorSignal` | Signal from another payment system operator. |

## Usage

```rust,no_run
use cbr_finapi_rs::antifraud::AntiFraudRequest;
use cbr_finapi_rs::CbrApiClient;
use rfe_types::rust_decimal::Decimal;

#[tokio::main]
async fn main() -> Result<(), Box<dyn std::error::Error>> {
    let client = CbrApiClient::builder().api_key("...").build()?;

    let req = AntiFraudRequest {
        transaction_id: "tx-001".into(),
        amount: Decimal::new(10_000, 0),
        sender_inn: None,
        receiver_account: "40817810000000000000".into(),
        device_fingerprint: None,
        receiver_bank_bic: None,
        atm_id: None,
        atm_roundtrip_ms: None,
        last_credential_change_micros: None,
        cross_border_transfer: None,
    };

    let _decision = client.antifraud().check_transaction(req).await?;
    Ok(())
}
```