Last updated: June 5, 2026

1. Issuing Signals API Services. 

These terms (“Issuing Signals API Service Terms”) supplement the General Terms and govern the use of the Issuing Signals API Services and Issuing Signals API Data.  Capitalized terms that are not defined in these terms have the same meanings given to them in the General Terms, and as applicable, the Stripe Issuing Platform Services Terms and Stripe Issuing Accountholder Services Terms. User may access information regarding the Issuing Signals API Services via the Stripe Dashboard, or as Stripe may otherwise make available to User. The Issuing Signals API Services are Preview Services. 

2. Permitted Use. 

User may use the Issuing Signals API Services and Issuing Signals API Data solely to help detect and block actual or potential fraud and unauthorized Card Transaction Authorizations, in each case, in connection with User’s use of the Services or User’s card transactions processed via a Third-Party Service.

3. Data.

3.1 Privacy

User must only use Issuing Signals API Data in accordance with Stripe’s Privacy Policy.

3.2 Personal Data.

User must use reasonable efforts to ensure that all Personal Data that User provides to Stripe is accurate and complete.

3.3 Issuing Signals API Data.

Issuing Signals API Data, and any subset thereof, is Stripe Data for the purposes of this Agreement. User will promptly delete or destroy all Issuing Signals API Data in User’s possession or control received in connection with the Issuing Signals API Services (a) upon termination of these Issuing Signals API Service Terms; or (b) at any time upon Stripe’s request. However, in each case User may retain copies of the Issuing Signals API Data to the extent Law requires, so long as User uses the Issuing Signals API Data only to comply with Law.

4. Services Restrictions.

User must not, and must not enable or allow any third party, to:

(a) use the Issuing Signals API Services or Issuing Signals API Data as a factor in determining any person’s eligibility for credit, insurance, housing or employment, or in any way that could cause Stripe to be a “consumer reporting agency” or cause any part of the Issuing Signals API Data to constitute a “consumer report,” as each term is described in the FCRA (if applicable);

(b) sell, rent, transfer, make available, or communicate orally or through other means Issuing Signals API Data (including as the term “sell” is defined in the CCPA);

(c) disclose (except as Law requires), download, or store the Issuing Signals API Data;

(d) use the Issuing Signals API Services or Issuing Signals API Data to: (i) validate, train, enhance or deploy any machine learning models or algorithms that are derived from, a substitute for, or substantially similar to, the Issuing Signals API Services; or (ii) directly or indirectly develop or otherwise make available on a commercial basis any security or fraud detection product or service;

(e) use the Issuing Signals API Services or Issuing Signals API Data to discriminate based on race, gender, or other protected characteristics, or take any “adverse action” as that term is described in the FCRA (if applicable);

(f) except as allowed under Section 2 of these Issuing Fraud Tools Services Terms, use the Issuing Signals API Services or Issuing Signals API Data to evaluate transactions not processed through the Services; or

(g) use Issuing Signals API Services provided to train or improve User products and services.

5. Responsibility for Decisions and Disclaimers.

5.1 Responsibility for Decisions.

(a) User is solely responsible for User’s use of the Issuing Signals API Services and Issuing Signals API Data, as well as the decisions User makes and the actions User takes in connection with the Issuing Signals API Services and Issuing Signals API Data.

(b) User acknowledges that its choice to input and use additional rules with the Issuing Signals API Services may result in longer authorization times for applicable Card Transaction Authorizations.

5.2 Disclaimers.

(a) Authorization Risk Scores are based on data available to the Issuing Signals API Services at the time it is generated, and they do not auto-update to reflect any subsequent changes to that data.

(b) The Issuing Signals API Services use data from transactions processed through the Services. 

(c) The Issuing Signals API Data does not constitute legal or compliance advice, or advice as to whether User should proceed with a transaction with another person.

(d) User’s use of the Issuing Signals API Services or the Issuing Signals API Data does not guarantee the prevention of fraudulent Card Transaction Authorizations, Card Testing Attacks, or other fraudulent activity. Stripe is not liable for any losses, damages, or costs arising out of or relating to (a) unauthorized transactions, compromised Cards, Card Testing Attacks, and other fraudulent activity; (b) non-fraudulent transactions that may be blocked by the Issuing Signals API Services; or (c) the accuracy of the Authorization Risk Scores and other Issuing Signals API Data, and any actions that User or Stripe may take based on the Authorization Risk Scores and other Issuing Signals API Data.

6. Definitions.

“Authorization Risk Score” means a risk score or level associated with a Card Transaction Authorization based on Stripe Data, including the Merchant Dispute Rate and the Card Testing Risk Level.

“Card Testing Attack” means repeated fraudulent tests of card account numbers until a valid card account number is found.

“Card Testing Risk Level” means the level assigned to a Card Transaction Authorization that represents the likelihood the Card Transaction Authorization is or will be impacted by Card Testing Attacks.

“Card Transaction Authorization” means an authorization request to make a payment with a card or obtain cash at an automatic teller machine (ATM). 

“Fraud Disputability Assessment” means, with respect to a Card Transaction Authorization, an assessment of the likelihood that the Card Transaction Authorization can be disputed in the event of fraud.

“Merchant Dispute Rate” means an assessment of the historical dispute rate of a merchant’s Transactions for the time period during which Stripe has provided Stripe Payments Services to that merchant.

“Issuing Signals API Data” means Authorization Risk Scores, and all other data User receives through the Issuing Signals API Services.

“Issuing Signals API Services” means the Preview Services that are designed to enable User to detect and evaluate the risk that a Card Transaction Authorization or other related activity is fraudulent, by providing access to an Authorization Risk Score, for each Card Transaction Authorization.