Skip to Content
B2C APIUser Device Endpoints

User Device Registration

Register or update a user’s device information. This endpoint is typically called during transaction requests to maintain device tracking and security measures.

Note

If you don’t have your own device/IP info, we also offer an external device fingerprinting SDK that provides enhanced device identification capabilities and seamless integration with our API. Contact our team at support@orca-fraud.com to get more info.

API Endpoint

URL: /v1/userDevice
Method: POST

Request Body

The request must include a JSON payload with the device details:

{ "id": "DEVICE123", "userId": "USER123", "deviceId": "iPhone13-UDID789", "name": "John's iPhone", "type": "mobile", "sessionKey": "session_123", "host": "johns-iphone.local", "userAgent": "Mozilla/5.0 (iPhone; CPU iPhone OS 15_0 like Mac OS X) AppleWebKit/605.1.15", "remoteIP": "192.168.1.1", "status": "active", "createdAt": 1734167723000 }

Response

A successful request returns a 200 status code with the registered device details:

{ "id": "DEVICE123", "userId": "USER123", "deviceId": "iPhone13-UDID789", "name": "John's iPhone", "type": "mobile", "sessionKey": "session_123", "host": "johns-iphone.local", "userAgent": "Mozilla/5.0 (iPhone; CPU iPhone OS 15_0 like Mac OS X) AppleWebKit/605.1.15", "remoteIP": "192.168.1.1", "status": "active", "lastSeen": 1734167723000, "firstSeen": 1734167723000, "createdAt": 1734167723000 }

Error Response Format

See the Error Reference section for a full description of API errors. All API errors follow a consistent JSON structure:

{ "error": { "type": "ERROR_TYPE", "message": "Human-readable error description", "details": ["Additional error details (optional)"] }, "timestamp": 1755602195137 }

In the case of a validation error, the format will be as follows:

{ "error": { "type": "VALIDATION_ERROR", "message": "Request validation failed", "details": [ "/id: Expected string" ] }, "timestamp": 1755602195137 }

Schema Definition

UserDevice

PropertyTypeRequiredDescription
idstringYesUnique identifier for the device registration
userIdstringYesUser identifier
deviceIdstringYesUnique device identifier
namestringNoName of the device
typestringNoType of device (e.g., mobile, desktop)
fingerprintstringNoUnique device fingerprint identifier
sessionKeystringNoUnique session identifier
sourcestringNoFingerprinting provider (e.g., SHIELD, FingerprintJS)
hoststringNoHostname of the device
userAgentstringNoUser agent of the device
remoteIPstringNoRemote IP address of the device
statusstringYesDevice status (ACTIVE, BLOCKED, SUSPICIOUS)
lastSeennumberNoUnix timestamp in milliseconds
firstSeennumberNoUnix timestamp in milliseconds
createdAtnumberYesUnix timestamp in milliseconds that device entity was created
Last updated on