> ## Documentation Index > Fetch the complete documentation index at: https://docs.lerian.studio/llms.txt > Use this file to discover all available pages before exploring further. # Create a fraud marker > Registers a DICT fraud marker for the taxpayer identified by taxIdNumber, optionally linked to a Pix key. requestId is the caller-provided idempotency key. Repeating a requestId with the same payload returns the same marker; repeating it with a different payload is rejected. The participant is determined by the authenticated tenant. ## OpenAPI ````yaml en/openapi/v3-current/pix-lerian-dict.yaml POST /dict/fraud-markers openapi: 3.1.0 info: contact: name: Lerian Studio url: https://lerian.studio description: >- Public API for Pix keys, claims, fraud markers, infraction reports, and MED funds recovery. license: name: Elastic License 2.0 url: https://www.elastic.co/licensing/elastic-license title: Pix Lerian — DICT version: release-candidate servers: - url: https://api.example.com/dict-hub/v1 description: >- Replace the example host with the URL provided during environment onboarding. security: - BearerAuth: [] tags: - description: Register, retrieve, list, update, and remove Pix keys. name: Entries - description: Look up Pix keys and check whether keys exist in the DICT directory. name: Keys - description: Manage ownership and portability claims for Pix keys. name: Claims - description: Manage participant-scoped MED 2.0 funds recoveries. name: Funds Recoveries - description: Manage MED 2.0 infraction reports for the authenticated organization. name: Infraction Reports - description: Create, query, cancel, and settle MED 2.0 refunds. name: Refunds - description: Create, query, list, and cancel DICT fraud markers. name: Fraud Markers paths: /dict/fraud-markers: post: tags: - Fraud Markers summary: Create a fraud marker description: >- Registers a DICT fraud marker for the taxpayer identified by taxIdNumber, optionally linked to a Pix key. requestId is the caller-provided idempotency key. Repeating a requestId with the same payload returns the same marker; repeating it with a different payload is rejected. The participant is determined by the authenticated tenant. operationId: createFraudMarker requestBody: content: application/json: schema: $ref: '#/components/schemas/CreateFraudMarkerBody' examples: fictitiousExample: summary: Fictitious example value: fraudType: APPLICATION_FRAUD key: '+5561999998888' requestId: 3f2f6a52-a5b7-4f1a-9b0f-64d3f4b6c111 taxIdNumber: '12345678901' required: true responses: '201': content: application/json: schema: $ref: '#/components/schemas/DICTFraudMarker' examples: fictitiousExample: summary: Fictitious example value: creationTime: '2026-08-21T10:00:00Z' fraudType: APPLICATION_FRAUD id: 0b843bcc-7c1a-4a12-9c88-8d3a5d70e6a1 infractionReport: id: 5e6f7a8b-9c0d-4e1f-8a2b-3c4d5e6f7a8b reporterParticipant: '18236120' key: '+5561999998888' lastModified: '2026-08-21T10:00:00Z' status: REGISTERED taxIdNumber: '12345678901' description: Fraud marker registered. '400': content: application/problem+json: schema: $ref: '#/components/schemas/Detail' description: >- Malformed taxIdNumber, fraudType, requestId or key (PIX-0003/PIX-0004), or requestId already used with a different payload (PIX-0132). '403': content: application/problem+json: schema: $ref: '#/components/schemas/Detail' description: >- The requesting participant is not authorized to perform this operation at the provider (PIX-0133). '429': content: application/problem+json: schema: $ref: '#/components/schemas/Detail' description: The provider rate-limited this operation; retry later (PIX-0134). '502': content: application/problem+json: schema: $ref: '#/components/schemas/Detail' description: >- The provider adapter call failed outright -- an unreachable adapter or an unclassified upstream failure (PIX-0141). '504': content: application/problem+json: schema: $ref: '#/components/schemas/Detail' description: The provider call did not complete within its deadline (PIX-0054). default: content: application/problem+json: schema: $ref: '#/components/schemas/Detail' description: Error x-codeSamples: - lang: bash label: cURL with fictitious data source: |- curl --request POST \ --url https://api.example.com/dict-hub/v1/dict/fraud-markers \ --header 'Authorization: Bearer demo-access-token' \ --header 'Content-Type: application/json' \ --data '{ "fraudType": "APPLICATION_FRAUD", "key": "+5561999998888", "requestId": "3f2f6a52-a5b7-4f1a-9b0f-64d3f4b6c111", "taxIdNumber": "12345678901" }' components: schemas: CreateFraudMarkerBody: additionalProperties: false properties: fraudType: description: BCB DICT fraud type (UNKNOWN is read-only, never creatable) enum: - APPLICATION_FRAUD - MULE_ACCOUNT - SCAMMER_ACCOUNT - OTHER examples: - APPLICATION_FRAUD type: string key: description: >- Optional Pix key tied to the marker. Maximum 77 BYTES UTF-8, not characters -- the schema deliberately does not declare maxLength (OpenAPI's maxLength counts characters, which would under-bound a multi-byte key); the byte-length limit is enforced at runtime (pkg/validation.ValidateDICTKeyLength). examples: - '+5561999998888' type: string requestId: description: >- Caller-minted create idempotency key, forwarded verbatim to the provider examples: - 3f2f6a52-a5b7-4f1a-9b0f-64d3f4b6c111 format: uuid type: string taxIdNumber: description: CPF (11 digits) or numeric CNPJ (14 digits) being marked examples: - '12345678901' type: string required: - taxIdNumber - fraudType - requestId type: object DICTFraudMarker: additionalProperties: false properties: creationTime: description: When the marker was registered at the provider (RFC 3339 UTC) examples: - '2026-08-21T10:00:00Z' format: date-time type: string fraudType: enum: - APPLICATION_FRAUD - MULE_ACCOUNT - SCAMMER_ACCOUNT - OTHER - UNKNOWN examples: - APPLICATION_FRAUD type: string id: description: Directory fraud-marker id examples: - 0b843bcc-7c1a-4a12-9c88-8d3a5d70e6a1 format: uuid type: string infractionReport: $ref: '#/components/schemas/DICTFraudMarkerInfractionReport' description: >- The infraction report the provider created this marker from, when applicable key: description: Pix key linked to the marker, when one was supplied on create examples: - '+5561999998888' type: string lastModified: description: When the marker was last modified at the provider (RFC 3339 UTC) examples: - '2026-08-21T10:00:00Z' format: date-time type: string status: enum: - REGISTERED - CANCELLED examples: - REGISTERED type: string taxIdNumber: description: CPF (11 digits) or numeric CNPJ (14 digits) marked examples: - '12345678901' type: string required: - id - status - taxIdNumber - fraudType - creationTime - lastModified type: object Detail: additionalProperties: false properties: code: description: >- Stable, machine-readable domain error code scoped to the emitting service (format: -NNNN). examples: - ERR-0001 type: string detail: description: >- A human-readable explanation specific to this occurrence of the problem. examples: - Property foo is required but is missing. type: string errors: description: Optional list of individual error details items: $ref: '#/components/schemas/ErrorDetail' type: - array - 'null' instance: description: >- A URI reference that identifies the specific occurrence of the problem. examples: - https://example.com/error-log/abc123 format: uri type: string status: description: HTTP status code examples: - 400 format: int64 type: integer title: description: >- A short, human-readable summary of the problem type. This value should not change between occurrences of the error. examples: - Bad Request type: string type: default: about:blank description: A URI reference to human-readable documentation for the error. examples: - https://example.com/errors/example format: uri type: string upstream: $ref: '#/components/schemas/Upstream' description: >- RFC 9457 extension member: the error a proxied third-party provider reported. Absent unless the emitting service explicitly surfaced one. type: object DICTFraudMarkerInfractionReport: additionalProperties: false properties: id: description: Infraction report id at the provider examples: - 5e6f7a8b-9c0d-4e1f-8a2b-3c4d5e6f7a8b type: string reporterParticipant: description: ISPB of the participant that opened the infraction report examples: - '18236120' type: string required: - id - reporterParticipant type: object ErrorDetail: additionalProperties: false properties: location: description: >- Where the error occurred, e.g. 'body.items[3].tags' or 'path.thing-id' type: string message: description: Error message text type: string value: description: The value at the given location type: object Upstream: additionalProperties: false properties: code: description: The upstream provider's own error code, verbatim. examples: - E4001 type: string message: description: >- The upstream provider's own error message, verbatim (bounded, never its raw response body). examples: - account not found at provider type: string type: object securitySchemes: BearerAuth: bearerFormat: JWT description: JWT bearer token issued by the identity provider. scheme: bearer type: http ````