# Payment risk

URL: /systems/finance/payment-risk · Id: `capability:payment-risk`

> Payment risk scores each charge before it runs and allows, authenticates, holds or blocks it by the Startup’s risk Policy.

Payment risk scores each charge before it runs and allows, authenticates, holds or blocks it by the [Startup](/business/nouns/startup)’s risk [Policy](/business/nouns/policy).

## Contract
Every [Order](/business/nouns/order) is screened by [`Order.screen`](/business/nouns/order/screen) between `Order.place` and `Order.pay`. Stripe scores the payment from 0 to 99, and the risk Policy turns the score into one outcome.

| Outcome | What happens |
| --- | --- |
| `allow` | The charge runs. |
| `authenticate` | The buyer confirms with their card issuer, then the charge runs. |
| `review` | The Order waits for an [Approval](/business/nouns/approval) from the [Risk Analyst](/agents/operations/risk-analyst) and is not charged until approved. |
| `block` | The Order is canceled and never charged. |

An early fraud warning after a charge stops fulfillment at once. When the amount is at or below the dispute fee, a refund is proposed and waits its delay window.

## Verbs
| Verb | Object | Event |
| --- | --- | --- |
| [Order.screen](/business/nouns/order/screen) | [Order](/business/nouns/order) | [`Order.screened`](/business/events/Order.screened) |

## Interfaces
- [API](/code/api/reference)
- [SDK](/code/sdk/reference)
- [CLI](/code/cli/reference)
- [MCP](/code/mcp/reference)
- Webhooks

## Example
A buyer places a $1,400 [Order](/business/nouns/order) for a year of a data feed, from a new card in another country. Stripe scores it 82, the risk Policy rule `new-card-high-value` returns `review`, and the Risk Analyst approves it after the buyer answers one email.