Retrieve detailed information about multiple compromised bank check notifications with data grouped into UI-ready panels.
What this endpoint does
Retrieves detailed panel data for up to 250 Compromised Bank Check playbook alerts in a single request. These alerts fire when images of compromised bank checks appear on dark web channels. Use Playbook Alerts: Search with category: ["fraud_compromised_checks"] to obtain alert IDs — note the category name differs from the endpoint path. For a single alert, use Playbook Alerts: Bank Checks Detail. To get the check image, use Playbook Alerts: Bank Checks Image.
Response data
Returns an array of alert objects (unlike the detail endpoint which returns a single object). Each alert contains check details — amount, check/routing numbers, bank name, payer/payee identity with addresses, dark web source and actor information, and triage status with available remediation actions like "Flag as Stolen" or "Stop Payment."