AML v2 → v3 Migration Guide
Who this applies to: Partners currently on AML v2 who are upgrading to AML v3, or partners who have already been moved to v3 and haven't updated their webhook handler yet.
What's changing in the webhook
Three things are different in the v3 webhook payload:
- Status field is renamed — Read
statusinstead ofalert_status - Status values are renamed —
ACCEPTEDis nowACTIVE,DECLINEDis nowSTOPPED - Nationality format changes — 3-letter codes (
GBR) become 2-letter ISO codes (GB) - New optional field —
aml_checkcontains enriched data (PEP, sanctions, adverse media). You don't need to use it, but it's there if you want it.
Do I need to update right now?
It depends on which field your integration reads:
- Reading
alert_status→ You're safe for now. The old values (ACCEPTED/DECLINED) are still sent for backwards compatibility. No immediate action needed, but plan to migrate — this field is deprecated and will be removed in a future release. - Reading
status→ Update immediately. The values areACTIVEandSTOPPED— if your code expectsACCEPTED/DECLINEDfrom this field, it will fail silently or break. - Using nationality codes → Update your handling to accept both 2-letter and 3-letter formats, or switch fully to 2-letter.
What to update
| What | Before (v2) | After (v3) |
|---|---|---|
| Field to read | alert_status | status |
| "All clear" value | ACCEPTED | ACTIVE |
| "Flagged" value | DECLINED | STOPPED |
| Nationality format | GBR | GB |
Recommended steps
- Confirm with the integrations team that your account has been moved to v3
- Update your webhook handler to read
statusinstead ofalert_status - Replace
ACCEPTED/DECLINEDchecks withACTIVE/STOPPED - Update any nationality handling to use 2-letter codes
- Test against a sandbox webhook event before going live