Overview

Stripe has updated the Issuing Authorization API to standardize risk level property naming. The risk_level property has been renamed to level in two risk assessment hashes: risk_assessment.card_testing_risk and risk_assessment.merchant_dispute_risk.

What Changed

• Old property name: risk_level
• New property name: level
• Affected fields:
  • risk_assessment.card_testing_risk.level
  • risk_assessment.merchant_dispute_risk.level

The property values and functionality remain unchanged—only the naming has been updated to align with Stripe's standardized risk level naming pattern across Issuing and Treasury APIs.

Breaking Change

This is a breaking change. Attempting to access the old risk_level properties will result in an error. All integrations must be updated to use the new level property names.

Required Actions

Developers must update their integration code to reference the new property names when:

• Reading authorization responses
• Creating test-mode authorizations
• Processing any risk assessment data from Issuing Authorization objects

Upgrade Path

1. Check your current API version in Workbench
2. Upgrade SDKs to the latest version matching the new API version (2026-03-25.dahlia) or manually update API requests with the new version header
3. Update webhook endpoint configurations to use the new API version
4. Test your integration against the new version, including Connect integrations if applicable
5. Perform the upgrade in Workbench (with 72-hour rollback capability available)