# Request Fields

Send the request as `application/json`.

| Field | Type | Required | Validation |
| --- | --- | --- | --- |
| `transaction_id` | string | Yes | 1–36 characters; letters, digits, and hyphens only. |
| `image` | string | Yes | Raw Base64-encoded JPEG, JPG, or PNG image; decoded size at most 4 MB. |
| `channel` | string | Yes | 1–100 characters; letters, digits, and hyphens only. |

```json
{
  "transaction_id": "id-forgery-001",
  "image": "/9j/4AAQSkZJRgABAQAAAQABAAD...",
  "channel": "web"
}
```

Send the Base64 value without a `data:image/...;base64,` prefix. ID Card
Forgery v1 validates the Base64 data, decoded file size, and detected image
type. It does not apply a documented pixel-dimension requirement.
