Preview:
-- upi_intent_merchant_decline_oc76a  RISK402
DROP TABLE team_kingkong.tpap_risk402_breaches;

-- CREATE TABLE team_kingkong.tpap_risk402_breaches AS
INSERT INTO team_kingkong.tpap_risk402_breaches
SELECT DISTINCT B.*, C.category
, C.merchantGenre AS merchantGenre_switch, D.merchantGenre AS merchantGenre_tpaphss
, C.initiationMode as initiationMode_switch -- ,  D.initiationMode as initiationMode_tpaphss
, C.isVerifiedMerchant
, IF(D.upi_subtype IS NOT NULL, D.upi_subtype, IF(C.category = 'LITE_MANDATE', 'UPI_LITE_MANDATE', '')) AS upi_subtype
, 'upi_intent_merchant_decline_oc76a'  AS rule_name
, 'Init mode 04 txn with offline/ non-verified mx' as breach_reason
FROM
    (SELECT txn_id,
    MAX(CASE WHEN participant_type = 'PAYER' THEN vpa END) AS payer_vpa,
    MAX(CASE WHEN participant_type = 'PAYEE' THEN vpa END) AS payee_vpa,
    MAX(DATE(created_on)) as txn_date,
    MAX(amount) AS txn_amount,
    MAX(created_on) AS txn_time
    FROM switch.txn_participants_snapshot_v3
    WHERE DATE(dl_last_updated) BETWEEN DATE'2025-01-01' AND DATE'2025-01-31'
    AND DATE(created_on) BETWEEN DATE'2025-01-01' AND DATE'2025-01-31' 
    GROUP BY 1)B
inner join
    (select txn_id, category
    , json_extract_scalar(extended_info, '$.merchantGenre') as merchantGenre
    , json_extract_scalar(extended_info, '$.initiationMode') as initiationMode
    , json_extract_scalar(extended_info, '$.isVerifiedMerchant') as isVerifiedMerchant
    from switch.txn_info_snapshot_v3
    where DATE(dl_last_updated) BETWEEN DATE'2025-01-01' AND DATE'2025-01-31'
    and DATE(created_on) BETWEEN DATE'2025-01-01' AND DATE'2025-01-31'
    AND json_extract_scalar(extended_info, '$.merchantGenre') = 'OFFLINE'
    AND json_extract_scalar(extended_info, '$.initiationMode') = '04'
    AND json_extract_scalar(extended_info, '$.isVerifiedMerchant') = 'false'
    and upper(status) = 'SUCCESS' AND category IN ('VPA2MERCHANT', 'VPA2VPA')) C
on B.txn_id = C.txn_id
INNER JOIN
    (SELECT txnid
    , regexp_replace(cast(json_extract(request, '$.evaluationType') as varchar), '"', '') AS upi_subtype
    , json_extract_scalar(request, '$.requestPayload.merchantGenre') AS merchantGenre
    FROM tpap_hss.upi_switchv2_dwh_risk_data_snapshot_v3
    WHERE DATE(dl_last_updated) BETWEEN DATE'2025-01-01' AND DATE'2025-01-31'
    AND (lower(regexp_replace(cast(json_extract(request, '$.requestPayload.payerVpa') as varchar), '"', '')) LIKE '%@paytm%'
    or lower(regexp_replace(cast(json_extract(request, '$.requestPayload.payerVpa') as varchar), '"', '')) like '%@pt%')
    AND regexp_replace(cast(json_extract(request, '$.requestPayload.payerVpa') as varchar), '"', '') IS NOT NULL
    AND regexp_replace(cast(json_extract(request, '$.requestPayload.payerVpa') as varchar), '"', '') <> ''
    AND json_extract_scalar(response, '$.action_recommended') <> 'BLOCK'
    -- AND regexp_replace(cast(json_extract(request, '$.requestPayload.payerType') AS varchar),'"','') = 'PERSON'
    -- AND regexp_replace(cast(json_extract(request, '$.requestPayload.payeeType') AS varchar),'"','') = 'PERSON'
    AND JSON_EXTRACT_SCALAR(request, '$.requestPayload.initiationMode') = '04'
    AND json_extract_scalar(request, '$.requestPayload.merchantGenre') = 'OFFLINE'
    AND regexp_replace(cast(json_extract(request, '$.evaluationType') as varchar), '"', '') = 'UPI_TRANSACTION')D
ON B.txn_id = D.txnid
WHERE payer_vpa IS NOT NULL;
downloadDownload PNG downloadDownload JPEG downloadDownload SVG

Tip: You can change the style, width & colours of the snippet with the inspect tool before clicking Download!

Click to optimize width for Twitter