Know your Customer (KYC)

Unblock API incorporates Know Your Customer (KYC) processes to ensure regulatory compliance and platform security for individual users. This guide details the KYC flows, integration levels, statuses, and API endpoints relevant to individual user verification.

🤔 Why KYC for Individuals?

KYC is a regulatory requirement essential for:

• User Identity Verification: Confirming the identity of individual users.
• Anti-Money Laundering (AML): Preventing illicit activities and ensuring platform security.
• Regulatory Compliance: Adhering to financial regulations in various jurisdictions.

Levels of KYC Abstraction

Unblock offers tiered KYC integration levels, providing flexibility based on your integration needs:

• ☝️ Level 1: SDK Integration and Full Delegation to Unblock
  • Description: The fastest integration. Unblock, via Sumsub, handles the entire KYC process from document collection to verification.
  • Process:
    1. Create User: Create a user endpoint
    2. Create KYC Applicant: Use /user/kyc/applicant endpoint.
    3. Retrieve Sumsub SDK Token: Use /user/kyc/applicant/token endpoint.
    4. Initiate Sumsub SDK: Embed the Sumsub SDK in your frontend.
    5. Webhook Notifications: Receive KYC webhooks for status updates.

✌️ Level 2: Merchant Managed KYC

• Description: Unblock relies on merchant's KYC process, performed outside of the Sumsub SDK flow. This level requires a prior agreement with Unblock.

  Detailed Steps for Merchant Managed KYC:

  If you are managing KYC outside of the Sumsub SDK, you need to perform the following steps to ensure KYC data is correctly processed by Unblock:

  • Three-Party Agreement: Ensure a three-party agreement is in place between Sumsub, your platform (the merchant), and Unblock. This agreement is essential for enabling secure KYC data sharing between the platforms.
  • Sumsub Share Token: Obtain a Share Token from Sumsub's API. You will need to use Sumsub's Generate Share Token endpoint to retrieve this token. This Share Token acts as a secure credential to access and export the KYC data.
  • Terms and Conditions Hash Generation: You are responsible for compliance with legal documents. Generate and provide the SHA256 hashes of the latest Terms and Conditions, Privacy Policy, and Terms of Service documents. Refer to the Generating Terms and Conditions Hashes for Compliance guide for detailed instructions on generating these hashes. These hashes must be provided when creating or updating users via the /user endpoint.
  • Create User in Unblock: Use the Create a user endpoint in the Unblock API to create a user entity. This step is necessary to link the KYC data to a specific user within the Unblock system.
  • Export Applicant to Unblock: Utilize Unblock's /user/kyc/applicant/share-token endpoint. In the request body, include the Share Token obtained from Sumsub. This action securely exports the KYC data collected by your platform from Sumsub to Unblock for processing and compliance checks.
  • Webhook Notifications: Continue to monitor and process KYC webhooks. Unblock will send KYC webhooks to your configured webhook URL to provide real-time updates on the KYC status of users, triggered by the data export process.

KYC Statuses for Individuals

Track user KYC status via KYC webhooks.

KYC in Sandbox

Simulate KYC flows in the Sandbox environment** using the [SANDBOX] Patch the KYC verification status enpoint for testing.

API Endpoints for KYC

Webhooks for KYC Updates

Receive real-time updates on KYC status changes via KYC webhooks.

Integrate Unblock's KYC to ensure compliance and a secure onboarding experience for individual users.