curl --request POST \
  --url https://sandbox-apigw.singapay.id/api/v1/kyc/bank/verify \
  --header 'Authorization: Bearer <token>' \
  --header 'Content-Type: application/json' \
  --data '
{
  "request_id": "TXN-20260727-001",
  "account_number": "1234567890",
  "name": "Budi Santoso",
  "bank_code": "002"
}
'

{
  "code": "SUCCESS",
  "message": "OK",
  "data": {
    "status": "found",
    "similarity": 100,
    "suggestion": "pass"
  },
  "request_id": "TXN-20260727-001",
  "pricing": "PAID"
}

Bank

Verify a name against a bank account

Looks up the registered holder name on the bank for the given account number and compares it with the name you send.

A completed check is billed (pricing=PAID), including when the account is not found. Validation errors and service failures are not billed (pricing=FREE).

This feature must be enabled on your account. If it is not, the API returns UNAUTHORIZED.

Outcomes

Result	Response
Account found	`code=SUCCESS`, `data.status="found"`, `pricing=PAID`
No account at this bank	`code=SUCCESS`, `data.status="not found"`, `suggestion=reject`, `pricing=PAID`
Temporary service issue	`code=SERVER_ERROR`, `pricing=FREE`
Invalid request (account, bank, name, or `request_id`)	`code=CLIENT_ERROR`, `pricing=FREE`
Same `request_id` with a different body	`code=DUPLICATE_REFERENCE`, `pricing=FREE`
Missing token, feature not enabled, or IP not allowlisted	`code=UNAUTHORIZED`, `pricing=FREE`
Prepaid balance too low	`code=INSUFFICIENT_BALANCE`, `pricing=FREE`

Account numbers

You may include spaces, dashes, dots, or underscores. We ignore those characters. After that, the number must be 6–20 digits.

Bank codes

bank_code is a 3-digit Indonesian clearing code from the supported-banks list in the dashboard. Values such as 2 or 14 are accepted and padded to 002 / 014. An unknown or disabled code returns CLIENT_ERROR (not not found).

Idempotency

Use a unique request_id for each new check (UUID v4 is recommended). Repeating the same request_id with the same body returns the original result and is billed once — unless the previous attempt did not complete, in which case the check runs again. A different body with the same request_id returns DUPLICATE_REFERENCE.

POST

api

kyc

bank

verify

curl --request POST \
  --url https://sandbox-apigw.singapay.id/api/v1/kyc/bank/verify \
  --header 'Authorization: Bearer <token>' \
  --header 'Content-Type: application/json' \
  --data '
{
  "request_id": "TXN-20260727-001",
  "account_number": "1234567890",
  "name": "Budi Santoso",
  "bank_code": "002"
}
'

{
  "code": "SUCCESS",
  "message": "OK",
  "data": {
    "status": "found",
    "similarity": 100,
    "suggestion": "pass"
  },
  "request_id": "TXN-20260727-001",
  "pricing": "PAID"
}

Authorizations

Authorization

string

header

required

Access token from POST /api/v1/kyc/auth/get-auth-token. Valid for one hour.

Body

application/json

request_id

string

required

Your unique reference for this check. Use a new UUID for each new verification. Sending the same key with the same body returns the original result and is billed once.

Example:

"TXN-20260727-001"

account_number

string

required

Bank account number. Spaces, dashes, dots, and underscores are ignored. After that, the number must be 6–20 digits.

Example:

"1234567890"

name

string

required

Name to compare with the registered account holder.

Required string length: 1 - 200

Example:

"Budi Santoso"

bank_code

string

required

3-digit Indonesian bank clearing code from the supported-banks list in the dashboard. Values such as 2 or 14 are padded to 002 / 014. Unknown or disabled codes return CLIENT_ERROR.

Example:

"014"

Response

Check complete (whether the account exists or not). code is SUCCESS. Read data.status and data.suggestion for the outcome. pricing is PAID.

code

enum<string>

required

Always SUCCESS on this response. Read data for the outcome.

Available options:

SUCCESS

Example:

"SUCCESS"

message

enum<string>

required

Always OK. Use code and data, not this field, to branch.

Available options:

OK

Example:

"OK"

data

object

required

Show child attributes

request_id

string

required

The request_id you sent.

Example:

"TXN-20260727-001"

pricing

enum<string>

required

Always PAID on this response — including when data.status is not found.

Available options:

PAID

Example:

"PAID"