Not sure which flow applies to your account? Start with Overview & which flow applies.
How it works
This is the flow for partners that are not regulated entities. You collect the user’s data in your own UI and submit it through the API, as in every KYC. Ripio then processes that data and asks the user to prove who they are: the response includes aprovider_url where the user uploads their ID document and completes a liveness check with the identity provider.
The verification ends asynchronously, once the identity provider reports back. Until then the KYC Submission stays IN_REVIEW.
The flow
1
Get the KYC requirements
Call KYC Requirements to get the fields required for your account’s country.
2
Create the KYC Submission
Call Create KYC Submission with the user’s Save the
email and the kyc_submission data. The response comes back IN_REVIEW, with a provider_url:Response
submission_id to follow the verification.3
Redirect the user to provider_url
Open
provider_url in the user’s browser or in a webview. That page is Ripio’s KYC platform: the user uploads their ID document and completes the liveness check there, so you don’t build any document-capture screen.When they finish, they are sent back to the redirect URL configured for your account. Ripio sets it up for you; it is not part of the request.4
Get the result
You get the outcome in two ways:
- Webhook:
KYC.COMPLETEDwhen the user is approved,KYC.FAILEDwhen they are not. See BaaS Webhooks. - Polling: Retrieve KYC Submission with the
submission_id.
KYC.IN_REVIEW notifications. Act on the final status only.provider_url carries a token bound to this user’s verification process. Treat it as a secret:
do not log it, share it or reuse it for another user.