Reusable KYC (Shared KYC)

Paybis allows you to avoid repeated KYC for your verified customers on a per-user basis (with applicant data sharing) for those using Sumsub as a KYC provider.

The recommended approach is to integrate Shared KYC, allowing seamless data sharing between the partner and Paybis via Sumsub.

Understanding Customer Categories and Verification Requirements

To ensure compliance and risk mitigation, Paybis categorizes customers into four groups, each with specific verification needs:

  • Regular: Requires Basic Verification (personal information, ID document, selfie).
  • US: Requires Basic Verification plus Social Security Number (SSN) or Individual Taxpayer Identification Number (ITIN).
  • High Risk: Requires Basic Verification plus Proof of Source of Funds (SOF).
  • UK: Paybis will always request KYC, regardless of partner verification.

ℹ️

Please find the document organized by country here: Paybis SumSub configuration to ensure that the relevant information is transmitted.

Required Data for Basic Verification

The following personal information is required:

  • First Name,
  • Last Name,
  • Date of Birth,
  • Nationality,
  • Country of Residence
  • Residential Address (including street, city, postal code, and country).

ℹ️

Important: Please note that the "Country of Residence" information should be obtained from the "Provided Personal Info" section, not from the "Provided Address" section.

The following identity verification information is required:

  • Government-issued ID document (e.g., passport, driver's license),
  • Selfie (for liveness check).

ℹ️

If any of the required data is missing, Paybis may:

  • Request Additional Information: Prompt the user to provide the missing details within the widget.
  • Initiate Verification: Start a new KYC verification process if the missing information is critical.
  • Reject the Transaction: In some cases, the transaction may be rejected if essential information is not provided.

🚧

Only users whose applications have been approved on the partner's platform should be shared with Paybis.

Important Notes

  • Ensure the data collected on your platform matches the information on the user's identification documents.
  • Use Sumsub's API to securely transmit the collected data to Paybis.
  • Consult your Paybis account manager for any questions or concerns.

Integration Overview

The Shared KYC feature of the Paybis API enables your users to avoid repeated identity verification. This is achieved by exchanging the SumSub KYC data between your application and Paybis.

To do this your application will need to do the following:

  1. Confirm with Paybis: Receive confirmation from your Paybis integration manager that the Shared KYC model will be supported in your use case. This is done during the onboarding process.
  2. Generate a Shared Access Token: Generate a shared access token via SumSub.
  3. Send Token to Paybis: Send the shared access token to Paybis during your application's interaction with the Paybis backend.

ℹ️

  • Applicant Level Consistency: For seamless data transfer, ensure the applicant level (e.g., "Basic Verification Flow") is identical in both the source and destination systems when using the Shared KYC feature. The required verification options are:
    • Identiry Document,
    • Selfie,
    • Applicant Data.
  • Document Configuration: We're standardizing document verification settings to enhance KYC processes. Please request the configuration setup file from your account manager.

Getting a Shared Access Token

Follow the SumSub instructions to generate the shared access token as explained here. Pass the following values in the forClientId field:

  • paybis_test- for sandbox testing;
  • paybis- for production environment.

⚠️

Pay attention on the token expiration time ttlInSecs - set it with enough time period, so that it's not expired at the point of the Request call.

Token Provisioning to Paybis

The token obtained from SumSub needs to be sent to Paybis during the request call. It will trigger the KYC data importing from SumSub.

ℹ️

  • Note that it’s expected that a shared access token will only be generated for fully verified users. It means that the user's verification is completed and the GREEN result is received from SumSub. Otherwise, the user will be required to pass the verification within the Paybis widget flow.
  • Make sure to collect the Social Security Number (SSN) during the verification process for US customers. If the SSN is absent in the applicant profile imported via the shared token, the user will be prompted to complete verification within the Paybis widget flow.

Retrieving Shared Access Token from Paybis

If the user completes SumSub verification in the Paybis widget, a shared access token can be requested from Paybis by calling the SumSub Shared Token endpoint. The provided token allows the import of applicant KYC data from SumSub to the partner's system.

ℹ️

Note that you can get updates on the users' verification status changes by implementing the corresponding webhook.