Customer ID Verification

⚠️

New process

This guide provides information about customer ID verification using the SoFi Tech Solutions new integrated ID verification process: Identity Verification Service (IVS). IVS replaces the Legacy CIP integration solution in June 2026.

If you are using our Legacy CIP process, refer to the Legacy Customer ID Verification (KYC/CIP) guide.

Before opening an account and conducting financial transactions with a customer—whether a private individual or a business—a bank must follow strict processes to verify the identity of the customer. To operate in the U.S. financial system, you must comply with laws designed to prevent money laundering and terrorist financing, primarily the Bank Secrecy Act (BSA) and the USA PATRIOT Act. These regulations require your financial institution to implement a risk-based CIP to form a reasonable belief that you know the true identity of each customer. These processes are often called:

• KYC — Know Your Customer, for individual consumers
• KYB — Know Your Business, for business entities

At a minimum, your program must include procedures to:

• Collect information — Obtain identifying information from each customer (such as name, date of birth, address, and a national identification number such as SSN/ITIN/EIN).
• Verify identity — Use documents, non-documentary methods, or a combination of both
• Maintain records — Maintain a record of all information and verification methods used.
• Check against government lists — Determine whether a customer appears on any list of known or suspected terrorists.

📘

Note

SoFi Tech Solutions sometimes uses the term "CIP" to refer to the whole ID verification process.

The details of KYC and KYB requirements are specific to each country and regulatory environment, and may vary according to a financial institution's risk appetite. SoFi Tech Solutions and your sponsoring bank can help you identify the requirements for your particular program.

Choosing an ID verification solution

You have these options for performing ID verification:

• Use the SoFi Tech Solutions Identity Verification Service (IVS).
  • Provides KYC, KYB, and CIP. You can use this service as a standalone solution, or you can integrate it with the Create Account workflow.
  • Currently supports U.S. customers only.
• Use a third-party ID verification provider.
• Combine the SoFi Tech Solutions processes with a third-party process.

When deciding how to perform ID verification, remember to prioritize the customer experience during the onboarding phase. When a legitimate customer does not initially pass verification, for example, the customer might decide not to take the extra step to supply additional documentation or call customer support. If your verification solution has a low pass rate for your target demographic, you can lose customers to onboarding friction.

Work with SoFi Tech Solutions to determine which solution best addresses your use case. Maybe your target demographic is likely to possess ID documents from outside the United States. Some ID verification solutions use biometric technology or artificial intelligence to screen out likely bad actors, and others are integrated with blockchain technology.

📘

Note

See KYC in Mexico if SoFi Tech Solutions is your BIN sponsor in Mexico.

Regardless of which solution you choose, your app or website must collect identifying information from your prospective customers and submit the information for verification. Required information is:

• Legal name — First, middle (sometimes), last
• Address — Cannot be a P.O. box in the U.S. Must include street address, city, state, postal code, and country.
• Date of birth
• Customer ID — The types of customer identifiers to accept are determined by your bank and specified in your product settings. Consult the Customer ID Types enumeration for possible ID types. The SoFi Tech Solutions account-creation process can store 1–3 identifiers per customer.

Implementing ID verification

ID verification must be performed prior to account creation.

Using a standalone ID verification process

If you are using your own ID verification provider or if you're using the IVS endpoints without Program API integration, follow these steps:

1. Send customer information to your provider.
   • If you're using the IVS endpoints, use Verify Customer.
2. After ID verification is successful, send a request to Create Account with these parameters populated:
   • First, middle, and last names
   • Date of birth
   • Primary address
   • Optional — Physical cards only. Ship-to address (if different from the primary address, where to mail the card)
   • Optional — Customer ID: id/idType , id2/idType2, and/or id3/ idType3, as required by your bank or for record-keeping. See Using the id and idType parameters for additional information.
   • cipStatus — Do not include

You do not need to inform SoFi Tech Solutions whether a customer passed ID verification; however, you should create accounts only for those customers who pass.

📘

Note

See Create Account without integrated ID verification in the Creating an Account guide for the account-creation workflow.

Using the SoFi Tech Solutions integrated ID verification process

If you have decided to integrate IVS with the Program API (Create Account endpoint), you will need to make the following decisions in cooperation with your bank:

• Which IDs to require, request, or accept:
  • IVS accepts only U.S. SSNs and ITINs as primary IDs.
  • You can request one or two additional forms of ID for your own purposes, but they will not be passed to IVS. Consult the Customer ID Types enumeration for the complete list of ID types.
• Whether minors will be using the product, and what the minimum age is
• Whether the same government ID must be unique across all of your offerings or only within the same program or product

When you use the Create Account endpoint to collect and submit customer information SoFi Tech Solutions, SoFi Tech Solutions sends it through IVS, which returns one of four results:

• Pass — The prospective customer information was verified.
• Fail — The prospective customer information could not be verified.
• Refer — The prospective customer information needs manual review.
• In Progress — Needs more documentation. SoFi Tech Solutions sends an SMS with a secure URL for the customer to upload documentation.

If ID verification is still unsuccessful after the additional verification steps, the account is never activated.

📘

Note

See Create Account using IVS Integration in the Creating an Account guide for the account-creation workflow.

Using the id and idType parameters

Create Account has three sets of parameters for identifier inputs:

• id, id2, id3 — Contain the actual identifier
• idType, idType2, idType3 — Specify the type of ID that is in id, id2, or id3

When one of the id parameters is populated, the corresponding idType parameter is required. The format for id is determined by the value in its idType field, as shown in the Customer ID Types enumeration. For example, if you set idType: 2 (SSN), then id must contain nine numerals.

id and idType

When you are using the SoFi Tech Solutions integrated IVS, you must populate id and idType at minimum. IVS supports only two idType values:

• 2 — U.S. Social Security Number
• 15 — U.S. Individual Tax Identification Number

When you are using your own ID verification, and your bank requires a U.S. SSN for verification, you must populate id with the SSN. Do not put it in id2 or id3:

• In the RDFs, an SSN that is entered in the id field is masked, whereas an SSN in id2 or id3 is not masked. Because the SSN is PII, inputting the SSN in id avoids mishandling that information.
• The value in the id parameter is sometimes called the "customer ID," such as when using the Get Account by ID endpoint. SoFi Tech Solutions also calls it the "government ID" in some contexts or GID.

Other id and idType fields

Populating id2/idType2 or id3/idType3 depends on the requirements of your program.

• If you are using the SoFi Tech Solutions integrated IVS, only the id/idType values are sent to IVS. If you populate the other two ID fields, those values are written to the customer record but are not sent for verification.
• Alternatively, you can use the id2/idType2 parameters to pass card-art information to your embosser. See Specifying a card design in the Design a Card guide for details.
• If you populate id2 or id3 but not id (not supported for IVS integration), you must set these product parameters; otherwise, you must populate id with unique values such as the account holder's phone number:
  • VLDLV — null or not set
  • VALID — 0 or not set

Duplicate ID values

During product setup, you determine whether a customer can sign up more than once for the same product. SoFi Tech Solutions can verify that an id value is unique per product (prod_id), per program (prog_id), or across your entire product line. See Partners, Programs and Products for an explanation of these levels. The VLDLV parameter controls the level.

• SoFi Tech Solutions checks the value in id for duplicate entries when VLDLV is set. It does not check the value in id2 or id3 for duplicates.
• If you attempt to submit a duplicate id, Create Account returns status_code: 407-02.

Running ID verification on minors

Minor persons are not required to fulfill ID verification requirements but they do need to fulfill minimum age requirements. Determine the minimum age for minor customers and SoFi Tech Solutions will set it in the DOB product parameter. The dateOfBirth endpoint parameter is then verified against the age limit.

• If the minor's account is to be a secondary account to a parent's account, pass the parent's PRN for primaryAccount. See Primary and secondary account scenarios in the About Accounts guide for more information.

Testing ID verification

When testing in CV or Production, the following will result in status_code: 2 (invalid parameter) from the Create Account endpoint. This error prevents Create Account from sending the information to IVS:

• Year of birth before 1900
• Missing required values
• The SSN (idType: 2) has one or more of these characteristics:
  • Begins with 9, 000, or 666
  • Middle two digits are 00
  • Last four digits are 0000

Events API

You can arrange with SoFi Tech Solutions to receive these events related to customer ID verification:

SoFi Tech Solutions setup

These are the product parameters to be configured at SoFi Tech Solutions to control ID verification. See the Onboarding (KYC/CIP) table on the Parameters page for details on these parameters.