Canada Fintrac

Canada eKYC non-doc verification leverages Canada's source of truth to validate individuals. It is essential in eKYC processes for ensuring identity authenticity, regulatory compliance, and enhanced security. It helps prevent fraud, boosts user trust, and streamlines operations through automated and efficient verification methods.

Integration

User input flow

eKYC module configuration gives various options to specify different search criteria with various sources of truth for each country (eg. US has multiple via Telco, Credit Bureau, and Driver's License). User data can be collected via a user input flow by using pre-selected fields where users can type in their name or date of birth, etc. See an example below:

eKYC user input flow example

Module configuration

The module configuration can be leveraged to select the applicable fields for the input data you would like to collect from the end user.

eKYC Module configuration

Direct API Approach

All module configurations and user data can be forwarded directly in the request for performing an eKYC search. This will override existing configuration and data collected about the user.

📘

API Authentication

All endpoints require authentication headers to be specified as stated in Incode API Documentation

POST /omni/externalVerification/ekyc

This endpoint performs an eKYC check for the individual specified. Note: Endpoint can have empty body {} and in that case information will be pulled from module configuration and session details.

  • country: (mandatory) String. Two letter Alpha-2 country code. Must be CA.
  • source: (mandatory) String. Must be CA_CREDIT_FINTRAC.
  • firstName:: (mandatory) String. First name of the individual.
  • surName: (mandatory) String. Last name of the individual.
  • middleName:: (optional) String.
  • street: (mandatory) String. (Address = street + houseNo in CA)
  • city: (mandatory) String. City of the individual's address. (eg. Toronto).
  • state: (mandatory) String.
  • postalCode: (mandatory) String. postalCode formatted based on per-country postalCode basis.
  • dateOfBirth: (mandatory) String. Format: YYYY-MM-DD (eg. 1980-06-21)

Example Incode request:

{
    "plugins": ["kyc"],
	  "source": "CA_CREDIT_FINTRAC", 
    "firstName": "John",
    "middleName": "", 
    "surName": "Doe",
    "street": "97 Main St",
    "city" : "Ottawa",
    "state": "ON",
    "postalCode": "K1M1N8",
    "country": "CA", 
    "dateOfBirth" : "1990-12-12", 
}

Direct API Response

📘

API Authentication

All endpoints require authentication headers to be specified as stated in Incode API Documentation

Note: Endpoint can have empty body {} and in that case information will be pulled from module configuration and session details.

Example Incode response:

{
    "kyc": [
        {
            "key": "firstNameMatch",
            "status": "Exact"; 
        },
        {
            "key": "middleNameMatch",
            "status": "No Match"
        },
        {
            "key": "lastNameMatch",
            "status": "Exact"
        },
        {
            "key": "fullNameMatch",
            "status": "Exact"
        },
        {
            "key": "dobMatch",
            "status": "Exact"
        },
        {
            "key": "streetMatch",
            "status": "Exact"
        },
        {
            "key": "cityMatch",
            "status": "Exact"
        },
        {
            "key": "stateMatch",
            "status": "Exact"
        },
        {
            "key": "postalCodeMatch",
            "status": "Exact"
        },
        {
            "key": "fullAddressMatch",
            "status": "Exact"
        },
        {
            "key": "overallLevel",
            "status": "Low"
        },
        {
		        "key": "creditFileNumber", 
		        "status": "123456789"
		        
        },
        {
		        "key": "creditFileCreationDate", 
          "status": "01-14-2000"
        }
    ]
}

Please refer to error response to see conventional HTTP response codes to indicate the success or failure of an API request. For Canada, custom 400 error messages if taxId, or country is “ “ or null:


Incode API KeyStatusDefinition
firstNameMatchexact, nomatchMatches first name submitted against the name associated to the value in the source of truth.
middleNameMatchexact, nomatchMatches middle name submitted against the name associated to the value in the source of truth.
lastNameMatchexact, nomatchMatches last name submitted against the name associated to the value in the source of truth.
fullNameMatchexact, nomatchMatches full name submitted against the full name associated to the value in the source of truth.
dobMatchexact, nomatchMatches date of birth submitted against the date of birth associated to the value in the source of truth
streetMatchexact, nomatchMatches street submitted against the street associated to the value in the source of truth
cityMatchexact, nomatchMatches city submitted against the city associated to the value in the source of truth
stateMatchexact, nomatchMatches state submitted against the state associated to the value in the source of truth
postalCodeMatchexact, nomatchMatches postal code submitted against the postal code associated to the value in the source of truth
fullAddressMatchexact, fuzzy, nomatchMatches full address (street, city, state, zip) submitted against the full address associated to the value in the source of truth
creditFileNumberIntegerThe credit file number of the individual.
Note: This is only available if the credit file was created at least 3 years ago. For cases where the credit file was created 3 years ago or later, the response will be "File created less than 3 years ago".
creditFileCreationDateDateDate when credit file was created.
Note: This is only available if the credit file was created at least 3 years ago. For cases where the credit file was created 3 years ago or later, the response will be "File created less than 3 years ago".
overallLevellow, medium, high

Overall Risk Level is focused on the risk associated to the submitted full name, full address and date of birth.

See context below for more information around how low, medium, and high are calculated


overallLevel

Overall Level is the API response key for the submitted name. The fields low, medium, and high are mapped to a proprietary fuzzy matching algorithm that is mapped to a score from 0 to 100.

As a default, overallLevel will return:

low: when fullNameMatch & postalCodeMatch & dobMatch are exact;

high: when fullNameMatch & postalCodeMatch & dobMatch are nomatch;

medium: for all otherwise combination.

Single Session Dashboard Result