Skip to main content
KYB webhooks report accepted compliance-session status changes. The webhook status is a compliance status and is not the same as the managed-account lifecycle status. A callback is planned only when the result update is accepted by the current compliance session. Duplicate provider events and stale status regressions do not create a new delivery.
After receiving a KYB event, query the relevant account resource if you need its current managed-account state. Do not map a KYB status directly to an account lifecycle status.

Events and Owners

  • VA_ACCOUNT_KYB — USER owner; supported subjects are VA_MOR, VA, and PA.
  • MASTER_ACCOUNT_KYB — PLATFORM owner; supported subject is MASTER.
Current routing requires exactly one owner. VA_ACCOUNT_KYB requires user_id and does not use platform_tenant_id. MASTER_ACCOUNT_KYB requires platform_tenant_id and does not use user_id. VA_ACCOUNT_KYB is delivered only to USER-owned subscriptions. ACCOUNT-owned webhook configurations are not evaluated for KYB delivery.

Status Values

The delivered value is one of PENDING, PENDING_SUBMISSION, APPROVED, REJECTED, EXPIRED, CREATION_FAILED, REVIEWING, ERROR, or FORCE_APPROVED. It does not include a COMPLIANCE_STATUS_ prefix.

Payload Schema

Empty optional fields are omitted. session_id, status, provider, and provider_event_id are required by the delivery pipeline.
FieldTypeDescription
delivery_idstringStable delivery identifier for this subscription.
request_idstringRequest identifier for compliance-result processing.
session_idstringCompliance session identifier.
event_typestringVA_ACCOUNT_KYB or MASTER_ACCOUNT_KYB.
subject_typestringIdentity type being reviewed.
merchant_idstringIdentifier of the reviewed merchant identity.
user_idstringUSER owner; present for VA delivery.
platform_tenant_idstringPLATFORM owner; present for master-account delivery.
bank_codestringSubject bank code or ISPB when available.
bank_accountstringSubject account number when available.
creator_bank_accountstringCreator account number when available.
master_bank_accountstringMaster account number when available.
reference_idstringCaller-provided identity reference when available.
statusstringNormalized compliance status.
providerstringUppercase compliance-provider name.
provider_event_idstringProvider event identifier.
provider_case_idstringProvider case identifier when available.
provider_profile_idstringProvider profile identifier when available.
provider_session_idstringProvider session identifier when available.
result_codestringProvider or business result code when available.
raw_result_refstringReference to the stored raw result when available.
verification_result_refstringVerification-result reference when available.
business_profile_refstringBusiness-profile reference when available.
occurred_atnumberEvent time as Unix milliseconds.

Payload Examples

See Delivery and Retries for acknowledgement and idempotency rules.