--- title: "Get Instant Verification" method: POST path: "/prp/1.0/getInstantVerification" tags: ["Risk"] --- # Get Instant Verification `POST /prp/1.0/getInstantVerification` Use the Get Instant Verification endpoint to validate the ownership and authenticity of an account. This endpoint returns risk levels, account existence, and associated metadata to help determine if an account is valid and if its owner is correctly identified. It provides detailed risk assessments for multiple use cases associated with an external bank account validation, such as <> transactions, wire transactions, risk checks before account linking, and potential <> mitigation. See About the Instant Verification Engine for more details. ## Response `default` - object - `status_code` integer, required — The response status code. May return a string for some statuses. - `status` string, required — The condition of a process or response - `errors` string[] — A list of errors generated while the request was processed - `rtoken` string, nullable — A system-generated ID used for tracking - `processing_time` number, nullable — The time elapsed in processing the request - `echo` object, nullable — A structure that contains transaction ID information - `transaction_id` string — An ID that represents an API transaction - `provider_timestamp` string, date-time — Store a related timestamp for reporting and troubleshooting purposes - `provider_transaction_id` string — Secondary transaction identifier (generated by a provider) - `system_timestamp` string, date-time, nullable — A system generated timestamp - `response_data` object - `risk_service_id` string, required — Unique identifier provided by SoFi Tech Solutions during the implementation to obtain client configuration details - `transaction_id` string — Unique provider-generated ID to identify this API call - `event_type` 'acct_vrfy' | 'ach' | 'wire' | 'rtp' | 'fednow', required — Specifies the type of the event. Returns: - `event_subtype` string — Specifies the subtype of the event: * `incoming_debit` * `outgoing_credit` * `incoming_credit` * `outgoing_debit` - `event_id` string, required — System-generated universal unique identifier of the event - `event_ts` string, date-time, required — Event timestamp - `account_id` string, required — SoFi Tech Solutions UUID that identifies the customer account associated with the related event - `person_id` string, required — Unique identifier of the customer associated with the event - `account_uuid` string, required — SoFi Tech Solutions UUID that identifies the account which the related event is associated with - `person_uuid` string, required — SoFi Tech Solutions UUID that identifies the account holder associated with the event - `overall_risk_level` string — Determines the fraud risk of the ACH transaction. Below is the recommended actions for you to take: * `very_high` — Cancel the transaction and the bank link * `high`— Challenge the account holder and queue for review * `medium` — Approve the bank account, allow the transaction, and/or challenge the customer * `low` — Approve the bank account and allow the transaction * `''` — Data enrichment layer is not configured to be called - `reason_cd` string[] — List of reason codes. See Instant Verification Reason Codes for valid values. - `identity` object — Identity risk signals - `risk_score` number — Returns `0` — Reserved for a future use case, or `-1.0` — Identity risk score is not configured to be called - `risk_level` string — Risk level of the customer. Below is the recommended actions for you to take: * `very_high` — Cancel the transaction and the bank link * `high` — Challenge the account holder and queue for review * `medium` — Approve the bank account, allow the transaction, and/or challenge the customer * `low` — Approve the bank account and allow the transaction * `''` — Data enrichment layer is not configured to be called - `account` object — Account risk signals - `risk_level` string — Risk level of the transaction. Returns `high`, `medium`, or `low` - `aml_risk_level` string — Anti-money laundering (AML) risk level. Returns `high`, `medium`, or `low` - `bank_risk_level` string — Bank risk level. Returns `high`, `medium`, or `low` - `ach_risk_level` string — ACH transaction risk level. Returns `high`, `medium`, or `low` - `nsf_risk_level` string — Risk level of non-sufficient funds (NSF). Returns `high`, `medium`, or `low` - `nsf_risk_score` number — Normalized risk score for non-sufficient funds (NSF). This is a number between 0 and 99, with 99 being the highest risk. For example, a score of 95 means the transaction is riskier than 95% of the other transactions - `ach_risk_score` number — Normalized risk score for ACH transactions ranging from 0–99 - `rules_results` object — Details about the transaction event - `subtenant_data` object — Consists of multiple components provide details on PRP's performance and your fraud policy: * `features`— contains data for specific features you choose to return as a record of specific transaction metrics that are utilized in your fraud rule policy and to measure your cardholder behavior. For each feature returned you will receive the `feature_name`, `feature_value`, and data type. * `rule_execution`— contains all rules triggered within your fraud policy and the associated data that is confirgued in PRP for that rule. Includes `rule_id`, `rule_score`, `rule_name`, rule action, and supplementary actions. If you configure an action to update a data source or to take an action, the associated data is specific to that rule. * `supplementary_action`— contains data on actions and next steps that PRP takes based on your fraud policy configuration. If you configure an action to update a data source or to take an action, the associated data is in this object in a consolidated view. - `galileo_data` object — A structure that contains transaction information from PRP - `reject` boolean, required — Whether a transaction is recommended to be rejected by PRP. Returns `true` if rejected. - `freeze` boolean, required — Whether the account was frozen. Returns `true` if frozen. - `notes` string[] — Notes provided associated with the fraud rules of a transaction event - `rules_denied` string[] — Specifies fraud rules concerning the transaction event that triggered a denied message - `rules_warned` string[] — Specifies fraud rules concerning the transaction event that triggered a denied message - `actions` object[] — List of PRP specific data - `fn_name` string, required — Name of the rule from PRP - `fn_result` string, required — Result of the results of the rule from PRP - `fn_note` string — Description of risky acitivity associated with the rule trigger from PRP - `freeze` boolean, required — Whether the fraud rule that was triggered contains a freeze flag. Returns `true` if the freeze flag is triggered. --- [API](https://skmtc.net/galileo-ft/apis/program-api.md) · [All operations](https://skmtc.net/galileo-ft/apis/program-api/llms.txt) · [OpenAPI document](https://skmtc-service-staging.skmtc.workers.dev/v1/apis/galileo-ft/program-api/versions/bcd728f97a18/schema)