---
title: "Apply bank account restriction"
method: POST
path: "/v0/bank/accounts/{bank-account-id}/restrictions"
tags: ["Bank account restrictions"]
---

# Apply bank account restriction

`POST /v0/bank/accounts/{bank-account-id}/restrictions`

Applies a restriction to a bank account.

### Reason codes

| Code | Description |
|---|---|
| `customer-request` | Account holder requested temporary restriction pending further instruction. |
| `deceased` | Account holder confirmed deceased. Restricted pending estate administration. |
| `dormant` | Account inactive for 2+ years (no customer-initiated transactions). |
| `fraud-1st-party` | Account holder is suspected perpetrator committing fraud against Griffin or third parties. |
| `fraud-3rd-party` | Account holder is victim of account takeover by unauthorised party. |
| `fraud-app-perpetrator` | Account holder is perpetrator receiving fraudulent payments from victims. |
| `fraud-app-victim` | Account holder is victim tricked into authorising payments to a fraudulent recipient. |
| `law-enforcement` | Restricted following law enforcement request, court order, or legal obligation. |
| `money-laundering` | Suspected money laundering detected. Restricted pending investigation. |
| `other` | Restriction applied for reasons not covered by standard categories. |
| `risk-appetite` | Account activity exceeds risk appetite thresholds. Restricted pending review. |
| `sanctions` | Account holder or associated party identified on a sanctions list. Restricted pending investigation. |
| `terrorist-financing` | Suspected terrorist financing. Restricted pending investigation. |

### Legal status

| Code | Description |
|---|---|
| `suspected` | Restriction due to suspicion of offence. No formal charges filed. |
| `formal-charge-filed` | Customer formally charged with an offence. Legal proceedings active. |
| `conviction-confirmed` | Customer convicted. Deposits connected with the conviction are ineligible for FSCS compensation. |
| `not-applicable` | Legal status not relevant (e.g. customer requests, dormant accounts). |

## Path parameters

- `bank-account-id` string, required

## Request body

- object
  - `restriction-type` 'block' | 'freeze', required
  - `restriction-reason-code` 'fraud-app-perpetrator' | 'customer-request' | 'dormant' | 'other' | 'terrorist-financing' | 'law-enforcement' | 'sanctions' | 'risk-appetite' | 'deceased' | 'fraud-app-victim' | 'fraud-3rd-party' | 'money-laundering' | 'fraud-1st-party', required
  - `restriction-legal-status` 'not-applicable' | 'conviction-confirmed' | 'formal-charge-filed' | 'suspected', required
  - `notes` string, required

## Response `201`

Created

- object — A bank account restriction.
  - `lift-bank-account-restriction-url` union — Link to lift a bank account restriction.
    - string
    - string
  - `restriction-status` union, required
    - 'lifted' | 'active'
    - string
  - `restriction-legal-status` union
    - 'not-applicable' | 'conviction-confirmed' | 'formal-charge-filed' | 'suspected'
    - string
  - `bank-account-restriction-url` union, required — Link to a bank account restriction.
    - string
    - string
  - `created-at` string, date-time, required — ISO 8601 formatted date-time.
  - `update-bank-account-restriction-url` union — Link to update a bank account restriction.
    - string
    - string
  - `bank-account-restriction-events-url` union, required — Link to events for a bank account restriction.
    - string
    - string
  - `restriction-reason-code` union
    - 'suspicious' | 'fraud-app-perpetrator' | 'customer-request' | 'dormant' | 'other' | 'terrorist-financing' | 'law-enforcement' | 'sanctions' | 'risk-appetite' | 'deceased' | 'fraud-app-victim' | 'fraud-3rd-party' | 'money-laundering' | 'fraud' | 'high-risk-pep' | 'fraud-1st-party'
    - string
  - `restriction-type` union
    - 'block' | 'freeze'
    - string
  - `account-url` union, required — Link to the bank account resource.
    - string
    - string
  - `restriction-applied-by` union, required
    - object
      - `restriction-applied-by-type` 'ops-user', required
    - object
      - `restriction-applied-by-type` 'user', required
      - `user-url` string, required — Link to the user.
      - `user-username` string — The username.

## Other responses

- `400` — Bad Request
- `401` — Requires an API key to continue
- `403` — Forbidden
- `404` — Not Found
- `409` — Conflict
- `422` — Unprocessable Entity
- `500` — Internal Server Error

---

[API](https://skmtc.net/griffin/apis/the-griffin-api.md) · [All operations](https://skmtc.net/griffin/apis/the-griffin-api/llms.txt) · [OpenAPI document](https://skmtc-service-staging.skmtc.workers.dev/v1/apis/griffin/the-griffin-api/revisions/e56cd4bb9677/schema)