---
title: "Update account holder information and possibly resubmit for evaluation"
method: PATCH
path: "/v1/account_holders/{account_holder_token}"
tags: ["Account Holder"]
---

# Update account holder information and possibly resubmit for evaluation

`PATCH /v1/account_holders/{account_holder_token}`

Update the information associated with a particular account holder (including business owners and control persons associated to a business account).
If Lithic is performing KYB or KYC and additional verification is required we will run the individual's or business's updated information again and return whether the status is accepted or pending (i.e., further action required).
All calls to this endpoint will return a synchronous response. The response time will depend on the workflow. In some cases, the response may indicate the workflow is under review or further action will be needed to complete the account creation process.
This endpoint can only be used on existing accounts that are part of the program that the calling API key manages.

## Path parameters

- `account_holder_token` string, uuid, required

## Request body

- union
  - KybPatchRequest — The KYB request payload for updating a business.
    - `beneficial_owner_individuals` KybIndividualPatch[] — You must submit a list of all direct and indirect individuals with 25% or more ownership in the company. A maximum of 4 beneficial owners can be submitted. If no individual owns 25% of the company you do not need to send beneficial owner information. See [FinCEN requirements](https://www.fincen.gov/sites/default/files/shared/CDD_Rev6.7_Sept_2017_Certificate.pdf) (Section I) for more background on individuals that should be included.
      - `entity_token` string, uuid, required — Globally unique identifier for an entity.
      - `address` AddressPatch
        - `address1` string — Valid deliverable address (no PO boxes).
        - `address2` string — Unit or apartment number (if applicable).
        - `city` string — Name of city.
        - `country` string — Valid country code. Only USA is currently supported, entered in uppercase ISO 3166-1 alpha-3 three-character format.
        - `postal_code` string — Valid postal code. Only USA ZIP codes are currently supported, entered as a five-digit ZIP or nine-digit ZIP+4.
        - `state` string — Valid state code. Only USA state codes are currently supported, entered in uppercase ISO 3166-2 two-character format.
      - `dob` string — Individual's date of birth, as an RFC 3339 date.
      - `email` string — Individual's email address. If utilizing Lithic for chargeback processing, this customer email address may be used to communicate dispute status and resolution.
      - `first_name` string — Individual's first name, as it appears on government-issued identity documents.
      - `last_name` string — Individual's last name, as it appears on government-issued identity documents.
      - `phone_number` string — Individual's phone number, entered in E.164 format.
      - `government_id` string — Government-issued identification number (required for identity verification and compliance with banking regulations). Social Security Numbers (SSN) and Individual Taxpayer Identification Numbers (ITIN) are currently supported, entered as full nine-digits, with or without hyphens
    - `business_entity` KybBusinessEntityPatch
      - `entity_token` string, uuid, required — Globally unique identifier for an entity.
      - `address` AddressPatch
        - `address1` string — Valid deliverable address (no PO boxes).
        - `address2` string — Unit or apartment number (if applicable).
        - `city` string — Name of city.
        - `country` string — Valid country code. Only USA is currently supported, entered in uppercase ISO 3166-1 alpha-3 three-character format.
        - `postal_code` string — Valid postal code. Only USA ZIP codes are currently supported, entered as a five-digit ZIP or nine-digit ZIP+4.
        - `state` string — Valid state code. Only USA state codes are currently supported, entered in uppercase ISO 3166-2 two-character format.
      - `dba_business_name` string — Any name that the business operates under that is not its legal business name (if applicable).
      - `government_id` string — Government-issued identification number. US Federal Employer Identification Numbers (EIN) are currently supported, entered as full nine-digits, with or without hyphens.
      - `legal_business_name` string — Legal (formal) business name.
      - `parent_company` string — Parent company name (if applicable).
      - `phone_numbers` string[] — One or more of the business's phone number(s), entered as a list in E.164 format.
    - `control_person` KybIndividualPatch — Individuals associated with a KYB application. Phone number is optional.
      - `entity_token` string, uuid, required — Globally unique identifier for an entity.
      - `address` AddressPatch
        - `address1` string — Valid deliverable address (no PO boxes).
        - `address2` string — Unit or apartment number (if applicable).
        - `city` string — Name of city.
        - `country` string — Valid country code. Only USA is currently supported, entered in uppercase ISO 3166-1 alpha-3 three-character format.
        - `postal_code` string — Valid postal code. Only USA ZIP codes are currently supported, entered as a five-digit ZIP or nine-digit ZIP+4.
        - `state` string — Valid state code. Only USA state codes are currently supported, entered in uppercase ISO 3166-2 two-character format.
      - `dob` string — Individual's date of birth, as an RFC 3339 date.
      - `email` string — Individual's email address. If utilizing Lithic for chargeback processing, this customer email address may be used to communicate dispute status and resolution.
      - `first_name` string — Individual's first name, as it appears on government-issued identity documents.
      - `last_name` string — Individual's last name, as it appears on government-issued identity documents.
      - `phone_number` string — Individual's phone number, entered in E.164 format.
      - `government_id` string — Government-issued identification number (required for identity verification and compliance with banking regulations). Social Security Numbers (SSN) and Individual Taxpayer Identification Numbers (ITIN) are currently supported, entered as full nine-digits, with or without hyphens
    - `external_id` string — A user provided id that can be used to link an account holder with an external system
    - `naics_code` string — 6-digit North American Industry Classification System (NAICS) code for the business.
    - `nature_of_business` string — Short description of the company's line of business (i.e., what does the company do?). Values longer than 255 characters will be truncated before KYB verification
    - `website_url` string — Company website URL.
  - KycPatchRequest — The KYC request payload for updating an account holder.
    - `individual` KycIndividualPatch
      - `entity_token` string, uuid, required — Globally unique identifier for an entity.
      - `address` AddressPatch
        - `address1` string — Valid deliverable address (no PO boxes).
        - `address2` string — Unit or apartment number (if applicable).
        - `city` string — Name of city.
        - `country` string — Valid country code. Only USA is currently supported, entered in uppercase ISO 3166-1 alpha-3 three-character format.
        - `postal_code` string — Valid postal code. Only USA ZIP codes are currently supported, entered as a five-digit ZIP or nine-digit ZIP+4.
        - `state` string — Valid state code. Only USA state codes are currently supported, entered in uppercase ISO 3166-2 two-character format.
      - `dob` string — Individual's date of birth, as an RFC 3339 date.
      - `email` string — Individual's email address. If utilizing Lithic for chargeback processing, this customer email address may be used to communicate dispute status and resolution.
      - `first_name` string — Individual's first name, as it appears on government-issued identity documents.
      - `last_name` string — Individual's last name, as it appears on government-issued identity documents.
      - `phone_number` string — Individual's phone number, entered in E.164 format.
      - `government_id` string — Government-issued identification number (required for identity verification and compliance with banking regulations). Social Security Numbers (SSN) and Individual Taxpayer Identification Numbers (ITIN) are currently supported, entered as full nine-digits, with or without hyphens
    - `external_id` string — A user provided id that can be used to link an account holder with an external system
  - PatchRequest — The legacy request for updating an account holder.
    - `email` string — Allowed for all Account Holders. Account holder's email address. The primary purpose of this field is for cardholder identification and verification during the digital wallet tokenization process.
    - `phone_number` string — Allowed for all Account Holders. Account holder's phone number, entered in E.164 format. The primary purpose of this field is for cardholder identification and verification during the digital wallet tokenization process.
    - `address` AddressPatch
      - `address1` string — Valid deliverable address (no PO boxes).
      - `address2` string — Unit or apartment number (if applicable).
      - `city` string — Name of city.
      - `country` string — Valid country code. Only USA is currently supported, entered in uppercase ISO 3166-1 alpha-3 three-character format.
      - `postal_code` string — Valid postal code. Only USA ZIP codes are currently supported, entered as a five-digit ZIP or nine-digit ZIP+4.
      - `state` string — Valid state code. Only USA state codes are currently supported, entered in uppercase ISO 3166-2 two-character format.
    - `business_account_token` string — Allowed for: KYC-Exempt, BYO-KYC. The token of the business account to which the account holder is associated.
    - `first_name` string — Allowed for KYC-Exempt, BYO-KYC. Account holder's first name.
    - `last_name` string — Allowed for KYC-Exempt, BYO-KYC. Account holder's last name.
    - `legal_business_name` string — Allowed for BYO-KYB. Legal business name of the account holder.

## Response `200`

OK

- union
  - KybKycPatchResponse
    - `token` string, uuid — Globally unique identifier for the account holder.
    - `account_token` string, uuid — Globally unique identifier for the account.
    - `business_account_token` string, uuid, nullable — Only applicable for customers using the KYC-Exempt workflow to enroll authorized users of businesses. Pass the account_token of the enrolled business associated with the AUTHORIZED_USER in this field.
    - `created` string, date-time — Timestamp of when the account holder was created.
    - `exemption_type` 'AUTHORIZED_USER' | 'PREPAID_CARD_USER' — The type of KYC exemption for a KYC-Exempt Account Holder. `null` if the account holder is not KYC-Exempt.
    - `external_id` string — Customer-provided token that indicates a relationship with an object outside of the Lithic ecosystem.
    - `user_type` 'BUSINESS' | 'INDIVIDUAL' — The type of Account Holder. If the type is "INDIVIDUAL", the "individual" attribute will be present. If the type is "BUSINESS" then the "business_entity", "control_person", "beneficial_owner_individuals", "naics_code", "nature_of_business", and "website_url" attributes will be present.
    - `verification_application` VerificationApplication — Represents the status of an identity verification application for an account holder
      - `created` string, date-time, required — Timestamp of when the application was created.
      - `status` 'ACCEPTED' | 'PENDING_DOCUMENT' | 'PENDING_RESUBMIT' | 'REJECTED', required — Enrollment status for KYC/KYB
      - `status_reasons` StatusReasons[], required — Reason for the evaluation status.
      - `updated` string, date-time, required — Timestamp of when the application was last updated.
      - `ky_passed_at` string, date-time — Timestamp of when the application passed the verification process. Only present if `status` is `ACCEPTED`
    - `individual` Individual
      - `address` Address
        - `address1` string, required — Valid deliverable address (no PO boxes).
        - `address2` string — Unit or apartment number (if applicable).
        - `city` string, required — Name of city.
        - `country` string, required — Valid country code. Only USA is currently supported, entered in uppercase ISO 3166-1 alpha-3 three-character format.
        - `postal_code` string, required — Valid postal code. Only USA ZIP codes are currently supported, entered as a five-digit ZIP or nine-digit ZIP+4.
        - `state` string, required — Valid state code. Only USA state codes are currently supported, entered in uppercase ISO 3166-2 two-character format.
      - `dob` string — Individual's date of birth, as an RFC 3339 date.
      - `email` string — Individual's email address. If utilizing Lithic for chargeback processing, this customer email address may be used to communicate dispute status and resolution.
      - `first_name` string — Individual's first name, as it appears on government-issued identity documents.
      - `last_name` string — Individual's last name, as it appears on government-issued identity documents.
      - `phone_number` string — Individual's phone number, entered in E.164 format.
      - `government_id` string — Government-issued identification number (required for identity verification and compliance with banking regulations). Social Security Numbers (SSN) and Individual Taxpayer Identification Numbers (ITIN) are currently supported, entered as full nine-digits, with or without hyphens
    - `business_entity` KybBusinessEntity
      - `address` Address, required
        - `address1` string, required — Valid deliverable address (no PO boxes).
        - `address2` string — Unit or apartment number (if applicable).
        - `city` string, required — Name of city.
        - `country` string, required — Valid country code. Only USA is currently supported, entered in uppercase ISO 3166-1 alpha-3 three-character format.
        - `postal_code` string, required — Valid postal code. Only USA ZIP codes are currently supported, entered as a five-digit ZIP or nine-digit ZIP+4.
        - `state` string, required — Valid state code. Only USA state codes are currently supported, entered in uppercase ISO 3166-2 two-character format.
      - `dba_business_name` string — Any name that the business operates under that is not its legal business name (if applicable).
      - `government_id` string, required — Government-issued identification number. US Federal Employer Identification Numbers (EIN) are currently supported, entered as full nine-digits, with or without hyphens.
      - `legal_business_name` string, required — Legal (formal) business name.
      - `parent_company` string, nullable — Parent company name (if applicable).
      - `phone_numbers` string[], required — One or more of the business's phone number(s), entered as a list in E.164 format.
    - `beneficial_owner_individuals` Individual[] — Only present when user_type == "BUSINESS". You must submit a list of all direct and indirect individuals with 25% or more ownership in the company. A maximum of 4 beneficial owners can be submitted. If no individual owns 25% of the company you do not need to send beneficial owner information. See [FinCEN requirements](https://www.fincen.gov/sites/default/files/shared/CDD_Rev6.7_Sept_2017_Certificate.pdf) (Section I) for more background on individuals that should be included.
      - `address` Address
        - `address1` string, required — Valid deliverable address (no PO boxes).
        - `address2` string — Unit or apartment number (if applicable).
        - `city` string, required — Name of city.
        - `country` string, required — Valid country code. Only USA is currently supported, entered in uppercase ISO 3166-1 alpha-3 three-character format.
        - `postal_code` string, required — Valid postal code. Only USA ZIP codes are currently supported, entered as a five-digit ZIP or nine-digit ZIP+4.
        - `state` string, required — Valid state code. Only USA state codes are currently supported, entered in uppercase ISO 3166-2 two-character format.
      - `dob` string — Individual's date of birth, as an RFC 3339 date.
      - `email` string — Individual's email address. If utilizing Lithic for chargeback processing, this customer email address may be used to communicate dispute status and resolution.
      - `first_name` string — Individual's first name, as it appears on government-issued identity documents.
      - `last_name` string — Individual's last name, as it appears on government-issued identity documents.
      - `phone_number` string — Individual's phone number, entered in E.164 format.
      - `government_id` string — Government-issued identification number (required for identity verification and compliance with banking regulations). Social Security Numbers (SSN) and Individual Taxpayer Identification Numbers (ITIN) are currently supported, entered as full nine-digits, with or without hyphens
    - `control_person` Individual
      - `address` Address
        - `address1` string, required — Valid deliverable address (no PO boxes).
        - `address2` string — Unit or apartment number (if applicable).
        - `city` string, required — Name of city.
        - `country` string, required — Valid country code. Only USA is currently supported, entered in uppercase ISO 3166-1 alpha-3 three-character format.
        - `postal_code` string, required — Valid postal code. Only USA ZIP codes are currently supported, entered as a five-digit ZIP or nine-digit ZIP+4.
        - `state` string, required — Valid state code. Only USA state codes are currently supported, entered in uppercase ISO 3166-2 two-character format.
      - `dob` string — Individual's date of birth, as an RFC 3339 date.
      - `email` string — Individual's email address. If utilizing Lithic for chargeback processing, this customer email address may be used to communicate dispute status and resolution.
      - `first_name` string — Individual's first name, as it appears on government-issued identity documents.
      - `last_name` string — Individual's last name, as it appears on government-issued identity documents.
      - `phone_number` string — Individual's phone number, entered in E.164 format.
      - `government_id` string — Government-issued identification number (required for identity verification and compliance with banking regulations). Social Security Numbers (SSN) and Individual Taxpayer Identification Numbers (ITIN) are currently supported, entered as full nine-digits, with or without hyphens
    - `naics_code` string — Only present when user_type == "BUSINESS". 6-digit North American Industry Classification System (NAICS) code for the business.
    - `nature_of_business` string — Only present when user_type == "BUSINESS". User-submitted description of the business.
    - `website_url` string — Only present when user_type == "BUSINESS". Business's primary website.
    - `email` string — (Deprecated. Use control_person.email when user_type == "BUSINESS". Use individual.phone_number when user_type == "INDIVIDUAL".) Primary email of Account Holder.
    - `phone_number` string — (Deprecated. Use control_person.phone_number when user_type == "BUSINESS". Use individual.phone_number when user_type == "INDIVIDUAL".) Primary phone of Account Holder, entered in E.164 format.
    - `status` 'ACCEPTED' | 'PENDING_DOCUMENT' | 'PENDING_RESUBMIT' | 'REJECTED' — Enrollment status for KYC/KYB
    - `status_reasons` StatusReasons[] — (Deprecated. Use verification_application.status_reasons) Reason for the evaluation status.
    - `required_documents` RequiredDocument[] — Only present for "KYB_BASIC" and "KYC_ADVANCED" workflows. A list of documents required for the account holder to be approved.
      - `entity_token` string, uuid, required — Globally unique identifier for an entity.
      - `valid_documents` string[], required — A list of valid documents that will satisfy the KYC requirements for the specified entity.
      - `status_reasons` string[], required — Provides the status reasons that will be satisfied by providing one of the valid documents.
  - PatchResponse
    - `token` string — The token for the account holder that was updated
    - `email` string — The email for the account holder
    - `phone_number` string — The phone_number for the account holder
    - `business_account_token` string, nullable — The token for the business account that the account holder is associated with
    - `address` Address
      - `address1` string, required — Valid deliverable address (no PO boxes).
      - `address2` string — Unit or apartment number (if applicable).
      - `city` string, required — Name of city.
      - `country` string, required — Valid country code. Only USA is currently supported, entered in uppercase ISO 3166-1 alpha-3 three-character format.
      - `postal_code` string, required — Valid postal code. Only USA ZIP codes are currently supported, entered as a five-digit ZIP or nine-digit ZIP+4.
      - `state` string, required — Valid state code. Only USA state codes are currently supported, entered in uppercase ISO 3166-2 two-character format.
    - `first_name` string — The first name for the account holder
    - `last_name` string — The last name for the account holder
    - `legal_business_name` string — The legal business name for the account holder

## Other responses

- `404` — The specified resource was not found.

---

[API](https://skmtc.net/lithic-com/apis/lithic-developer-api.md) · [All operations](https://skmtc.net/lithic-com/apis/lithic-developer-api/llms.txt) · [OpenAPI document](https://skmtc-service-staging.skmtc.workers.dev/v1/apis/lithic-com/lithic-developer-api/revisions/53ab5d4e2adb/schema)
