/

5 minute read

October 9, 2020

About KYC Verification

Some Marqeta card programs require account holders residing in the United States to pass Know Your Customer (KYC) identity verification before being allowed to transact. For example, KYC verification is required for reloadable cards because of regulatory mandates.

KYC verification is also required for the proprietors, officers, and beneficial owners of businesses in the United States.

For more information about account holders, see About Account Holders.

For information about performing KYC verification tasks using the Marqeta platform, see KYC Verification.

What is KYC verification?

Know Your Customer means that you must ensure that your customers are who they say they are. Regulations such as the Bank Secrecy Act/Anti-Money Laundering law (BSA/AML) in the United States require that financial institutions handling your funds perform identity verification to help limit suspicious or fraudulent activity. When this verification process is applied to a business, it is referred to as Know Your Business (KYB).

KYC verification answers these important questions:

  • Is the individual (represented by the user resource) or company (represented by the business resource) who or what they claim to be?

  • Does the individual or company have a history of suspicious or fraudulent activity?

On the Marqeta platform, individual KYC and business KYC are distinct processes that you will perform separately.

For information about individual KYC, see Individual KYC.

For information about business KYC, see Business KYC (KYB).

Individual KYC

This section pertains to performing KYC on a user resource. For information about business KYC, see Business KYC (KYB).

When is KYC verification required for an individual?

KYC verification is required for individual account holders when:

  • The account holder’s card is reloadable.

  • The account holder can access cash from their card, such as by ATM or cashback.

  • The account holder can transact internationally.

  • The card’s account balance exceeds $1000 USD.

  • Funding for the holder’s account could come from somewhere other than the program funding source, such as by ACH or direct deposit.

Required information for individual KYC

To perform KYC verification for an individual account holder, you must provide the following information in the relevant user resource:

  • First and last name

  • Address (PO Boxes are not acceptable)

    • Street address

    • City

    • State

    • Postal code

    • Country code (ISO alpha-2 format)

  • Date of birth

  • Social Security Number (SSN)

For detailed information about the user resource, see Users.

Performing KYC for an individual

To perform KYC verification for an individual, first ensure that you have provided the required information in the relevant user resource.

After you have provided the required information in the relevant resource, you can perform KYC verification by sending a POST request with the relevant user_token to the /kyc endpoint. For detailed information about performing KYC verification using the Marqeta platform, see Perform KYC.

To view the results of your requested KYC verification, send a GET request to the /kyc/{token} endpoint, where {token} is the relevant user_token. For detailed information about retrieving KYC verification results, see Retrieve KYC result.

You can view a list of all KYC verification results for a user by sending a GET request to the /kyc/user/{usertoken} endpoint. For more information, see List KYC results for user.

What happens if individual KYC verification fails?

If individual KYC verification fails, Marqeta escalates the verification to the KYC provider. In such cases, the account holder may be required to provide additional documents as proof of identity.

Business KYC (KYB)

This section pertains to performing KYC on a business resource. For information about individual (user) KYC, see Individual KYC.

When is KYC verification required for a business?

Marqeta must perform KYC verification on the controlling person (the proprietor or officer) of a business during the onboarding process. The controlling person is the individual responsible for running the company, regardless of ownership.

For privately held companies in the United States, Marqeta must also perform KYC verification on all beneficial owners. A beneficial owner is an individual who owns 25% or more of the company, either directly or indirectly. A company may have no beneficial owners. If the proprietor or officer is also a beneficial owner, you must only submit their information as the proprietor. Submitting an individual as both a proprietor and a beneficial owner will cause an extra KYC verification to be performed on the individual.

Businesses must submit an attestation from an individual who confirms that all information submitted for a business is correct and truthful.

Required information for business KYC

To perform KYC verification for a business account holder, you must provide the following information in the relevant business resource:

  • Legal business name

  • Fictitious business name ("Doing Business As" or DBA)

  • Business office address (PO Boxes are not acceptable)

    • Street address

    • City

    • State

    • Postal code

    • Country code (ISO alpha-2 format)

  • Date the business was established

  • Organizational type of the business (corporation or sole proprietorship, for example)

  • State in which the business is incorporated

  • Taxpayer identification number for the business

  • Business proprietor or officer information

  • Beneficial owner information, if applicable

  • Attestation evidence

  • Attester name

  • Attestation date

For detailed information about the business resource, see Businesses.

Performing KYC for a business

To perform KYC verification for a business, first ensure that you have provided the required information in the relevant business resource.

After you have provided the required information in the relevant resource, you can perform KYC verification by sending a POST request with the relevant business_token to the /kyc endpoint. For detailed information about performing KYC verification using the Marqeta platform, see Perform KYC.

Occasionally, a business component may be successfully submitted for processing, but the processing is not completed by the vendor in the alloted time. In such cases, you will see the VENDOR_PENDING outcome for the both the KYC request status and the relevant business component in the business_result object. Marqeta will send you the final outcome for your KYC verification request using a kybresults webhook event. For detailed information about the kybresults webhook event, see KYB results event.

To view the results of a KYC verification that you requested, send a GET request to the /kyc/{token} endpoint, where {token} is the relevant business_token. For detailed information about retrieving KYC verification results, see Retrieve KYC result.

You can view a list of all KYC verification results for a business by sending a GET request to the /kyc/business/{business_token} endpoint. For more information, see List KYC results for business.

What happens if business KYC verification fails?

If business KYC verification fails, Marqeta escalates the verification to the KYC provider. In such cases, the account holder may be required to provide additional documents as proof of identity.

Have any feedback on this page?

If you feel we can do anything better, please let our team know.

We strive for the best possible developer experience.