Create KYC Cardholder (Form)

Submit the user's basic information and a third-party KYC report (e.g. Sumsub) to proceed with KYC verification.

Document images must first be uploaded via POST /kyc/presignedUploads; pass the resulting fileTokens in the image fields below. The submission enters PENDING and is reviewed by our compliance team.

Body

Name & contact

Personal

Identity document

Address

Source of funds & residency

Document images

Each field takes a fileToken returned by POST /kyc/presignedUploads. The token's upload type must match the slot (shown below), otherwise the request is rejected.

Response

{
  "firstName": "Minsu",
  "lastName": "Kim",
  "fullName": "김민수",
  "fullNameEn": "Minsu Kim",
  "mobilePrefix": "82",
  "mobile": "1012345678",
  "email": "[email protected]",
  "gender": "MALE",
  "birthDate": "1992-03-15",
  "occupation": "PRIVATE_BUSINESS_EMPLOYEES",
  "nationality": "KR",
  "idType": "PASSPORT",
  "idNumber": "M12345678",
  "idExpiryDate": "2031-05-20",
  "country": "KR",
  "state": "Seoul",
  "city": "Seoul",
  "street": "123 Teheran-ro",
  "address": "서울특별시 강남구 테헤란로 123",
  "addressEn": "123 Teheran-ro, Gangnam-gu, Seoul",
  "postalCode": "06133",
  "sourceOfFund": "SALARY_OR_EMPLOYMENT_INCOME",
  "livingCountry": "KR",
  "idFrontToken": "kyc_file_8f3a9c2b1d4e5f6a",
  "idBackToken": "kyc_file_2c1d4e5f6a8f3a9b",
  "selfieToken": "kyc_file_5f6a8f3a9b2c1d4e",
  "addressProofToken": "kyc_file_9b2c1d4e5f6a8f3a",
  "attachments": [
    "kyc_file_1a2b3c4d5e6f7a8b"
  ]
}

{
  "code": 0,
  "message": "SUCCESS",
  "data": {
    "id": "kyc_2c1d4e5f6a8f3a9b",
    "kycStatus": "PENDING",
    "mode": "FORM"
  }
}

Restricted jurisdictions

We do not onboard cardholders connected to a restricted country or territory. All three country fields — nationality, country and livingCountry — are screened, and a match on any one of them rejects the submission.

Unlike the hosted flow, the check runs synchronously at submission time, so the request fails outright and no KYC fee is charged:

{
  "code": 400,
  "message": "The current country is not supported for KYC at this time"
}

No cardholder record is created and the fileTokens you passed are not consumed — you may reuse them on a corrected submission.

Restricted countries and territories

Codes are ISO 3166 Alpha-2, matching the format of the three country fields.

This list is subject to change without notice; treat the 400 response above as the source of truth.

Occupation values

Source-of-fund values

Notes

• Each fileToken is single-use and is consumed by the first successful submission that references it. The same token cannot be reused across two image slots.
• Date fields are plain yyyy-MM-dd strings; birthDate must be in the past and idExpiryDate must not be expired.
• A cardholder with the same idType + idNumber that is already PENDING or APPROVED is rejected as a duplicate. Re-submit is allowed once a prior submission is REJECTED.
• Review is performed by Buvei's compliance team; turnaround depends on document quality and queue volume.
• Listen for CARDHOLDER_KYC_STATUS for the final outcome. On APPROVED you can issue cards under this id.