Verify a crypto external account

This guide walks you through setting up and resolving a declared-level Travel Rule verification for a crypto external account — collecting a self-declaration about the address up front, rather than during a withdrawal quote.

Prerequisites

The user has completed onboarding and has the required capabilities enabled.
The user already has a crypto external account — see Create external account.

Walkthrough

Set up the verification

Call Set up crypto external account verification with level: "declared".

PUT /core/external-accounts/d0686449-36c7-c62e-b81f-de844bbc79d4/verifications/declared

A 201 response means a new verification was initiated. Its requestForInformation.proofOptions.selfDeclaration.schema describes exactly which fields to collect from the user.

{
  "verification": {
    "via": "request-for-information",
    "level": "declared",
    "status": "pending",
    "requestForInformation": {
      "id": "19ca55fb-fc52-4209-b765-e3dbdc327231",
      "type": "crypto-address-travel-rule",
      "status": "pending",
      "context": {
        "network": "xrp-ledger",
        "addresses": [
          "rN7n7otQDd6FczFgLdlqtyMVrn3WD6CJYy"
        ]
      },
      "proofOptions": {
        "selfDeclaration": {
          "schema": {
            "type": "object",
            "required": [
              "isVASP",
              "isSelfHostedWallet",
              "isSelfOwnedCryptoAddress"
            ],
            "properties": {
              "isVASP": { "type": "boolean" },
              "isSelfHostedWallet": { "type": "boolean" },
              "isSelfOwnedCryptoAddress": { "type": "boolean" }
            }
          }
        }
      }
    }
  }
}

Calling this endpoint again is safe: while the verification is pending or failed, a new request for information is initiated (201). Once it’s completed, the same verification is returned unchanged (200) — it’s never redone or regressed.

If a stronger, verified-level verification is already completed for this address, this returns 409 operation_not_allowed with details.reasons including stronger-verification-already-completed — there’s nothing to declare, a cryptographic proof already covers it.

Submit the self-declaration

Present the fields from proofOptions.selfDeclaration.schema to the user, then submit their answers with Update request for information.

PUT /core/requests-for-information/19ca55fb-fc52-4209-b765-e3dbdc327231
{
  "proof": {
    "isVASP": false,
    "isSelfHostedWallet": true,
    "isSelfOwnedCryptoAddress": true
  }
}

{
  "requestForInformation": {
    "id": "19ca55fb-fc52-4209-b765-e3dbdc327231",
    "type": "crypto-address-travel-rule",
    "status": "ok",
    "context": {
      "network": "xrp-ledger",
      "addresses": [
        "rN7n7otQDd6FczFgLdlqtyMVrn3WD6CJYy"
      ]
    },
    "proofOptions": {
      "selfDeclaration": {
        "schema": {
          "type": "object",
          "required": [
            "isVASP",
            "isSelfHostedWallet",
            "isSelfOwnedCryptoAddress"
          ],
          "properties": {
            "isVASP": { "type": "boolean" },
            "isSelfHostedWallet": { "type": "boolean" },
            "isSelfOwnedCryptoAddress": { "type": "boolean" }
          }
        }
      }
    },
    "proof": {
      "isVASP": false,
      "isSelfHostedWallet": true,
      "isSelfOwnedCryptoAddress": true
    }
  }
}

When isVASP is true, also include a vaspDid identifying the VASP that owns the address. If it can’t be resolved by the Travel Rule provider, the request returns 404 entity_not_found (details.entity: "vasp") — ask the user to double-check the VASP they selected.

Confirm the verification

Call Get external account verification to confirm the verification is completed.

GET /core/external-accounts/d0686449-36c7-c62e-b81f-de844bbc79d4/verifications/declared

{
  "verification": {
    "via": "request-for-information",
    "level": "declared",
    "status": "completed",
    "completedAt": "2024-06-01T00:00:00.000Z",
    "requestForInformation": { "...": "..." }
  }
}

The address now carries a completed declared verification, reflected in the account’s compact verifications array on Get external account.

Testing

Verify the following:

Set up crypto external account verification returns 201 with a pending verification and a crypto-address-travel-rule RFI.
Update request for information with a valid self-declaration proof returns 200 with status: "ok".
Get external account verification now returns status: "completed".
Calling Set up crypto external account verification again returns 200 with the same, unchanged verification.

User onboarding

Bank transfers

Card transfers

APM transfers

Buy and Sell

Crypto transfers

Travel Rule

Trade & Send

Statements

Resources

Verify a crypto external account

Prerequisites

Walkthrough

Set up the verification

Submit the self-declaration

Confirm the verification

Testing

​Prerequisites

​Walkthrough

​Set up the verification

​Submit the self-declaration

​Confirm the verification

​Testing

Prerequisites

Walkthrough

Set up the verification

Submit the self-declaration

Confirm the verification

Testing