Cardholder KYC Approved - FYATU API Docs

{
  "event": "cardholder.kyc_approved",
  "version": "3.0",
  "eventId": "77d958cb-128d-4927-bd2c-c351a153fb39",
  "sign": "3a5b8c2d1e4f9a0b7c6d5e4f3a2b1c0d",
  "data": {
    "cardholderId": "CH1a2b3c4d5e6f",
    "firstName": "John",
    "lastName": "Smith",
    "kycStatus": "VERIFIED",
    "kycLevel": "VERIFIED",
    "idFrontUrl": "https://cdn.fyatu.com/user/kyc/front_1234567890.jpg",
    "idBackUrl": "https://cdn.fyatu.com/user/kyc/back_1234567890.jpg",
    "idSelfieUrl": "https://cdn.fyatu.com/user/kyc/selfie_1234567890.jpg",
    "appId": "D0H6R7Z6R1C2N5O5",
    "timestamp": "2026-01-12T18:30:00Z"
  }
}

{}

WEBHOOK

cardholder.kyc_approved

{
  "event": "cardholder.kyc_approved",
  "version": "3.0",
  "eventId": "77d958cb-128d-4927-bd2c-c351a153fb39",
  "sign": "3a5b8c2d1e4f9a0b7c6d5e4f3a2b1c0d",
  "data": {
    "cardholderId": "CH1a2b3c4d5e6f",
    "firstName": "John",
    "lastName": "Smith",
    "kycStatus": "VERIFIED",
    "kycLevel": "VERIFIED",
    "idFrontUrl": "https://cdn.fyatu.com/user/kyc/front_1234567890.jpg",
    "idBackUrl": "https://cdn.fyatu.com/user/kyc/back_1234567890.jpg",
    "idSelfieUrl": "https://cdn.fyatu.com/user/kyc/selfie_1234567890.jpg",
    "appId": "D0H6R7Z6R1C2N5O5",
    "timestamp": "2026-01-12T18:30:00Z"
  }
}

{}

{
  "event": "cardholder.kyc_approved",
  "version": "3.0",
  "eventId": "77d958cb-128d-4927-bd2c-c351a153fb39",
  "sign": "3a5b8c2d1e4f9a0b7c6d5e4f3a2b1c0d",
  "data": {
    "cardholderId": "CH1a2b3c4d5e6f",
    "firstName": "John",
    "lastName": "Smith",
    "kycStatus": "VERIFIED",
    "kycLevel": "VERIFIED",
    "idFrontUrl": "https://cdn.fyatu.com/user/kyc/front_1234567890.jpg",
    "idBackUrl": "https://cdn.fyatu.com/user/kyc/back_1234567890.jpg",
    "idSelfieUrl": "https://cdn.fyatu.com/user/kyc/selfie_1234567890.jpg",
    "appId": "D0H6R7Z6R1C2N5O5",
    "timestamp": "2026-01-12T18:30:00Z"
  }
}

{}

The approved status is reported as "VERIFIED" under both kycStatus and kycLevel. The document image URLs (idFrontUrl, idBackUrl, idSelfieUrl) are flat keys on data and are included only for the slots on file — idBackUrl is omitted when no back image was captured.

Body

application/json

event

string

The event type identifier (e.g. card.funded).

version

string

Webhook payload version.

sign

string

HMAC-SHA256 signature of the data object using your webhook secret. Always verify this before processing.

data

object

Show child attributes

Response

200

Acknowledge receipt of the event