Version 3.29
Corporate due diligence - background checks on directors
The onboarding process for Corporates has been updated and a single business representative (the Root User of a Corporate) can fill in all the required details to pass KYB.
The person filling in the KYB information can gather the required details of their company directors and UBOs and input/attach the information themselves, without those other directors/owners needing to login or perform any steps by themselves.
The step for UBO verification was included in the previous release (Release 22). This change involves the details required for all directors. The Root User will need to provide basic details (name, date of birth, nationality) of all directors (apart from any director performing full KYC).
An underlying AML check will be performed to confirm that the individuals are not included in any sanctions list.
You will receive STATUS_UPDATED
updates for these individuals through the corporates/kyb/beneficiaries/watch
webhook, where additionalInformation
-> beneficiary
-> type
is OTHER_DIRECTOR
, to indicate the status of the background checks.
In the unlikely event where any director fails these AML checks, causing the corporate to be rejected, Weavr customer support will provide guidance to determine the reason and steps for fixing this.
Removal of Mobile Number Verification APIs
The consumer and corporate root users' mobile number verification Send and Verify APIs will cease to operate, superseded by the Enrolment APIs previously introduced.
To verify users' mobile numbers the existing Authentication Factors SMS Enrolment APIs should instead be utilised. Once enrolled, the user’s mobile number will be marked as verified automatically.
These Enrolment APIs are already available within the Sandbox environment and you can find more information on how to enrol users using the Authentication Factor APIs in our guides.
Affected APIs:
-
/multi/corporates/verification/mobile/send
-
/multi/corporates/verification/mobile/verify
-
/multi/consumers/verification/mobile/send
-
/multi/consumers/verification/mobile/verify
Kindly note, that if a root user device was enrolled using the affected API the device is not enrolled for Strong Customer Authentication (SCA). Therefore, we suggest, that once you develop the Authentication Factor API, you should prompt the end-user to enrol their device again. Alternatively, please contact customer support to help facilitate the re-enrolling of a device for a root user.
Token validity will be reduced to 5 minutes
In line with regulation, we are changing the duration of validity for the token that is returned when authentication is performed. Currently, the token is valid for 15 minutes from the last activity; and this will now be changed to 5 minutes.
Affected APIs:
/multi/login_with_password
OpenAPI Schema Version Upgrade
The Multi API will stop using the OpenAPI 3.0.2 schema version and will start using the 3.1.0 version. The OpenAPI Specification can be found here
If you are using an OpenAPI generator you may need to confirm that the generator has support for this new version.
Sends Between Same Identity Instruments
We have refined the validation in connection with the Send money-movement transaction.
When transferring funds between instruments, if the destination instrument belongs to the same identity as the source instrument, then a Send transaction will no longer be possible and a 409 will be returned with the error code “DESTINATION_BELONGS_TO_SAME_IDENTITY”.
For transferring funds between instruments on the same identity a Transfer type transaction is the correct method and should be used instead.
Data Insights - Cards Overview Enhancements
Data Insights offers you the possibility to analyse your cards via the Cards Overview dashboard. We have enhanced the dashboard by including new details about your cards within the Card Details table. A new filter has also been added which allows you to filter on active cards.