Submit KYC Reliance

curl --request POST \
  --url https://api.rolla.xyz/api/v1/external/accounts/{accountId}/kyc-reliance \
  --header 'Content-Type: multipart/form-data' \
  --header 'X-API-Key: <api-key>' \
  --form passport='@example-file' \
  --form selfie='@example-file' \
  --form country=CN \
  --form documentNumber=E12345678 \
  --form issueDate=2020-03-14 \
  --form expirationDate=2030-03-13

import requests

url = "https://api.rolla.xyz/api/v1/external/accounts/{accountId}/kyc-reliance"

files = {
    "passport": ("example-file", open("example-file", "rb")),
    "selfie": ("example-file", open("example-file", "rb"))
}
payload = {
    "country": "CN",
    "documentNumber": "E12345678",
    "issueDate": "2020-03-14",
    "expirationDate": "2030-03-13"
}
headers = {"X-API-Key": "<api-key>"}

response = requests.post(url, data=payload, files=files, headers=headers)

print(response.text)

const form = new FormData();
form.append('passport', '<string>');
form.append('selfie', '<string>');
form.append('country', 'CN');
form.append('documentNumber', 'E12345678');
form.append('issueDate', '2020-03-14');
form.append('expirationDate', '2030-03-13');

const options = {method: 'POST', headers: {'X-API-Key': '<api-key>'}};

options.body = form;

fetch('https://api.rolla.xyz/api/v1/external/accounts/{accountId}/kyc-reliance', options)
  .then(res => res.json())
  .then(res => console.log(res))
  .catch(err => console.error(err));

<?php

$curl = curl_init();

curl_setopt_array($curl, [
  CURLOPT_URL => "https://api.rolla.xyz/api/v1/external/accounts/{accountId}/kyc-reliance",
  CURLOPT_RETURNTRANSFER => true,
  CURLOPT_ENCODING => "",
  CURLOPT_MAXREDIRS => 10,
  CURLOPT_TIMEOUT => 30,
  CURLOPT_HTTP_VERSION => CURL_HTTP_VERSION_1_1,
  CURLOPT_CUSTOMREQUEST => "POST",
  CURLOPT_POSTFIELDS => "-----011000010111000001101001\r\nContent-Disposition: form-data; name=\"passport\"; filename=\"example-file\"\r\nContent-Type: application/octet-stream\r\n\r\n<string>\r\n-----011000010111000001101001\r\nContent-Disposition: form-data; name=\"selfie\"; filename=\"example-file\"\r\nContent-Type: application/octet-stream\r\n\r\n<string>\r\n-----011000010111000001101001\r\nContent-Disposition: form-data; name=\"country\"\r\n\r\nCN\r\n-----011000010111000001101001\r\nContent-Disposition: form-data; name=\"documentNumber\"\r\n\r\nE12345678\r\n-----011000010111000001101001\r\nContent-Disposition: form-data; name=\"issueDate\"\r\n\r\n2020-03-14\r\n-----011000010111000001101001\r\nContent-Disposition: form-data; name=\"expirationDate\"\r\n\r\n2030-03-13\r\n-----011000010111000001101001--",
  CURLOPT_HTTPHEADER => [
    "Content-Type: multipart/form-data",
    "X-API-Key: <api-key>"
  ],
]);

$response = curl_exec($curl);
$err = curl_error($curl);

curl_close($curl);

if ($err) {
  echo "cURL Error #:" . $err;
} else {
  echo $response;
}

package main

import (
	"fmt"
	"strings"
	"net/http"
	"io"
)

func main() {

	url := "https://api.rolla.xyz/api/v1/external/accounts/{accountId}/kyc-reliance"

	payload := strings.NewReader("-----011000010111000001101001\r\nContent-Disposition: form-data; name=\"passport\"; filename=\"example-file\"\r\nContent-Type: application/octet-stream\r\n\r\n<string>\r\n-----011000010111000001101001\r\nContent-Disposition: form-data; name=\"selfie\"; filename=\"example-file\"\r\nContent-Type: application/octet-stream\r\n\r\n<string>\r\n-----011000010111000001101001\r\nContent-Disposition: form-data; name=\"country\"\r\n\r\nCN\r\n-----011000010111000001101001\r\nContent-Disposition: form-data; name=\"documentNumber\"\r\n\r\nE12345678\r\n-----011000010111000001101001\r\nContent-Disposition: form-data; name=\"issueDate\"\r\n\r\n2020-03-14\r\n-----011000010111000001101001\r\nContent-Disposition: form-data; name=\"expirationDate\"\r\n\r\n2030-03-13\r\n-----011000010111000001101001--")

	req, _ := http.NewRequest("POST", url, payload)

	req.Header.Add("X-API-Key", "<api-key>")

	res, _ := http.DefaultClient.Do(req)

	defer res.Body.Close()
	body, _ := io.ReadAll(res.Body)

	fmt.Println(string(body))

}

HttpResponse<String> response = Unirest.post("https://api.rolla.xyz/api/v1/external/accounts/{accountId}/kyc-reliance")
  .header("X-API-Key", "<api-key>")
  .body("-----011000010111000001101001\r\nContent-Disposition: form-data; name=\"passport\"; filename=\"example-file\"\r\nContent-Type: application/octet-stream\r\n\r\n<string>\r\n-----011000010111000001101001\r\nContent-Disposition: form-data; name=\"selfie\"; filename=\"example-file\"\r\nContent-Type: application/octet-stream\r\n\r\n<string>\r\n-----011000010111000001101001\r\nContent-Disposition: form-data; name=\"country\"\r\n\r\nCN\r\n-----011000010111000001101001\r\nContent-Disposition: form-data; name=\"documentNumber\"\r\n\r\nE12345678\r\n-----011000010111000001101001\r\nContent-Disposition: form-data; name=\"issueDate\"\r\n\r\n2020-03-14\r\n-----011000010111000001101001\r\nContent-Disposition: form-data; name=\"expirationDate\"\r\n\r\n2030-03-13\r\n-----011000010111000001101001--")
  .asString();

require 'uri'
require 'net/http'

url = URI("https://api.rolla.xyz/api/v1/external/accounts/{accountId}/kyc-reliance")

http = Net::HTTP.new(url.host, url.port)
http.use_ssl = true

request = Net::HTTP::Post.new(url)
request["X-API-Key"] = '<api-key>'
request.body = "-----011000010111000001101001\r\nContent-Disposition: form-data; name=\"passport\"; filename=\"example-file\"\r\nContent-Type: application/octet-stream\r\n\r\n<string>\r\n-----011000010111000001101001\r\nContent-Disposition: form-data; name=\"selfie\"; filename=\"example-file\"\r\nContent-Type: application/octet-stream\r\n\r\n<string>\r\n-----011000010111000001101001\r\nContent-Disposition: form-data; name=\"country\"\r\n\r\nCN\r\n-----011000010111000001101001\r\nContent-Disposition: form-data; name=\"documentNumber\"\r\n\r\nE12345678\r\n-----011000010111000001101001\r\nContent-Disposition: form-data; name=\"issueDate\"\r\n\r\n2020-03-14\r\n-----011000010111000001101001\r\nContent-Disposition: form-data; name=\"expirationDate\"\r\n\r\n2030-03-13\r\n-----011000010111000001101001--"

response = http.request(request)
puts response.read_body

{
  "success": true,
  "message": "KYC reliance submitted successfully",
  "data": {
    "verified": true,
    "reviewStatus": "completed",
    "reviewAnswer": "GREEN"
  }
}

{
  "success": false,
  "message": "<string>"
}

{
  "success": false,
  "message": "<string>"
}

{
  "success": false,
  "message": "<string>"
}

{
  "success": false,
  "message": "<string>"
}

Account Onboarding

Submit KYC Reliance

Submits identity documents the partner has already verified for an INDIVIDUAL account, instead of sending the account holder through Rolla’s hosted liveness check. Upload the holder’s passport and the selfie or liveness capture collected during your own onboarding as multipart/form-data. Enabled per partner: returns 403 when KYC reliance is not enabled for your business. Individual accounts only; calling it on a business account returns 400. The review is not instant — poll Get Verification Status until it completes.

POST

accounts

{accountId}

kyc-reliance

Submit KYC Reliance

curl --request POST \
  --url https://api.rolla.xyz/api/v1/external/accounts/{accountId}/kyc-reliance \
  --header 'Content-Type: multipart/form-data' \
  --header 'X-API-Key: <api-key>' \
  --form passport='@example-file' \
  --form selfie='@example-file' \
  --form country=CN \
  --form documentNumber=E12345678 \
  --form issueDate=2020-03-14 \
  --form expirationDate=2030-03-13

import requests

url = "https://api.rolla.xyz/api/v1/external/accounts/{accountId}/kyc-reliance"

files = {
    "passport": ("example-file", open("example-file", "rb")),
    "selfie": ("example-file", open("example-file", "rb"))
}
payload = {
    "country": "CN",
    "documentNumber": "E12345678",
    "issueDate": "2020-03-14",
    "expirationDate": "2030-03-13"
}
headers = {"X-API-Key": "<api-key>"}

response = requests.post(url, data=payload, files=files, headers=headers)

print(response.text)

const form = new FormData();
form.append('passport', '<string>');
form.append('selfie', '<string>');
form.append('country', 'CN');
form.append('documentNumber', 'E12345678');
form.append('issueDate', '2020-03-14');
form.append('expirationDate', '2030-03-13');

const options = {method: 'POST', headers: {'X-API-Key': '<api-key>'}};

options.body = form;

fetch('https://api.rolla.xyz/api/v1/external/accounts/{accountId}/kyc-reliance', options)
  .then(res => res.json())
  .then(res => console.log(res))
  .catch(err => console.error(err));

<?php

$curl = curl_init();

curl_setopt_array($curl, [
  CURLOPT_URL => "https://api.rolla.xyz/api/v1/external/accounts/{accountId}/kyc-reliance",
  CURLOPT_RETURNTRANSFER => true,
  CURLOPT_ENCODING => "",
  CURLOPT_MAXREDIRS => 10,
  CURLOPT_TIMEOUT => 30,
  CURLOPT_HTTP_VERSION => CURL_HTTP_VERSION_1_1,
  CURLOPT_CUSTOMREQUEST => "POST",
  CURLOPT_POSTFIELDS => "-----011000010111000001101001\r\nContent-Disposition: form-data; name=\"passport\"; filename=\"example-file\"\r\nContent-Type: application/octet-stream\r\n\r\n<string>\r\n-----011000010111000001101001\r\nContent-Disposition: form-data; name=\"selfie\"; filename=\"example-file\"\r\nContent-Type: application/octet-stream\r\n\r\n<string>\r\n-----011000010111000001101001\r\nContent-Disposition: form-data; name=\"country\"\r\n\r\nCN\r\n-----011000010111000001101001\r\nContent-Disposition: form-data; name=\"documentNumber\"\r\n\r\nE12345678\r\n-----011000010111000001101001\r\nContent-Disposition: form-data; name=\"issueDate\"\r\n\r\n2020-03-14\r\n-----011000010111000001101001\r\nContent-Disposition: form-data; name=\"expirationDate\"\r\n\r\n2030-03-13\r\n-----011000010111000001101001--",
  CURLOPT_HTTPHEADER => [
    "Content-Type: multipart/form-data",
    "X-API-Key: <api-key>"
  ],
]);

$response = curl_exec($curl);
$err = curl_error($curl);

curl_close($curl);

if ($err) {
  echo "cURL Error #:" . $err;
} else {
  echo $response;
}

package main

import (
	"fmt"
	"strings"
	"net/http"
	"io"
)

func main() {

	url := "https://api.rolla.xyz/api/v1/external/accounts/{accountId}/kyc-reliance"

	payload := strings.NewReader("-----011000010111000001101001\r\nContent-Disposition: form-data; name=\"passport\"; filename=\"example-file\"\r\nContent-Type: application/octet-stream\r\n\r\n<string>\r\n-----011000010111000001101001\r\nContent-Disposition: form-data; name=\"selfie\"; filename=\"example-file\"\r\nContent-Type: application/octet-stream\r\n\r\n<string>\r\n-----011000010111000001101001\r\nContent-Disposition: form-data; name=\"country\"\r\n\r\nCN\r\n-----011000010111000001101001\r\nContent-Disposition: form-data; name=\"documentNumber\"\r\n\r\nE12345678\r\n-----011000010111000001101001\r\nContent-Disposition: form-data; name=\"issueDate\"\r\n\r\n2020-03-14\r\n-----011000010111000001101001\r\nContent-Disposition: form-data; name=\"expirationDate\"\r\n\r\n2030-03-13\r\n-----011000010111000001101001--")

	req, _ := http.NewRequest("POST", url, payload)

	req.Header.Add("X-API-Key", "<api-key>")

	res, _ := http.DefaultClient.Do(req)

	defer res.Body.Close()
	body, _ := io.ReadAll(res.Body)

	fmt.Println(string(body))

}

HttpResponse<String> response = Unirest.post("https://api.rolla.xyz/api/v1/external/accounts/{accountId}/kyc-reliance")
  .header("X-API-Key", "<api-key>")
  .body("-----011000010111000001101001\r\nContent-Disposition: form-data; name=\"passport\"; filename=\"example-file\"\r\nContent-Type: application/octet-stream\r\n\r\n<string>\r\n-----011000010111000001101001\r\nContent-Disposition: form-data; name=\"selfie\"; filename=\"example-file\"\r\nContent-Type: application/octet-stream\r\n\r\n<string>\r\n-----011000010111000001101001\r\nContent-Disposition: form-data; name=\"country\"\r\n\r\nCN\r\n-----011000010111000001101001\r\nContent-Disposition: form-data; name=\"documentNumber\"\r\n\r\nE12345678\r\n-----011000010111000001101001\r\nContent-Disposition: form-data; name=\"issueDate\"\r\n\r\n2020-03-14\r\n-----011000010111000001101001\r\nContent-Disposition: form-data; name=\"expirationDate\"\r\n\r\n2030-03-13\r\n-----011000010111000001101001--")
  .asString();

require 'uri'
require 'net/http'

url = URI("https://api.rolla.xyz/api/v1/external/accounts/{accountId}/kyc-reliance")

http = Net::HTTP.new(url.host, url.port)
http.use_ssl = true

request = Net::HTTP::Post.new(url)
request["X-API-Key"] = '<api-key>'
request.body = "-----011000010111000001101001\r\nContent-Disposition: form-data; name=\"passport\"; filename=\"example-file\"\r\nContent-Type: application/octet-stream\r\n\r\n<string>\r\n-----011000010111000001101001\r\nContent-Disposition: form-data; name=\"selfie\"; filename=\"example-file\"\r\nContent-Type: application/octet-stream\r\n\r\n<string>\r\n-----011000010111000001101001\r\nContent-Disposition: form-data; name=\"country\"\r\n\r\nCN\r\n-----011000010111000001101001\r\nContent-Disposition: form-data; name=\"documentNumber\"\r\n\r\nE12345678\r\n-----011000010111000001101001\r\nContent-Disposition: form-data; name=\"issueDate\"\r\n\r\n2020-03-14\r\n-----011000010111000001101001\r\nContent-Disposition: form-data; name=\"expirationDate\"\r\n\r\n2030-03-13\r\n-----011000010111000001101001--"

response = http.request(request)
puts response.read_body

{
  "success": true,
  "message": "KYC reliance submitted successfully",
  "data": {
    "verified": true,
    "reviewStatus": "completed",
    "reviewAnswer": "GREEN"
  }
}

{
  "success": false,
  "message": "<string>"
}

{
  "success": false,
  "message": "<string>"
}

{
  "success": false,
  "message": "<string>"
}

{
  "success": false,
  "message": "<string>"
}

Submits identity documents you have already verified yourself for an individual account, instead of sending the account holder through Rolla’s hosted liveness check. Upload the holder’s passport and the selfie or liveness capture you collected during your own onboarding, and we register them against the account’s verification. This is the alternative to Generate Individual KYC Link. Use it when your customers have already completed identity verification on your side and re-verifying them would be redundant.

KYC reliance is enabled per partner. If it is not enabled for your business the endpoint returns 403. Contact your Rolla representative to have it turned on — enabling it means agreeing on the verification standard your own KYC meets.

Individual accounts only. Calling this on a business account returns 400. For a business, verify each owner and director with Submit Representative KYC Reliance, or send them a related-person KYC link.

Request

Send as multipart/form-data. Both files are required.

Part	Type	Required	Description
`passport`	file	Yes	The account holder’s passport image or PDF
`selfie`	file	Yes	The selfie or liveness capture from your own verification. Image or video
`country`	string	Yes	2-letter ISO country code that issued the passport, e.g. `CN`
`documentNumber`	string	No	Passport number
`issueDate`	string	No	`YYYY-MM-DD`
`expirationDate`	string	No	`YYYY-MM-DD`

Example Request

curl -X POST "https://api.rolla.xyz/api/v1/external/accounts/b6075be0-f1d0-451f-a468-3e94563101d2/kyc-reliance" \
  -H "X-API-Key: your_api_key_here" \
  -F "passport=@/path/to/passport.jpg" \
  -F "selfie=@/path/to/selfie.jpg" \
  -F "country=CN" \
  -F "documentNumber=E12345678" \
  -F "issueDate=2020-03-14" \
  -F "expirationDate=2030-03-13"

Example Response

{
  "success": true,
  "message": "KYC reliance submitted successfully",
  "data": {
    "verified": true,
    "reviewStatus": "completed",
    "reviewAnswer": "GREEN"
  }
}

The response is the account’s verification status, the same shape returned by Get Verification Status.

Key Behaviours

The review is not instant. The upload puts the account into review; reviewStatus may come back as pending with reviewAnswer as null. Poll Get Verification Status or watch Get Requirements until identityVerification reads verified.

Verification still blocks submission. Submit Application returns 409 KYC_INCOMPLETE until the review completes successfully — reliance replaces the hosted liveness step, not the requirement itself.

The passport uploaded here is reused when a USD account is issued, so a bank-account request will not ask for it again. See Issue Bank Account.

Errors

Status	Meaning
`400`	A file is missing, `country` is absent or not a 2-letter code, the account is a business, or the identity provider rejected the upload
`403`	KYC reliance is not enabled for your business
`404`	Account not found, or not owned by your API key’s business

When the identity provider rejects an upload, the reason is passed through rather than hidden behind a generic failure:

{
  "success": false,
  "message": "Identity provider rejected the upload: document is unreadable (code 1002)"
}

Authorizations

X-API-Key

string

header

required

Your Rolla API key

Path Parameters

accountId

string<uuid>

required

Identifier of an individual account owned by the same user as your API key's business

Body

multipart/form-data

passport

file

required

The account holder's passport image or PDF

selfie

file

required

Selfie or liveness capture from your own verification. Image or video

country

string

required

2-letter ISO code of the country that issued the passport

Required string length: 2

Example:

"CN"

documentNumber

string

Maximum string length: 64

Example:

"E12345678"

issueDate

string<date>

Example:

"2020-03-14"

expirationDate

string<date>

Example:

"2030-03-13"

Response

KYC reliance submitted successfully

success

boolean

Example:

true

message

string

Example:

"KYC reliance submitted successfully"

data

object

Show child attributes

Overview

Banks

Account Lookup

Transactions

Wallet

Beneficiaries

Teams

Account Onboarding

Webhooks

Submit KYC Reliance

Request

Example Request

Example Response

Key Behaviours

Errors

Authorizations

Path Parameters

Body

Response

​Request

​Example Request

​Example Response

​Key Behaviours

​Errors

Authorizations

Path Parameters

Body

Response

Request

Example Request

Example Response

Key Behaviours

Errors