---
title: "Submit originator data for Travel rule information request"
method: POST
path: "/compliance/v1/information-requests/{externalId}/actions"
tags: ["Crypto Payments"]
---

# Submit originator data for Travel rule information request

`POST /compliance/v1/information-requests/{externalId}/actions`

## Request

- Base URL: `https://api.sandbox.bvnk.com`
- URL: `https://api.sandbox.bvnk.com/compliance/v1/information-requests/{externalId}/actions`
- Auth: API key in header `Authorization`
- TypeScript: <https://skmtc.dev/bvnk/apis/bvnk-api-endpoints/docs/compliance/v1/information-requests/:externalId/actions/post.ts> (a function with typed inputs; its response is checked against the schema)

Submits originator information for a crypto payment that BVNK is holding under the Travel Rule after the customer has sent the payment.

*Only use this endpoint to release payments held for missing Travel Rule information*. This situation occurs when you request a payment below 3,000 currency units without Travel Rule details, but the customer sends a higher amount. BVNK will then hold the payment and send a [`bvnk:compliance:v1:information-request` webhook](/bvnk/api-explorer/bvnk-webhooks/compliance-information-request) requesting the required information.

To proceed, provide the requested information programmatically by passing the `data.id` from the webhook as `externalId`. Once accepted, the payment will resume processing.

To prevent this scenario, always include Travel Rule information when creating a payment, regardless of the amount. For more details, see [Provide additional party information](/bvnk/use-cases/stablecoin-payments-for-platforms/provide-user-information-for-payments).

Held payments may be direct crypto deposits, channel transactions, or crypto payments (MPS), as indicated by `data.relatedPayment.type` in the webhook. These payments also appear in the **Missing Contacts** queue in the Portal, where you can assign an originator manually if preferred.

:::warning Entity-specific requirements
The contact service has different `externalId` requirements based on entity type:
- `INDIVIDUAL`: `externalId` is **required**.
- `COMPANY`: `externalId` is **optional**.
:::

## Path parameters

- `externalId` string, uuid, required

## Request body

- InformationRequestActionDto: Action to take on a held information request. Currently only `PROVIDE_INFORMATION` is supported, which assigns originator (contact) details to the related payment.
  - `type` 'PROVIDE_INFORMATION', required: Action type to apply to the information request.
  - `entity` union, required: Originator entity that is being assigned to the held payment. Use `INDIVIDUAL` for natural persons and `COMPANY` for legal entities.
    - InformationRequestIndividualEntity: Individual originator details. :::warning `externalId` is required for `INDIVIDUAL` entities When `type` is `INDIVIDUAL`, `externalId` must be provided. This is a current contact-service requirement and is not enforced for `COMPANY` entities. :::
      - `type` 'INDIVIDUAL', required: Entity type.
      - `contactId` string: Existing BVNK contact ID, if reusing a previously created contact. Use `null` to create a new contact from the supplied details.
      - `customerId` string: Customer ID associated with the contact, if applicable. Use `null` when not applicable.
      - `externalId` string, required: **Required for `INDIVIDUAL` entities.** Your external identifier for this individual contact. Used to deduplicate contacts in your system.
      - `firstName` string, required: First name of the individual.
      - `lastName` string, required: Last name of the individual.
      - `dateOfBirth` string, required: Date of birth of the individual in `dd-MM-yyyy` format.
      - `relationshipType` 'SELF_OWNED' | 'THIRD_PARTY', required: Relationship of the individual to the merchant.
      - `address` InformationRequestAddress, required: Postal address of the individual originator.
        - `addressLine1` string, required: First line of the address.
        - `addressLine2` string: Second line of the address. Optional.
        - `city` string, required: City of the address.
        - `region` string: Region or state of the address. Optional.
        - `postCode` string, required: Postal code of the address.
        - `country` string, required: ISO 3166-1 alpha-2 country code.
    - InformationRequestCompanyEntity: Company originator details. :::info `externalId` is optional for `COMPANY` entities Unlike `INDIVIDUAL` entities, `externalId` is not required when `type` is `COMPANY`. :::
      - `type` 'COMPANY', required: Entity type.
      - `contactId` string: Existing BVNK contact ID, if reusing a previously created contact. Use `null` to create a new contact from the supplied details.
      - `customerId` string: Customer ID associated with the contact, if applicable. Use `null` when not applicable.
      - `externalId` string: Optional. Your external identifier for this company contact. Not required for `COMPANY` entities.
      - `legalName` string, required: Legal name of the company.
      - `registrationNumber` string: Company registration number.
      - `relationshipType` 'SELF_OWNED' | 'THIRD_PARTY', required: Relationship of the company to the merchant.

## Response `200`

Information accepted; the held payment will resume processing.

## Other responses

- `400`: Bad Request
- `404`: The specified resource was not found
- `500`: Unexpected Error

## Changes

- **2026-11-06** `c386d436bf2c`: 4 breaking
  - the request property `entity/oneOf[#/components/schemas/InformationRequestCompanyEntity]/contactId` became not nullable
  - the request property `entity/oneOf[#/components/schemas/InformationRequestCompanyEntity]/customerId` became not nullable
  - the request property `entity/oneOf[#/components/schemas/InformationRequestIndividualEntity]/contactId` became not nullable
  - the request property `entity/oneOf[#/components/schemas/InformationRequestIndividualEntity]/customerId` became not nullable
- **2026-06-16** `97d6c0d2fe2e`: 1 info
  - endpoint added

[Operation history](https://skmtc.dev/bvnk/apis/bvnk-api-endpoints/changes/compliance/v1/information-requests/:externalId/actions/post.md)

---

[API](https://skmtc.dev/bvnk/apis/bvnk-api-endpoints.md) - [All operations](https://skmtc.dev/bvnk/apis/bvnk-api-endpoints/llms.txt) - [OpenAPI document](https://skmtc.dev/bvnk/apis/bvnk-api-endpoints/revisions/c386d436bf2c?raw)
