---
title: "Execute KYC"
method: POST
path: "/programs/{programCode}/accounts/{accountIdentifier}/users/{userIdentifier}/kycGates/kyc2"
tags: ["Account"]
---

# Execute KYC

`POST /programs/{programCode}/accounts/{accountIdentifier}/users/{userIdentifier}/kycGates/kyc2`

Performs Know Your Customer (KYC) verification for a user on the account. Requires encrypted KYC details in the request body.

## Path parameters

- `programCode` string, required
- `accountIdentifier` string, required
- `userIdentifier` string, required

## Headers

- `X-GD-RequestId` string, required
- `X-GD-EnrollmentRequestIdentifier` string

## Request body

- FraudKycCureRequest — Represents a request to perform KYC (Know Your Customer) and fraud cure operations for a user on an account. Contains encrypted user data, fraud metadata, and contact verification information.
  - `accountIdentifier` string, nullable — The unique identifier (UID or GUID) of the account for which KYC/fraud cure is being performed.
  - `userIdentifier` string, nullable — The unique identifier (UID or GUID) of the user for whom KYC/fraud cure is being performed.
  - `encryptedUserData` EncryptedData — Represents a container for encrypted data used in secure data transfer operations. Contains the encrypted payload and associated cryptographic metadata, including encryption version, ephemeral public key, and public key hash. Used to securely transmit sensitive information such as user data, ensuring confidentiality and integrity during transport.
    - `version` string, nullable — The version of the encryption algorithm used to encrypt the data (e.g., "v1", "v2").
    - `ephemeralPublicKey` string, nullable — The ephemeral public key used in the encryption process, typically for key exchange or session establishment.
    - `publicKeyHash` string, nullable — The hash of the public key used to verify the integrity and authenticity of the encryption key.
    - `data` string, nullable — The encrypted data payload, typically base64-encoded, containing the sensitive information.
  - `fraudData` object, nullable — Optional. Additional fraud-related data as key-value pairs for further analysis or processing.
  - `contactVerificationIdentifiers` string[], nullable — Optional. A list of contact verification identifiers (e.g., email, phone) used for verifying user contact information.
  - `prospectType` string, nullable — Optional. The type of prospect (e.g., "new", "existing") for the KYC process.

## Response `200`

OK

- FraudKycCureResponse — Represents the response for a fraud or KYC (Know Your Customer) cure operation.
  - `kycGate` KycGate — Represents a Know Your Customer (KYC) gate, containing the current KYC state data for a user or account.
    - `kycStateData` KycStateData — Represents the Know Your Customer (KYC) state data for a user. Contains information about OFAC (Office of Foreign Assets Control) screening status, overall KYC status, and any pending KYC gates. Used to track regulatory compliance and the current state of user verification during onboarding or account management.
      - `ofacStatus` string, nullable — The OFAC (Office of Foreign Assets Control) screening status for the user. Typical values: "Passed", "Failed", "Pending", or other business-specific status indicators.
      - `kycStatus` string, nullable — The overall KYC (Know Your Customer) status for the user. Typical values: "Verified", "Pending", "Failed", or other business-specific status indicators.
      - `kycPendingGate` string, nullable — The name or code of any pending KYC gate or step that must be completed for full verification. Example: "DocumentVerification", "AddressCheck", or null if no gates are pending.
  - `responseDetails` ResponseDetail[], nullable — Required: A list of response details providing status codes, descriptions, and additional information about the result of the operation.
    - `code` integer — The primary status or error code for the response (e.g., 200 for success, 400 for validation error).
    - `subCode` integer, nullable — An optional subcode providing more granular detail about the response or error.
    - `description` string, nullable — A human-readable description of the response, error, or status.
    - `url` string, nullable — A URL linking to documentation or a web page with more information about the response code.

## Other responses

- `401` — Unauthorized
- `403` — Forbidden
- `500` — Internal Server Error
- `503` — Service Unavailable

---

[API](https://skmtc.dev/greendot/apis/baas-apis.md) · [All operations](https://skmtc.dev/greendot/apis/baas-apis/llms.txt) · [OpenAPI document](https://skmtc-service-production.skmtc.workers.dev/v1/apis/greendot/baas-apis/revisions/666553766b78/schema)