---
title: "Complete xs2a.risk by uploading account data to our systems."
method: POST
path: "/risks/upload/{wizard-session-id}"
tags: ["XS2A.risk"]
---

# Complete xs2a.risk by uploading account data to our systems.

`POST /risks/upload/{wizard-session-id}`

This action will complete the started wizard_session and can **not** be done in testmode.

## Path parameters

- `wizard-session-id` string, required

## Query parameters

- `format` 'json' | 'json2' | 'camt'

## Request body

- Xs2aRiskUploadJsonWrapper[]
  - `account` Xs2aRiskUploadJsonAccount
    - `holder` string, required
    - `description` string, required
    - `iban` string, required
    - `bic` string
    - `bank_name` string
    - `country_id` 'DE' | 'AT' | 'CH', required — The 2-letter country code
    - `joint_account` boolean
  - `balance` Xs2aRiskUploadJsonBalance
    - `balance` number, float, nullable, required
    - `limit` number, float, required
    - `available` number, float, required
    - `currency` 'EUR' | 'CHF', required — The id of the currency to be used.
  - `turnovers` Xs2aRiskUploadJsonTurnoversTurnover[]
    - `booking_date` string, required
    - `amount` number, float, required
    - `currency_id` 'EUR' | 'CHF' — The id of the currency to be used.
    - `purpose` string[], required
    - `counter_iban` string, required
    - `counter_bic` string, required
    - `counter_holder` string, required

## Response `200`

Requests processed successfully.

- Xs2aRiskUploadJsonSuccess
  - `id` string
  - `transaction` string
  - `account_holder` string
  - `iban` string
  - `bic` string
  - `bank_name` string
  - `country_id` 'DE' | 'AT' | 'CH' — The 2-letter country code
  - `testmode` integer
  - `created_at` string
  - `metadata` Metadata, nullable — An array of data which will be passed back to your application. With this field you can for example pass information about your customer ids, order ids and the like back to your application. Please beware of some restrictions for the metadata field: maximum of 3 values, maximum of a key length of 20 characters, maximum length of values is 128 characters. For privacy protection reason it is not allowed to use this field for transferring personal data (e.g. names or addresses).
  - `merchant_id` string
  - `object` string

## Other responses

- `404` — Invalid WizardSession
- `422` — Validation error
- `500` — An internal server problem occurred

---

[API](https://skmtc.dev/xs2a/apis/xs2a-api.md) · [All operations](https://skmtc.dev/xs2a/apis/xs2a-api/llms.txt) · [OpenAPI document](https://skmtc-service-production.skmtc.workers.dev/v1/apis/xs2a/xs2a-api/revisions/ae5fbc5feee3/schema)