Remove restriction

Relevant webhooks

For this endpoint be sure you have registered for these webhooks:

Core.Restriction.Removed

API reference

Removes a restriction applied to a specific account.

Endpoint: v1/dda/accounts/{accountNumber}/restrictions/{id}

DELETE

https://sandbox.crbcos.com/core/v1/dda/accounts/{accountNumber}/restrictions/{id}

Path Parameters

accountNumberstringrequired
Description
Number of the customer's master account that was restricted, even if the restriction is only on a subaccount or accounts
idstringrequired
Description
The ID identifying this restriction. You get this GUID in the "id" attribute of the response to the Restrict account call.

Response

idstring
Description
The GUID ID identifying this restriction
masterAccountNumberstring
Description
Number of the restricted customer account
subAccountNumberstring
Description
If the restrictions was on a specific subaccount, that account number
restrictionTypestring
Description
Who applied the restriction: - Partner - Internal
appliesTostring
Description
Restriction coverage: - All - Account - SubAccounts
statusstring
Description
Status of the restriction: - Inactive - Active When the restriction is removed, this should be Inactive.
railstring
Description
Type of restriction applied: - Ach - Wires - CreditCard - DebitCard - StoredValue - Checks - XPay - Rtp - Crypto - CardManagement - International - CardPayments - Internal
transactionTypestring
Description
Type of transaction restricted: - Debit - Credit
otherAccountTypestring
Description
Not used
transactionCodestring
Description
Indicates a specific transaction code, such as ‘Incoming ACH’
amountThresholdinteger
Description
Specifies an amount threshold. The restriction applies to any transaction amount that is equal to or greater than the amount entered. This value is in integral cents, meaning the number includes cents, with no decimal point. For example, 100 USD appears as 10000.
effectiveStartTimeHourinteger
Description
Indicates the approximate start hour of the restriction. Use a 24-hour clock.
effectiveStartTimeMinuteinteger
Description
Indicates the approximate start minute of the restriction
effectiveEndTimeHourinteger
Description
Indicates the approximate end hour of the restriction. Use a 24-hour clock.
effectiveEndTimeMinuteinteger
Description
Indicates the approximate end minute of the restriction
currencystring
Description
Currency held in the account
reasonstring
Description
Justification for applying the restriction
notesstring
Description
Any other information about the restriction. Generally not used.
createdAtstring
Description
Restriction created. In this case, the date and time are in this format: yyyy-mm-ddThh:mm:ss[.mmm]
removedAtstring
Description
Restriction removed. In this case, the date and time are in this format: yyyy-mm-ddThh:mm:ss[.mmm]
partnerIdstring
Description
Your unique ID in the Cross River system. This ID is in GUID format.
lastModifiedAtstring
Description
Internal Cross River value. Date and time the database entry was last modified. In this case, the date and time are in this format: yyyy-mm-ddThh:mm:ss[.mmm]

curl

curl --location --request DELETE 'https://sandbox.crbcos.com/core/v1/dda/accounts/2394312736/restrictions/51d73b46-ef2a-4a52-b174-b32f00949088' \
--header 'Authorization: Bearer <token>'

nodejs

var https = require('follow-redirects').https;
var fs = require('fs');

var options = {
  'method': 'DELETE',
  'hostname': 'sandbox.crbcos.com',
  'path': '/core/v1/dda/accounts/2394312736/restrictions/51d73b46-ef2a-4a52-b174-b32f00949088',
  'headers': {
    'Authorization': 'Bearer <token>'
  },
  'maxRedirects': 20
};

var req = https.request(options, function (res) {
  var chunks = [];

  res.on("data", function (chunk) {
    chunks.push(chunk);
  });

  res.on("end", function (chunk) {
    var body = Buffer.concat(chunks);
    console.log(body.toString());
  });

  res.on("error", function (error) {
    console.error(error);
  });
});

req.end();

python

import http.client

conn = http.client.HTTPSConnection("sandbox.crbcos.com")
payload = ''
headers = {
  'Authorization': 'Bearer <token>'
}
conn.request("DELETE", "/core/v1/dda/accounts/2394312736/restrictions/51d73b46-ef2a-4a52-b174-b32f00949088", payload, headers)
res = conn.getresponse()
data = res.read()
print(data.decode("utf-8"))

ruby

require "uri"
require "net/http"

url = URI("https://sandbox.crbcos.com/core/v1/dda/accounts/2394312736/restrictions/51d73b46-ef2a-4a52-b174-b32f00949088")

https = Net::HTTP.new(url.host, url.port)
https.use_ssl = true

request = Net::HTTP::Delete.new(url)
request["Authorization"] = "Bearer <token>"

response = https.request(request)
puts response.read_body

package main

import (
  "fmt"
  "strings"
  "net/http"
  "io"
)

func main() {

  url := "https://sandbox.crbcos.com/core/v1/dda/accounts/2394312736/restrictions/51d73b46-ef2a-4a52-b174-b32f00949088"
  method := "DELETE"

  payload := strings.NewReader(``)

  client := &http.Client {
  }
  req, err := http.NewRequest(method, url, payload)

  if err != nil {
    fmt.Println(err)
    return
  }
  req.Header.Add("Authorization", "Bearer <token>")

  res, err := client.Do(req)
  if err != nil {
    fmt.Println(err)
    return
  }
  defer res.Body.Close()

  body, err := io.ReadAll(res.Body)
  if err != nil {
    fmt.Println(err)
    return
  }
  fmt.Println(string(body))
}

200

{
    "id": "51d73b46-ef2a-4a52-b174-b32f00949088",
    "masterAccountNumber": "2394312736",
    "subAccountNumber": "2394312736",
    "restrictionType": "Internal",
    "appliesTo": "Account",
    "status": "Inactive",
    "transactionType": "Debit",
    "transactionCode": "Incoming ACH",
    "reason": "Account Freeze",
    "createdAt": "2025-08-04T05:00:54.423-04:00",
    "removedAt": "2025-08-12T06:50:03.4276575-04:00",
    "partnerId": "cd9c12f4-7691-424a-b38b-af5b0134c611",
    "lastModifiedAt": "2025-08-04T05:00:54.4238173-04:00"
}