Integration

detailed requirements requirement description 1 load customer data into cos cross river (cr) must perform ofac/pep screens in our system (cos) at the time of onboarding and regularly after that 2 add unique cardholder identifier into cos cross river receives files from processors and from the networks with tokenized card numbers the processor uses the tokenized card numbers as unique identifiers for each cardholder to match cards with accounts, we need this unique identifier to be added to the cardholder’s cos customer record cr expects that whenever a new card token is generated, you update this cos customer record it makes no difference if the card is new or reissued 3 for commercial card partners link the businesses and cardholders in cos cross river requires commercial card partners to create both business and cardholder customer records in cos use the beneficial owner api call to update the cos customer record ofac/pep screening and loading customer data to add customer data in cos after a successful kyc (know your customer) check, call the post /core/v1/cm/customers endpoint in cos to create the cardholder’s customer account ofac uses the customer name, date of birth (dob), and address the customer identification program (cip) requires the customer social security number or government issued id (for non us persons) the webhook event core customer ofac changed is triggered and returns an initial status of clear or failed if the status is clear , you can approve and create the customer credit card facility on your side if the status is failed , the cr aml team investigates the case the webhook event is triggered again, sending a status of reviewing or pending , indicating that a person is reviewing the case this can take up to 48 hours very rarely, the cr team might reach out to you to ask for additional supporting documents you will need to provide an email address for this the core customer ofac changed webhook returns any change in status, not just reviewing or pending after reviewing, the cr team moves the status to either clear or positive the webhook event fires again if clear , you can continue with approving and creating a credit card facility for your customer if positive , you must decline the application this is quite rare to trigger an ofac/pep failure in the sandbox use these values in your call for pep, in the name object use the name vladimir putin to get a hit for ofac, in the name object use the name francisco javier arellano félix ; and in the profile object use the birthdate 1969 12 11 (december 11, 1969) for ofac entity, in the name object use the entityname value blue star diamond once the customer record is cleared, there is no longer a reason to subscribe to the specific customer webhook cross river scans customer records nightly for ofac/pep if a customer hits ofac during a nightly scan, our aml team will reach out via zendesk to help clear you must keep the customer records you create up to date if a customer changes their name, address, email, or other details, use the customer management apis to update their record you can make this part of a nightly process the scans take less than a second anything that needs manual review is taken care of within 3 business days status definition changes (applies to ofac, pep, and internal list) webhook event responses from this point on mean positive must be rejected (no change) clear everything is fine (no change) pending the case is being reviewed (no change) reviewing a potential match within a category is being reviewed by cr and is pending a disposition previously this was failed failed there isn’t enough information to know the status (for example, rfi not responded to) see onboard a customer docid\ njfm wjxq0eokx4pfn3b6 add a unique user identifier into a customer record in cos cross river receives files from processors and from the networks that contain tokenized card numbers identifying each cardholder we need to add these unique user identifiers to the cos customer record of each cardholder this allows cross river to track all the information that the card networks need to know about that customer's card and how they use it add the identifier to the customer id section with this endpoint post /core/v1/cm/customers/{id}/identifications use these values in the body of the request { "isprimary" false, "idnumber" "\<token value goes here>", "idtype" "other", "issuingauthority" "token", "issuingcountrycode" "us" { see add id details docid 1duc0n4jbcx0tc2oizjus as always, if you have any questions, email cos support\@crossriver com associate a beneficial owner resource with a cos customer record when you provide cards to a business (and not directly to individual cardholders), both the business itself and each cardholder from that business have customer records in cos to ensure that the cardholder customer records are associated with the correct business customer record, you add each cardholder as a beneficial owne r to the business record associate the customer record with the business customer record using this endpoint post /core/v1/cm/customers/{customerid}/beneficial owners in the body of the request, use the customer id of the business issuing the company card for the customerid value, and the customer id of the cardholder for the ownercustomerid value enter auth user for the ownertitle value sample associate beneficial owner resource to customer record request { "ownercustomerid" "a9da21a8 a9df 4db3 90f5 138d7cf4b10e", "ownertitle" "auth user", { see add a beneficial owner docid\ pomxv5e04nxpketmleo1p as always, if you have any questions, email cos support\@crossriver com mailto\ cos support\@crossriver com back office integration provide cross river with the reports and data files described in this section operational reports to manage the daily and monthly obligations to the card networks, cross river requires new credit bin sponsor partners or platforms to provide the following operational supports via sftp daily net settlement monthly spend and interchange monthly chargeback quarterly reports transaction data files cross river requires partners or platforms to send transaction details daily these transaction files must minimally include the following elements transaction reference id posted date transaction amount transaction currency return amount transaction credit/debit indicator transaction status user token value card token value last 4 digits of pan merchant id merchant name merchant city merchant country merchant state merchant category code (mcc)