Currently the Identity Verification options from eCredit Data API are provided through TransUnion, Experian, and LexisNexis.
TransUnion id-search
URL: https://api-sandbox.stitchcredit.com/api/transunion/id-searchID Search is a specialized search based on input name and Social Security number. Input address information is optional. ID Search delivers name and address for up to eight subjects. Additionally, ID Search selects the subject that best matches the input data. ID Search also returns ID Mismatch Alert, TruValidate Fraud Alerts, and Phone Append (if the subscriber is authorized for these services). ID Search can return an FFR or a print image
Experian CrossCore2 Precise ID
This product has multiple pieces that can be used individually depending on your requirements.
- One-Time Passcode (OTP)
- Knowledge IQ (KIQ) knowledge-based authentication products where an applicant must answer a series of questions,
- Reverse Phone Append (RPA)
Initial Request
URL: https://api-sandbox.stitchcredit.com/api/experian/cc2/initialFirst send the “Initial" request.
OTP has a high success rate, and should be the default flow unless the phone number provided in the "Initial" request can't be verified. If the phone number cannot be verified, the "Initial" response will contain four multiple choice KIQ questions in the "kba" object.
One Time Passcode (OTP)
URL: https://api-sandbox.stitchcredit.com/api/experian/cc2/otpProvide the Session ID and the One-Time-Passcode (OTP)
An SMS code is sent to the consumer for them to submit.
The Initial PreciseID query results will determine the next step, be it Knowledge IQ (KIQ) or One-Time Passcode (OTP). If the data provided is insufficient to identify an individual and/or generate questions, you will get a final response on this “initial” query. If the data provided is insufficient, you will get many results that you need to "manually" select from.
More information equals higher quality results. It is better to add date of birth and/or full or partial Social Security Number (SSN) if multiple results are being returned frequently.
**OTP ONLY - There will be a query telling PreciseID to send/resend the SMS code.
The next query will be a submission of KIQ or OTP. If the results are sufficient, the final response will be returned. If the KIQ results are insufficient, you may be given additional questions to submit again, as well as OTP in the case of an incorrect code. Typically if too many questions are incorrectly answered a “fail” is immediately returned. Missing all the questions is indicative of an issue. For user integrity and integrity of the identity process, questions and answers shouldn't be retained.
KIQ Request
URL: https://api-sandbox.stitchcredit.com/api/experian/cc2/kiqThe questions have 5 answer choices numbers from 1 to 5 (not 0-4 as you might expect). Insert the answers to the questions into the request body of the "Final - KIQ" request. There is a limited amount of time to submit KIQ answers. The available time to complete the questions varies, but it is typically less than 10 minutes.
Reverse Phone Append (RPA)
URL: https://api-sandbox.stitchcredit.com/api/experian/rpaReturns a user's name and address based on a US telephone number. This returned information can be used to feed the input to PreciseID.
This request attempts to match the provided phone number to return the associated name and address. This endpoint uses live data, so please be judicious.
Details of these APIs are coming soon
raw
URL: https://api-sandbox.stitchcredit.com/api/experian/cc2/raw
Screening
URL: https://api-sandbox.stitchcredit.com/api/experian/cc2/screeningLexisNexis
Includes endpoints for Business Instant ID and Consumer Instant ID
Business Instant ID (BIID)
BIID executes a Business Instant ID2 verification on the provided business and associated subjects.
The VFPS Business Instant ID endpoints, /vfps/biid2 and /vfps/biid2/pdf, do not currently have a test case.
URL: https://api-sandbox.stitchcredit.com/api/vfps/biid2 for reports in JSONURL: https://api-sandbox.stitchcredit.com/api/vfps/biid2/pdf for reports in PDF format
Instant ID (IID)
The CRS middleware has the endpoint, https://api-sandbox.stitchcredit.com/iid/new-request , for retrieving instantID reports as JSON.
The InstantID results consist of the following numeric output components:
- NAS (name, address, and SSN) index,
- NAP (name, address, and phone number) index,
- CVI (comprehensive verification index).
InstantID was developed by LexisNexis to provide financial institutions with a means to compare an identity presented for account opening against all the reported identities from public record, national credit bureaus, utility sources, government sources, and institutional sources through an automated electronic interface. InstantID allows the automation of previously manually-conducted searches against electronic databases, using robust search and matching technology to replace human data entry and search term selection.
NAS & NAP Index value
The InstantID NAS index value is a numeric value that ranges from 0 to 12 and explicitly reports which of the following input identity elements were verified with an identity that is on record at LexisNexis: first name, last name, residential address, and SSN. An NAS index value of 12 indicates that all four elements were verified to an identity on record. An NAS index value of 0 indicates that none of the four elements were verified according to an identity on record. NAS reporting sources contributing to LexisNexis's records include national credit bureau header records, utility source records, and public records.
The InstantID NAP index value is also a numeric value that ranges from 0 to 12 and explicitly indicates the level of the match of the submitted name, address, and phone number. Reporting sources contributing to LexisNexis's records include phone directory and utility records, and can also include contributed inquiry records from the LexisNexis Fraud Defense Network Event Activity data. Note that the NAP index provides very timely updates to name and address verification. While a phone number is also reported as a component of the NAP index, a phone number is not required to verify name and address through these sources.
NAS uses name, address, and Social Security Number (SSN), while NAP uses name, address and Phone number.
The NAS and NAP indices are constructed to return the highest value that can be obtained when attempting to match the input name, address, and SSN (NAS) or Phone Number (NAP) to the identities that are on record.
For example,
- An NAP value of 0 indicates that none of the input identity elements (first name, last name, address, or phone number) could be verified by the sources that report name, address, and phone number.
- An NAP value of 1 indicates that the phone number is associated with a different name and address.
- For NAS, if the first name, last name, and address are verified, and the SSN is associated with a different name and address, then the NAS index returns a value of 8. The fact that the SSN is associated with a different name and address is reported through the associated warning codes.
Meaning of InstantID NAS and NAP index values from 0 to 12:
|
Value |
Meaning |
|---|---|
|
0 |
Nothing found for input criteria |
|
1 |
Input SSN (NAS) / Phone (NAP) is associated with a different name and address |
|
2 |
Input First name and Last Name matched |
|
3 |
Input First name and Address matched |
|
4 |
Input First name and SSN (NAS) / Phone (NAP) matched |
|
5 |
Input Last name and Address matched |
|
6 |
Input Address and SSN (NAS) / Phone (NAP) matched |
|
7 |
Input Last name and SSN (NAS) / Phone (NAP) matched |
|
8 |
Input First name, Last name and Address matched |
|
9 |
Input First name, Last name and SSN (NAS) / Phone (NAP) matched |
|
10 |
Input First name, Address, and SSN (NAS) / Phone (NAP) matched |
|
11 |
Input Last name, Address, and SSN (NAS) / Phone (NAP) matched |
|
12 |
Input First name, Last name, Address and SSN (NAS) / Phone (NAP) matched |
Comprehensive Verification Index (CVI)
There are no other embedded risk models. The NAP, NAS, and CVI results are calculated using explicitly documented, rule-based logic, and do not rely on predictive algorithms. InstantID was developed in 2002. An enhanced version of InstantID was released in 2014 that allowed policy modifications to the logic that calculated the CVI. These parameter-based modifications gave the option to increment the CVI values of 10, 20 or 30 by 10 points if the input DOB or the input driver license were matched and verified to identity data on record at LexisNexis. CVI values can only increment by 10 points if the returned value has not been capped or overridden to the value by a high risk condition.
A typical financial institution will consider a CVI value of 40 or 50 to be well verified. For this broad sample, 90.9 percent of the applications received a well-verified CVI value of 40 or 50. Most financial institutions consider a CVI value of 40 or higher to be electronically verified and require no additional documentation or authentication.