Identity verification for connected accounts
Use identity verification to reduce risk on your platform when using Connect.
Every country has its own requirements that accounts must meet for Stripe to be able to pay out funds to individuals and companies. These are typically known as Know Your Customer (KYC) requirements. Regardless of the country, broadly speaking, the requirements Stripe must meet are:
- Collecting information about the individual or company receiving funds
- Verifying information to establish that we know who our customers are
Connect platforms collect the required information from users and provide it to Stripe. This may include information about the legal entity and personal information about the representative of the business, as well as those who own or control the business. Stripe then attempts verification. In some cases, Stripe may be able to verify an account by confirming some or all of the keyed-in data provided. In other cases, Stripe may require additional information, including, for example, a scan of a valid government-issued ID, a proof of address document, or both.
This page explains the verification flow options to meet Stripe KYC requirements, but the easiest way to manage verification is to integrate Connect Onboarding, which lets Stripe take care of the complexity around the basic KYC obligations associated with an accountâs capabilities. Handling the details of account verification is initially complex and requires vigilance to keep up with the constantly evolving regulatory changes around the world.
Stripe recommends using Connect Onboarding. If you decide to handle account verification yourself, continue reading to learn about the verification flow options, how API fields translate to companies and individuals, and how to localize information requests. Also, read Handling Identity Verification with the API to learn how to programmatically provide information and handle requests.
Even after Stripe verifies a connected account, platforms still must monitor for and prevent fraud. Donât rely on Stripeâs verification to meet any independent legal KYC or verification requirements.
Verification requirements
Verification requirements for connected accounts vary by account, depending on:
- Country
- Capabilities
- Business type (for example, individual, company)
- Business structure (for example, public corporation, private partnership)
- The service agreement type between Stripe and the connected account
- The risk level
You must collect and verify specific information to enable charges and payouts. For example, for a company in the US, you might need to collect:
- Information about the business (for example, name, address, tax ID number).
- Information about the person opening the Stripe account (for example, name, date of birth).
- Information about beneficial owners (for example, name, email).
At certain variable thresholdsâusually when a specified amount of time has passed or volume of charges have been madeâyou may need to collect and verify additional information. Stripe temporarily pauses charges or payouts if the information isnât provided or verified according to the thresholds for required information. For example, additional information might include verification of the company tax ID number.
Onboarding flows
As the platform, you must decide if you want to collect the required information from your connected accounts upfront or incrementally. Upfront onboarding collects the eventually_
requirements for the account, while incremental onboarding only collects the currently_
requirements.
Upfront onboarding | Incremental onboarding | |
---|---|---|
Advantages |
|
|
Disadvantages |
|
|
To determine whether to use upfront or incremental onboarding, review the required information for the countries where your connected accounts are located to understand the requirements that are eventually due. While Stripe tries to minimize any impact to connected accounts, requirements might change over time.
For connected accounts where youâre responsible for requirement collection, you can customize the behavior of future requirements using the collection_
parameter. Set collection_
to include
to collect the accountâs future requirements.
Business type
The specific KYC information depends on the type of business entity. They are:
individual
âCollect information about the person.company
âCollect information about the company. Depending on the countries your connected accounts are in, you might also have to collect information about beneficial owners.non_
âCollect information about the non-profit organization.profit government_
(available for US connected accounts only)âCollect information about the government entity.entity
If you or your users are unsure of their entity type, the information might be in the business formation documents or tax documents for that entity.
See the list of requirements for different business types by country. When you know what information to collect, you can read more about handling identity verification with the API.
Business structure
For all business types other than individual
, you can further classify your userâs business by identifying its legal (business) structure. A business structure describes the details of a business entity such as day-to-day operations, tax burdens, liability, and organizational schema. You can classify it by using company[structure] in the Account
object.
Providing this information to Stripe gets you the most accurate business classification for compliance purposes. While it isnât required, it can reduce onboarding requirements. For example, owner information is required for private companies, but not required for public companies. By default, a company
is considered private if information on the company.
isnât provided.
Internationalization and localization
If you support users in multiple countries, consider internationalization and localization when asking for information. Creating an interface that uses not only the userâs preferred language but also the proper localized terminology results in a smoother onboarding experience.
For example, instead of requesting a business tax ID from your users, regardless of country, request:
- EIN, US
- Business Number, Canada
- Company Number, UK
You can find recommended country-specific labels along with the other required verification information.