curl --request POST \
  --url https://api-sandbox.lumx.io/customers/{id}/verifications \
  --header 'Authorization: Bearer <token>' \
  --header 'Content-Type: application/json' \
  --data '{}'

{
  "id": "f95b288c-e77a-4553-9f29-2ca0ea485eb2"
}

{
  "requestId": "29613260-eb6a-4c26-b637-3998a64664c2",
  "timestamp": "2026-11-04T16:55:46.808Z",
  "path": "/customers/a35ce696-ce9f-4e86-83fd-be2a3ea504d4/verifications",
  "status": 400,
  "code": "BAD_REQUEST",
  "message": "Business customer is missing required associated party roles: SHAREHOLDER, UBO, REPRESENTATIVE"
}

{
  "requestId": "5b7c3a1e-2f4d-4c8a-9e6b-1d2f3a4b5c6d",
  "timestamp": "2026-11-04T17:00:00.000Z",
  "path": "/customers/5d72f3b3-48a1-4188-a003-38e40be85548/verifications",
  "status": 401,
  "code": "UNAUTHORIZED",
  "message": "Unauthorized"
}

{
  "requestId": "5b7c3a1e-2f4d-4c8a-9e6b-1d2f3a4b5c6d",
  "timestamp": "2026-11-04T17:00:00.000Z",
  "path": "/customers/5d72f3b3-48a1-4188-a003-38e40be85548/verifications",
  "status": 403,
  "code": "FORBIDDEN",
  "message": "This API key can't access this resource."
}

{
  "requestId": "5da9563e-b4d3-45fa-96d0-c33e107946cf",
  "timestamp": "2026-11-04T17:22:31.889Z",
  "path": "/customers/00000000-0000-4000-8000-000000000000/verifications",
  "status": 404,
  "code": "CUSTOMER_NOT_FOUND",
  "message": "Customer with id 00000000-0000-4000-8000-000000000000 not found"
}

{
  "requestId": "251f03bd-5e07-44ae-a5a3-2f1932f82e9a",
  "timestamp": "2026-11-04T17:22:31.440Z",
  "path": "/customers/00000000-0000-4000-8000-000000000000/verifications",
  "status": 409,
  "code": "IDEMPOTENCY_KEY_CONFLICT",
  "message": "Idempotency key already used with a different request body"
}

{
  "requestId": "5b7c3a1e-2f4d-4c8a-9e6b-1d2f3a4b5c6d",
  "timestamp": "2026-11-04T17:00:00.000Z",
  "path": "/customers/5d72f3b3-48a1-4188-a003-38e40be85548/verifications",
  "status": 500,
  "code": "UPSTREAM_SERVICE_ERROR",
  "message": "An unexpected error occurred."
}

Customers

Start a verification

Starts a customer’s verification once the customer meets its requirements. See Business verification and Individual verification for what each customer type needs.

BUSINESS customers must start their verification with this route. INDIVIDUAL customers complete it by opening verification.link, except individuals in RFI and individuals created with a Sumsub shareToken, who start it here.

To verify only some associated parties again without restarting the customer’s verification, send associatedPartyIds. See Retrying verification for specific associated parties.

POST

customers

{id}

verifications

curl --request POST \
  --url https://api-sandbox.lumx.io/customers/{id}/verifications \
  --header 'Authorization: Bearer <token>' \
  --header 'Content-Type: application/json' \
  --data '{}'

{
  "id": "f95b288c-e77a-4553-9f29-2ca0ea485eb2"
}

{
  "requestId": "29613260-eb6a-4c26-b637-3998a64664c2",
  "timestamp": "2026-11-04T16:55:46.808Z",
  "path": "/customers/a35ce696-ce9f-4e86-83fd-be2a3ea504d4/verifications",
  "status": 400,
  "code": "BAD_REQUEST",
  "message": "Business customer is missing required associated party roles: SHAREHOLDER, UBO, REPRESENTATIVE"
}

{
  "requestId": "5b7c3a1e-2f4d-4c8a-9e6b-1d2f3a4b5c6d",
  "timestamp": "2026-11-04T17:00:00.000Z",
  "path": "/customers/5d72f3b3-48a1-4188-a003-38e40be85548/verifications",
  "status": 401,
  "code": "UNAUTHORIZED",
  "message": "Unauthorized"
}

{
  "requestId": "5b7c3a1e-2f4d-4c8a-9e6b-1d2f3a4b5c6d",
  "timestamp": "2026-11-04T17:00:00.000Z",
  "path": "/customers/5d72f3b3-48a1-4188-a003-38e40be85548/verifications",
  "status": 403,
  "code": "FORBIDDEN",
  "message": "This API key can't access this resource."
}

{
  "requestId": "5da9563e-b4d3-45fa-96d0-c33e107946cf",
  "timestamp": "2026-11-04T17:22:31.889Z",
  "path": "/customers/00000000-0000-4000-8000-000000000000/verifications",
  "status": 404,
  "code": "CUSTOMER_NOT_FOUND",
  "message": "Customer with id 00000000-0000-4000-8000-000000000000 not found"
}

{
  "requestId": "251f03bd-5e07-44ae-a5a3-2f1932f82e9a",
  "timestamp": "2026-11-04T17:22:31.440Z",
  "path": "/customers/00000000-0000-4000-8000-000000000000/verifications",
  "status": 409,
  "code": "IDEMPOTENCY_KEY_CONFLICT",
  "message": "Idempotency key already used with a different request body"
}

{
  "requestId": "5b7c3a1e-2f4d-4c8a-9e6b-1d2f3a4b5c6d",
  "timestamp": "2026-11-04T17:00:00.000Z",
  "path": "/customers/5d72f3b3-48a1-4188-a003-38e40be85548/verifications",
  "status": 500,
  "code": "UPSTREAM_SERVICE_ERROR",
  "message": "An unexpected error occurred."
}

Authorizations

Authorization

string

header

required

Bearer authentication header on the format Bearer <API_KEY>.

Headers

Idempotency-Key

string

Optional idempotency key: any string, a UUID v4 is recommended. Resending the same key with a different request body is a conflict. Cached responses include the header X-Idempotent-Cached: true. Keys expire after 24 hours.

Path Parameters

string<uuid>

required

Customer's unique identifier.

Body

application/json

associatedPartyIds

string<uuid>[]

Associated parties to verify again. Requires a previous verification. Only for BUSINESS customers, and for parties in RFI.

Minimum array length: 1

Associated party's unique identifier (UUID v4).

Example:

["483543f6-a9c4-4cc0-b808-1f1e01786ee2"]

Response

Verification successfully started.

string<uuid>

Verification's unique identifier. Read it with GET /customers/{id}/verifications/{verificationId}.

Example:

"f95b288c-e77a-4553-9f29-2ca0ea485eb2"

Customers

Accounts

Destinations

Exchange Rates

Transactions

Partner Fees

Autoconversion Rules