Fraud Scan

Identity Risk Scan

POST https://credit.farmsky.africa/v3/fraud/identity-risk

Composite fraud / identity-risk scan from a flexible payload.

identity:read

Headers

Authorization string required Defaults to Bearer {CLIENT_ID}:{CLIENT_SECRET}

Your API client id and secret, joined by a colon. Manage credentials in the Console.

x-api-key string optional Defaults to {API_KEY}

Alternative single-value secret key header (equivalent to X-Api-Secret). Never expose it in client-side code.

Content-Type string required Defaults to application/json

All request bodies are JSON unless the endpoint accepts multipart/form-data (file uploads).

Body Params

national_id string

Identity number to risk-scan.

phone_number string

Phone number to include in the scan.

email string

Email address to include in the scan.

API Request Examples

curl --request POST \
  --url https://credit.farmsky.africa/v3/fraud/identity-risk \
  --header 'Authorization: Bearer {CLIENT_ID}:{CLIENT_SECRET}' \
  --header 'x-api-key: {API_KEY}' \
  --header 'Content-Type: application/json' \
  --data '{"national_id":"31234567","phone_number":"+254712345678","email":"jane@example.com"}'

const res = await fetch('https://credit.farmsky.africa/v3/fraud/identity-risk', {
  method: 'POST',
  headers: {
    'Authorization': 'Bearer {CLIENT_ID}:{CLIENT_SECRET}',
    'x-api-key': '{API_KEY}',
    'Content-Type': 'application/json',
  },
  body: JSON.stringify({
    "national_id": "31234567",
    "phone_number": "+254712345678",
    "email": "jane@example.com"
  }),
});
const data = await res.json();
console.log(data);

import requests

url = "https://credit.farmsky.africa/v3/fraud/identity-risk"
headers = {
    "Authorization": "Bearer {CLIENT_ID}:{CLIENT_SECRET}",
    "x-api-key": "{API_KEY}",
    "Content-Type": "application/json",
}
payload = {
    "national_id": "31234567",
    "phone_number": "+254712345678",
    "email": "jane@example.com"
}
resp = requests.post(url, headers=headers, json=payload)
print(resp.json())

<?php
$ch = curl_init();
curl_setopt_array($ch, [
  CURLOPT_URL => "https://credit.farmsky.africa/v3/fraud/identity-risk",
  CURLOPT_RETURNTRANSFER => true,
  CURLOPT_CUSTOMREQUEST => "POST",
  CURLOPT_HTTPHEADER => [
    "Authorization: Bearer {CLIENT_ID}:{CLIENT_SECRET}",
    "x-api-key: {API_KEY}",
    "Content-Type: application/json",
  ],
  CURLOPT_POSTFIELDS => json_encode([
  "national_id" => "31234567",
  "phone_number" => "+254712345678",
  "email" => "jane@example.com"
]),
]);

$response = curl_exec($ch);
curl_close($ch);
echo $response;

import java.net.URI;
import java.net.http.*;

HttpClient client = HttpClient.newHttpClient();
String payload = "{\"national_id\":\"31234567\",\"phone_number\":\"+254712345678\",\"email\":\"jane@example.com\"}";
HttpRequest request = HttpRequest.newBuilder()
    .uri(URI.create("https://credit.farmsky.africa/v3/fraud/identity-risk"))
    .header("Authorization", "Bearer {CLIENT_ID}:{CLIENT_SECRET}")
    .header("x-api-key", "{API_KEY}")
    .header("Content-Type", "application/json")
    .method("POST", HttpRequest.BodyPublishers.ofString(payload))
    .build();

HttpResponse<String> response = client.send(request, HttpResponse.BodyHandlers.ofString());
System.out.println(response.body());

package main

import (
	"fmt"
	"io"
	"net/http"
	"strings"
)

func main() {
	payload := strings.NewReader(`{"national_id":"31234567","phone_number":"+254712345678","email":"jane@example.com"}`)
	req, _ := http.NewRequest("POST", "https://credit.farmsky.africa/v3/fraud/identity-risk", payload)
	req.Header.Add("Authorization", "Bearer {CLIENT_ID}:{CLIENT_SECRET}")
	req.Header.Add("x-api-key", "{API_KEY}")
	req.Header.Add("Content-Type", "application/json")

	res, _ := http.DefaultClient.Do(req)
	defer res.Body.Close()
	body, _ := io.ReadAll(res.Body)
	fmt.Println(string(body))
}

RESPONSE

{
  "request_id": "req_8f2c1a9b7d3e4f60",
  "live": true,
  "ok": true,
  "response_code": "00",
  "status": "VERIFIED",
  "found": true,
  "soft_error": false,
  "async_pending": false,
  "reference": "VR-D4ACE26C68A3",
  "message": "Verification successful.",
  "data": {
    "risk_score": 12,
    "risk_band": "LOW",
    "signals": []
  },
  "provider": "Farmsky Verify"
}

{
  "error": "invalid_request",
  "message": "a fraud-check payload is required"
}

{
  "error": "unauthorized",
  "message": "API credentials required. Send Authorization: Bearer <client_id>:<secret>."
}