Introduction

Welcome to the Qombo API. Qombo helps payment service providers (PSPs) prevent fraud and misdirected payments through two modules:

  • VOP — Verification of Payee, the EPC scheme that confirms an IBAN belongs to the expected payee.
  • Sharing — fraud intelligence sharing through the Banque de France FNC-RF file.

You can subscribe to one or both. The API is RESTful: it accepts JSON request bodies, returns JSON responses, and follows standard HTTP status codes. This documentation covers the endpoints, request/response formats, authentication, and error handling for both modules. New here? Start with the Quick setup guide.

📘

Sandbox and live mode

You can experiment freely using our sandbox environment, which does not affect live data or interact with other PSPs or the Banque de France.

VOP — Verification of Payee

The VOP scheme, as defined by the European Payments Council (EPC), enhances the security and accuracy of SEPA Credit Transfers (Classic and Instant payments). It ensures that the intended recipient of a payment matches the account details provided by the payer, helping prevent fraud and errors before a transaction is completed.

Qombo follows the EPC guidelines, including the VOP Scheme Rulebook, the VOP Inter-PSP API Specifications, and the API Security Framework.

Requesting API

The Requesting API lets you verify payees before paying them. Qombo automatically routes each request to the appropriate PSP and returns the response along with additional fraud-prevention insights.

Responding API

In the VOP scheme, PSPs must also be able to respond to verification requests from other PSPs. The Responding API offers two implementation options, so you can choose what fits your setup. Either way, you only provide account-holder data — Qombo handles authentication, request validation, matching, and responses to requesting PSPs, in line with the EPC VOP Scheme Rulebook.

Cloud

Delegate the management and storage of your account holders to Qombo. You submit your data at your discretion, and Qombo acts as the responding PSP in the VOP ecosystem.

On-Demand

Qombo validates the request, then queries your system in real time for the account-holder details linked to an IBAN. You implement an API endpoint that returns this information, and Qombo handles the matching and the response to the requesting PSP.

Sharing — Banque de France FNC-RF

The Sharing module connects you to the Banque de France FNC-RF file — the national database of IBANs reported for fraud. It lets you go beyond name matching and act on shared fraud intelligence across the ecosystem:

  • Check an IBAN against fraud already reported to the FNC-RF.
  • Report fraudulent IBANs and qualify the accounts you manage.
  • Maintain your own private whitelist, blacklist, and watch list.
  • Consult the alerts aggregated from everyone's reports.
📘

Module activation

Each module is enabled per account. If an endpoint returns a "module not activated" error, contact Qombo to have the corresponding module switched on.