---
updatedAt: 2026-07-21T08:19:28.000Z
agentTools:
  projectIndex: https://developer.qombo.tech/llms.txt
---

# Introduction

Welcome to the Qombo API. Qombo helps payment service providers (PSPs) prevent fraud and misdirected payments through two modules:

* **VOP** — Verification of Payee, the EPC scheme that confirms an IBAN belongs to the expected payee.
* **Sharing** — fraud intelligence sharing through the Banque de France **FNC-RF** file.

You can subscribe to **one or both**. The API is RESTful: it accepts JSON request bodies, returns JSON responses, and follows standard HTTP status codes. This documentation covers the endpoints, request/response formats, authentication, and error handling for both modules. New here? Start with the [Quick setup](/reference/quick-setup) guide.

<Callout icon="📘" theme="info">
  ### Sandbox and live mode

  You can experiment freely using our sandbox environment, which does not affect live data or interact with other PSPs or the Banque de France.
</Callout>

# VOP — Verification of Payee

The VOP scheme, as defined by the European Payments Council (EPC), enhances the security and accuracy of SEPA Credit Transfers (Classic and Instant payments). It ensures that the intended recipient of a payment matches the account details provided by the payer, helping prevent fraud and errors before a transaction is completed.

Qombo follows the EPC guidelines, including the [VOP Scheme Rulebook](https://www.europeanpaymentscouncil.eu/sites/default/files/kb/file/2024-10/EPC218-23%20v1.0%202024%20Verification%20Of%20Payee%20Scheme%20Rulebook_0.pdf), the [VOP Inter-PSP API Specifications](https://www.europeanpaymentscouncil.eu/sites/default/files/kb/file/2024-11/EPC103-24%20v1.0.1%20VOP%20API%20Specifications_0.pdf), and the [API Security Framework](https://www.europeanpaymentscouncil.eu/sites/default/files/kb/file/2024-10/EPC164-22%20v2.0%20API%20Security%20Framework.pdf).

## Requesting API

The **Requesting API** lets you verify payees before paying them. Qombo automatically routes each request to the appropriate PSP and returns the response along with additional fraud-prevention insights.

<Cards columns={1}>
  <Card title="Documentation - Requesting" href="/reference/vop-verify">
    Learn how to setup the Requesting API.
  </Card>
</Cards>

# Responding API

In the VOP scheme, PSPs must also be able to respond to verification requests from other PSPs. The **Responding API** offers two implementation options, so you can choose what fits your setup. Either way, you only provide account-holder data — Qombo handles authentication, request validation, matching, and responses to requesting PSPs, in line with the EPC VOP Scheme Rulebook.

### Cloud

Delegate the management and storage of your account holders to Qombo. You submit your data at your discretion, and Qombo acts as the responding PSP in the VOP ecosystem.

<Image src="https://files.readme.io/80d6ce034161522cf1761b76b7e92e3dcaa1ffd2b357b00ae82c97e0cfb641a9-Schema_Cloud.png" align="center" />

<Cards columns={1}>
  <Card title="Documentation - Responding Cloud" href="/reference/vop-expose">
    Learn more about the Cloud option
  </Card>
</Cards>

### On-Demand

Qombo validates the request, then queries your system in real time for the account-holder details linked to an IBAN. You implement an API endpoint that returns this information, and Qombo handles the matching and the response to the requesting PSP.

<Image src="https://files.readme.io/a9613acadd02aac0d0b1f389591a9a16dac6c271a652db1a7ea350e1f53f5f78-Schema_On_Demand.png" align="center" />

<Cards columns={1}>
  <Card title="Documentation - Responding On-Demand" href="/reference/vop-on-demand">
    View API specifications for the On-Demand option.
  </Card>
</Cards>

# Sharing — Banque de France FNC-RF

The **Sharing** module connects you to the Banque de France **FNC-RF** file — the national database of IBANs reported for fraud. It lets you go beyond name matching and act on shared fraud intelligence across the ecosystem:

* **Check** an IBAN against fraud already reported to the FNC-RF.
* **Report** fraudulent IBANs and **qualify** the accounts you manage.
* **Maintain** your own private whitelist, blacklist, and watch list.
* **Consult** the alerts aggregated from everyone's reports.

<Cards columns={1}>
  <Card title="Documentation - Sharing" href="/reference/sharing-verify">
    Discover the Sharing endpoints.
  </Card>
</Cards>

<Callout icon="📘" theme="info">
  ### Module activation

  Each module is enabled per account. If an endpoint returns a "module not activated" error, contact Qombo to have the corresponding module switched on.
</Callout>

<br />