Confirmation of Funds (COF)

What is COF?

The confirmation of funds APIs, which follow the oAuth2 framework, will enable the application to initiate, check available funds within a customer’s online payment account, only with their explicit and authorised consent.

The process should begin by your application obtaining an explicit consent for checking on available funds from a customer and then requesting the customer to authorise the consent using their KBC online banking/mobile banking credentials. Once consent has been authorised, your application can request the confirmation of funds.

The APIs also enable your application to check the status of the consent authorisation.

Who is it for?

• Third party payment service providers
• Financial services firms

Documentation

KBC Ireland has provided the following endpoints to enable the initiation and execution of a payment from the application.
 

COF
Endpoints Description
POST /funds-confirmation-consents Create a consent record.  
GET /funds-confirmation-consents/{ConsentId} Retrieve the status of the consent record.
DELETE /funds-confirmation-consents/{ConsentId} Delete the consent record.
POST /funds-confirmations Check the available funds on the accounts.

These endpoints comply with the Confirmation of Funds API Specification of the Open Banking standards. Detailed documentation of our implementation is available post registration. 

A general outline for the flow can be seen below (source: Open Banking): 

Additional Information

KBC Ireland will support both web redirection and mobile application redirection for consent authorisation.  The TPP application on a mobile device will be able to deep link into the KBC Ireland mobile application. In the event the customer does not have the mobile application installed on their device, they can expect that the TPP application will automatically redirect the customer to KBC Ireland online banking website,  using the web-redirect method.

Roadmap

March 14, 2019: APIs available on the Sandbox. Registrations open to all to get access to Sandbox.