Bank Account Verification APIs for Stablecoin Payouts

Bank account verification for stablecoin payouts depends on the rail. The UK and euro-area schemes now match the payee's name against the account, Pix and UPI show the name before the payment, and ACH and Fedwire have no name check at all. On those two, and on SPEI, where we found none, the check is yours to add, with a verification API or a simpler rule: pay out only to an account the user has already paid in from. In the US, Certos and LSEG check an account without a bank login and Plaid and Stripe verify it through one, while SurePay and iPiD sell name checks elsewhere.

It matters because an off-ramp receives stablecoins, which can't be pulled back, and pays the proceeds to a bank account the user names. If that account isn't the user's, the payout may not come back either: Stripe's payout docs warn that funds sent to the wrong bank account might not be recoverable.

Account Checks by Payout Rail

These are the rails stablecoin card issuers list for payouts, and our comparison of stablecoin virtual accounts shows which issuer offers each. For each rail, here is whether the scheme checks the payee's name before money moves, and what else you can use:

RailMarketName Check Before PaymentOther Checks
RailACHMarketUSName Check Before PaymentNoneOther ChecksBank login, micro-deposits, database checks
RailFedwireMarketUSName Check Before PaymentNoneOther ChecksAs for ACH; a wire is final once processed
RailSEPA and SEPA InstantMarketEuropeName Check Before PaymentVerification of Payee (VoP): euro area since 9 Oct 2025, non-euro EU by 9 Jul 2027Other ChecksBank login (Tink, TrueLayer); name checks (SurePay, iPiD)
RailFaster PaymentsMarketUKName Check Before PaymentConfirmation of Payee (CoP)Other ChecksBank login (TrueLayer); name checks (SurePay, iPiD)
RailPixMarketBrazilName Check Before PaymentKey lookup shows the name, part of the CPF, and the bankOther ChecksNames on new or changed keys checked against tax records since 1 Jul 2025
RailUPI and IMPSMarketIndiaName Check Before PaymentName shown before transfer; NEFT and RTGS too since Apr 2025Other ChecksPenny drop APIs (Cashfree, RazorpayX)
RailSPEIMarketMexicoName Check Before PaymentNone we could confirmOther ChecksCLABE control digit (format only)
RailFAST and MEPSMarketSingaporeName Check Before PaymentPayNow shows the registered name; account-number FAST treats the name as reference onlyOther ChecksCross-border name checks (iPiD)
RailSWIFTMarketCross-borderName Check Before PaymentNone; Swift Payment Pre-validation between participating banksOther ChecksiPiD; LSEG Global Account Verification

The euro-area check comes from the Instant Payments Regulation, which requires payment providers to offer payee verification on euro credit transfers.

A scheme check only helps if someone reads the result. CoP and VoP return a match, a close match with the name the bank holds, no match, or no answer, and a close match or no match on a first payout is the moment to stop and ask the user.

Which Checks Ramps and Issuers Run

CoP and VoP are run by the payer's payment provider, which on a stablecoin payout is usually your ramp or issuer. Their developer docs differ on what they check and when:

ProviderWhat It Checks Before a PayoutWhen It Runs
ProviderBridgeWhat It Checks Before a PayoutVoP on EUR IBAN and UK accounts: match, close match with the bank's name, no match, or error. US accounts can be linked through Plaid LinkWhen It RunsWhen the platform calls the verify endpoint
ProviderStripe Global PayoutsWhat It Checks Before a PayoutCoP on GBP payouts from a UK financial account to a UK account; a payout without a match waits for your confirmationWhen It RunsAutomatically, when the payout is created
ProviderMoonPay EnterpriseWhat It Checks Before a PayoutEach payout account is registered first, and registration can fail on an invalid IBAN or routing number or a mismatched recipient name. Accounts are marked first- or third-partyWhen It RunsAt registration; the docs say there's no separate recipient verification step
ProviderWirexWhat It Checks Before a PayoutSeparate permissions for payouts to the user's own accounts and to third parties. On SEPA and ACH, a recipient whose name equals the user's verified name counts as first partyWhen It RunsAt the payout estimate, against the saved recipient's name
ProviderStraitsXWhat It Checks Before a PayoutFirst-party payouts go only to a verified account: verified by a deposit from it, by bank account proof within one working day (Singapore accounts), or by a match with the KYC name (SWIFT accounts)When It RunsWhen the user deposits from the account, or when the platform adds it by API
ProviderRain, InterlaceWhat It Checks Before a PayoutNot described in docs we could accessWhen It RunsAsk them

StraitsX's deposit route works on any rail: pay out only to an account the user has already paid in from. TrueLayer's Verified Payouts do the same over Faster Payments and SEPA Instant, and a ramp that gives each user a virtual bank account sees which accounts send money in. A recipient name matched against your own KYC record shows whose account the user says it is; only the bank's data shows whose it is.

Where the docs are silent, as with Rain (ACH, Fedwire, and SPEI) and Interlace (ACH, SEPA, and SWIFT), ask three things per corridor. Does the provider run the scheme check, does it return the result to you, and does it hold a payout that doesn't match? For the providers and rails in each region, see our payout comparisons for the US, Europe, Asia, Latin America, Africa, and the Middle East.

How Each Verification Method Works

Five methods cover the gaps, and only some of them tell you who owns the account:

MethodWhat It ConfirmsUser EffortSpeedWhere It Works
MethodBank login (open banking)What It ConfirmsAccount details from the bank; owner name with an ownership productUser EffortLogs in to their bankSpeedSecondsWhere It WorksUS (aggregators); UK and EU (PSD2)
MethodMicro-depositsWhat It ConfirmsThe user can see the accountUser EffortEnters a code or amountsSpeed1-2 business days; seconds over RTP or FedNowWhere It WorksUS
MethodDatabase or network checkWhat It ConfirmsOpen or closed status; ownership matchUser EffortNoneSpeedReal timeWhere It WorksUS
MethodScheme name check or penny dropWhat It ConfirmsThe name matches the account, or the bank returns itUser EffortNoneSpeedSecondsWhere It WorksUK, SEPA, Brazil, India
MethodFormat validationWhat It ConfirmsThe number is well formedUser EffortNoneSpeedInstantWhere It WorksEverywhere
  • Bank login. The friction is the cost: some users won't share a banking login.
  • Database checks. Coverage depends on which banks contribute data.
  • Scheme name checks. Only authorised payment service providers can join CoP, directly or through aggregators such as Banfico, iPiD, and SurePay. A platform that isn't one relies on its payout provider or buys name checks from SurePay or iPiD. In India, payout APIs use penny drop: a small credit, usually ₹1, whose response carries the holder's name.
  • Format validation. IBAN check digits, routing number checks, and UK modulus checking catch typos, but a fraudster's real IBAN passes.

Verification APIs for the Gaps

ProviderMethodMarketsReturnsBest For
ProviderPlaidMethodBank login, micro-deposits, databaseMarketsLogin: US, Canada, UK, Europe; other flows USReturnsAccount numbers; ownership with Identity MatchBest ForEvery US fallback in one integration
ProviderStripe Financial ConnectionsMethodBank login, micro-deposit fallbackMarketsUS and Canadian accountsReturnsAccount details; owner names and addresses, except for micro-deposit accountsBest ForPlatforms already on Stripe for ACH or payouts
ProviderCertos (Early Warning)MethodBank-contributed dataMarketsUSReturnsOpen, closed, or overdrawn; ownershipBest ForUS payouts where a bank login would cost conversions
ProviderLSEG Risk Intelligence (formerly GIACT)MethodAccount data checksMarketsUS; cross-border in markets LSEG doesn't listReturnsValid, open, and ACH-ready; ownershipBest ForNo-login US checks plus some cross-border coverage
ProviderTrueLayerMethodBank login; CoP in the UKMarketsUK and EUReturnsName match; match to the deposit accountBest ForPaying withdrawals back to the account that funded the user
ProviderTink (Visa)MethodBank loginMarketsEuropeReturnsOwner against account number or IBANBest ForProof of ownership at onboarding
ProviderSurePayMethodScheme name check (CoP, VoP)MarketsUK and EUReturnsMatch, close match, or no matchBest ForName checks for platforms that aren't payment providers
ProvideriPiDMethodCross-border payee verificationMarketsMany countriesReturnsName and account matchBest ForPayouts to many countries; ask for match rates per corridor
ProviderCashfreeMethodPenny drop, pennyless, UPIMarketsIndiaReturnsStatus, holder name, match scoreBest ForPayouts to Indian bank accounts or UPI IDs

Of these, only Stripe (per verification, on its pricing page) and Cashfree (₹3 per check, pay-as-you-go) publish prices.

Nacha Rules for ACH Account Validation

Nacha's rules reach both sides of an ACH ramp. If users fund on-ramps by ACH debit, the WEB debit rule, in force since 19 March 2021, requires the originator to validate the account on first use and whenever the account number changes. The minimum is that the account is open and can accept ACH entries; ownership isn't required. Nacha doesn't mandate a method: prenotes, micro-transactions, validation services, and API-based tools can all qualify, and micro-deposits must carry the description ACCTVERIFY.

Payouts are ACH credits, and the 2026 fraud-monitoring rules cover them. Since 20 March 2026, all ODFIs, and non-consumer originators, third-party service providers, and third-party senders that originated 6 million or more ACH entries in 2023, have needed risk-based processes to identify entries that are unauthorised or authorised under false pretences. Receiving banks that took in 10 million or more entries in 2023 have had to monitor incoming credits the same way. Everyone else followed in Phase 2 on 19 June 2026, a federal holiday, so Nacha expects compliance by Monday 22 June.

How to Verify a Payout Account

In the US, run a no-login check (Certos or LSEG) on every new payout account, and add a bank login (Plaid or Stripe) where you need proof of ownership, such as before a first large off-ramp. Whoever originates your ACH payouts now needs a fraud-monitoring process, and checking where the money goes is the obvious start. In the UK and EU, get the CoP or VoP result back from your provider, and buy name checks from SurePay or iPiD if it can't give you one. Elsewhere, combine the local checks in the rail table (Pix key lookups, penny drop in India, PayNow names in Singapore) with iPiD or LSEG.

Frequently Asked Questions