Account Auth

Account Authentication
Quovo’s account authentication verifies account ownership, account and routing numbers, and account balances (returned fields vary by country). Our account authentication suite is unique in the way it combines instant account authentication (pulling the relevant data elements from a sync) and autoverified microdeposits (leveraging our aggregation capabilities to streamline the microdeposits process).
  • Instant account authentication
  • Autoverified microdeposits
  • Traditional microdeposits
Instant Account Authentication
Instant Account Authentication is when you want Quovo to retrieve specific data fields from a user’s checking or savings account. To streamline this process, we’ve created a type of quick sync that allows for faster retrieval of these data fields.  These syncs are specifically run on-demand and can be excluded from the nightly aggregation process (recall Quovo syncs all eligible connections nightly to retrieve the latest data). Instant Auth is not available in all markets and the fields returned will vary by country. See below for a breakdown of Instant Auth in the US and international markets. Not all institutions make the below fields available. Consequently, Instant Auth is available only for institutions with an   auth_type   of “instant.”
United States
The data fields Quovo will pull for eligible US accounts include the below. For a complete breakdown of our response fields for the /auth endpoint, check out our API Reference docs:
  •   account_number  
  •   account_name  
  •   routing   number
  •   available_balance  
  •   present_balance  
  •   owner_details   (including the account   owners_name  and   address  ).
United Kingdom
Quovo will retrieve the below fields for UK accounts that are eligible for Instant Auth:
  •   IBAN  
  •   sort_code  
  •   account_name  
  •   available_balance  
  •   present_balance  
  •   owner_details  
Quovo will retrieve the below fields for Canadian accounts that are eligible for Instant Auth:
  •   account_number  
  •   transit_number  
  •   canadian_institution_number  
  •   account_name  
  •   present_balance  
  •   available_balance  
  •   owner_details  

Auth Syncs

Once you find an institution on which you’d like to initiate an auth sync, you should go through the quick sync workflow. Because the use case for account authentication is often one-time, auth syncs can run on-demand only and not update nightly. To flag a   connection   for auth syncs only, pass the   auto_updates   flag through as false with your POST request to the /connections endpoint. 
curl -X POST \
    -H "Authorization: Bearer a724809d37d0a21b7e9257f45cee416f5aec61993ab4b09e" \
    -H "Content-Type: application/json" \
    -d '{"auto_updates": false, "institution_id": 21700}' \

Instant Auth and Aggregation Together

For some use cases, you may want to collect the information from an auth sync, but you also want to continue with ongoing full aggregation syncs. To do this, complete the full sync workflow after you complete the quick sync workflow. The account will then update nightly and retrieve aggregation data.
Note: If you use Quovo Connect to add accounts and want to use instant auth, there are some parameters you can set to optimize your user experience for auth connections.

Getting Auth Info for an Account

Once an auth quick sync has completed successfully, you can retrieve the account’s authentication information through a GET call to the /auth endpoint:
 curl -X GET \
    -H "Authorization: Bearer a724809d37d0a21b7e9257f45cee416f5aec61993ab4b09e" \
This will return the auth information for a specific account. The body of this response returns   balance  ,   account_number  ,   account_name  , owner   details  ,   routing  , and   wire_routing  , as well as standard identification and typing fields for Quovo accounts.
Note: The account_name will be returned for all account types, whereas the account_number will only be returned for “checking” and “savings” account types. If you would like to verify account ownership information, or transfer funds, we recommend you use the account_number field.
In cases where some of the instant auth fields above are not available, Quovo will return as much data as possible.
An account’s authentication information contains sensitive data, and Quovo follows best practices for retrieving and storing this information. 
Note: Auth syncs are always run on connections, but auth data is always retrieved at the account level.