Skip to content
Banklink API

Verification

What a verified link profile is, why live hosted links need one, and how to get verified.

Live link requests and access requests need a verified link profile. The customer sees this profile on the hosted consent screen, so it has to be accurate.

The profile contains:

  • your name
  • your logo
  • your website domain
  • your privacy policy
  • a privacy contact

Until the profile is verified, live POST /link-requests and POST /access-requests calls return 403 org_not_verified.

In the dashboard, open Link Requests → Branding & verification. You can:

Verify in either of these ways:

  1. Prove you control your domain, with a DNS TXT record or a .well-known file, and disclose Banklink in your privacy policy.
  2. Request a manual review.

Live webhook and redirect URLs must use https on your verified domain. Sandbox requests are not gated and can use http://localhost. See the sandbox guide.