Account Opening

post

https://api.signifyd.com/v3/accounts/events/openings

The Account Opening API is designed to detect and prevent fake accounts, bots, and synthetic identity abuse before an account is created. It analyzes various attributes including behavioral, device, identity, and velocity signals in real time to assess the trustworthiness of a signup attempt. The API returns a recommended action, enabling businesses to protect their platform from the first user interaction.

Use this endpoint at the moment a user submits your signup form, but before creating the account in your system. By incorporating this check into your signup flow, you can intercept high-risk events and enforce tailored interventions like additional verification or outright blocking.

Recent Requests

Time	Status	User Agent
Retrieving recent requests…

Loading…

Body Params

openingId

string

required

Unique identifier for this opening event.

username

string

required

The username that will be associated with the account. Please supply this even if it is the same as the email.

fullName

string

needed The full name of the user.

accountId

string

needed Your globally unique identifier for registered user accounts. Use this as the persistent user identifier, consistent across Account Integrity APIs.

string

required

The email address that will be associated with the account.

emailVerified

boolean

True if the user successfully completed an email verification (e.g. OTP). False if verification was not performed.

phone

string

The phone number that will be associated with the account.

phoneVerified

boolean

True if the user successfully completed a phone verification (e.g. OTP). False if verification was not performed.

createdAt

date-time

required

The date and time of when the account opening was requested.

Formatted as yyyy-MM-dd'T'HH:mm:ssZ per ISO 8601. See the dates section of the Introduction for more information about date formats.

signupMethod

string

enum

required

needed Method used for authentication.

PASSWORD - User provided a password for this login attempt.
PASSKEY - User provided a passkey for this login attempt.
GOOGLE - User logged in with a Google account.
FACEBOOK - User logged in with a Facebook account.
APPLE - User logged in with an Apple account.
LINKEDIN - User logged in with a LinkedIn account.
X - User logged in with an X account.
EMAIL_OTP - User logged in with an email one time password.
PHONE_OTP - User logged in with a phone one time password.
OTHER - User logged in with a different method from the ones listed above.

accountType

string

enum

required

Indicating the role of the account; one of BUYER, SELLER, BUSINESS, OTHER.

Allowed:

device

object

needed Device & fingerprint context.

eventChannel

string

enum

needed The channel through which the account integrity event was initiated.

WEB - Event originated from a web browser.
MOBILE_APP - Event originated from a native mobile application.

Allowed:

200Response if an Account Opening event has already been created in the Signifyd system with the same accountOpeningId. No updates will occur and we will return the existing decision.

201Response if the request resulted in a new Account Opening event in the Signifyd system.

400Response if there was a problem with the request, such as when a required field is missing or otherwise fails validation.

401Response if the provided authentication credentials are not known or do not match what is on file for the specified user.

403Response if the authenticated user does not have permission to perform the requested action.

429Response if the rate limit has been exceeded.

500Response if an unexplained error occurs on the server.