Add Bank Account

curl --request POST \
  --url https://api.saber.money/api/v2/user/bank_account \
  --header 'Content-Type: application/json' \
  --header 'X-Api-Key: <x-api-key>' \
  --header 'X-Request-Id: <x-request-id>' \
  --header 'X-Signature: <x-signature>' \
  --header 'X-Timestamp: <x-timestamp>' \
  --header 'X-User-Id: <x-user-id>' \
  --data '
{
  "account_number": "12345678901234",
  "account_holder_name": "John Doe",
  "bank_code": "HDFC0001234",
  "account_type": "SAVINGS",
  "bank_name": "HDFC Bank",
  "country": "IND"
}
'

import requests

url = "https://api.saber.money/api/v2/user/bank_account"

payload = {
    "account_number": "12345678901234",
    "account_holder_name": "John Doe",
    "bank_code": "HDFC0001234",
    "account_type": "SAVINGS",
    "bank_name": "HDFC Bank",
    "country": "IND"
}
headers = {
    "X-Api-Key": "<x-api-key>",
    "X-Signature": "<x-signature>",
    "X-Timestamp": "<x-timestamp>",
    "X-Request-Id": "<x-request-id>",
    "X-User-Id": "<x-user-id>",
    "Content-Type": "application/json"
}

response = requests.post(url, json=payload, headers=headers)

print(response.text)

const options = {
  method: 'POST',
  headers: {
    'X-Api-Key': '<x-api-key>',
    'X-Signature': '<x-signature>',
    'X-Timestamp': '<x-timestamp>',
    'X-Request-Id': '<x-request-id>',
    'X-User-Id': '<x-user-id>',
    'Content-Type': 'application/json'
  },
  body: JSON.stringify({
    account_number: '12345678901234',
    account_holder_name: 'John Doe',
    bank_code: 'HDFC0001234',
    account_type: 'SAVINGS',
    bank_name: 'HDFC Bank',
    country: 'IND'
  })
};

fetch('https://api.saber.money/api/v2/user/bank_account', options)
  .then(res => res.json())
  .then(res => console.log(res))
  .catch(err => console.error(err));

<?php

$curl = curl_init();

curl_setopt_array($curl, [
  CURLOPT_URL => "https://api.saber.money/api/v2/user/bank_account",
  CURLOPT_RETURNTRANSFER => true,
  CURLOPT_ENCODING => "",
  CURLOPT_MAXREDIRS => 10,
  CURLOPT_TIMEOUT => 30,
  CURLOPT_HTTP_VERSION => CURL_HTTP_VERSION_1_1,
  CURLOPT_CUSTOMREQUEST => "POST",
  CURLOPT_POSTFIELDS => json_encode([
    'account_number' => '12345678901234',
    'account_holder_name' => 'John Doe',
    'bank_code' => 'HDFC0001234',
    'account_type' => 'SAVINGS',
    'bank_name' => 'HDFC Bank',
    'country' => 'IND'
  ]),
  CURLOPT_HTTPHEADER => [
    "Content-Type: application/json",
    "X-Api-Key: <x-api-key>",
    "X-Request-Id: <x-request-id>",
    "X-Signature: <x-signature>",
    "X-Timestamp: <x-timestamp>",
    "X-User-Id: <x-user-id>"
  ],
]);

$response = curl_exec($curl);
$err = curl_error($curl);

curl_close($curl);

if ($err) {
  echo "cURL Error #:" . $err;
} else {
  echo $response;
}

package main

import (
	"fmt"
	"strings"
	"net/http"
	"io"
)

func main() {

	url := "https://api.saber.money/api/v2/user/bank_account"

	payload := strings.NewReader("{\n  \"account_number\": \"12345678901234\",\n  \"account_holder_name\": \"John Doe\",\n  \"bank_code\": \"HDFC0001234\",\n  \"account_type\": \"SAVINGS\",\n  \"bank_name\": \"HDFC Bank\",\n  \"country\": \"IND\"\n}")

	req, _ := http.NewRequest("POST", url, payload)

	req.Header.Add("X-Api-Key", "<x-api-key>")
	req.Header.Add("X-Signature", "<x-signature>")
	req.Header.Add("X-Timestamp", "<x-timestamp>")
	req.Header.Add("X-Request-Id", "<x-request-id>")
	req.Header.Add("X-User-Id", "<x-user-id>")
	req.Header.Add("Content-Type", "application/json")

	res, _ := http.DefaultClient.Do(req)

	defer res.Body.Close()
	body, _ := io.ReadAll(res.Body)

	fmt.Println(string(body))

}

HttpResponse<String> response = Unirest.post("https://api.saber.money/api/v2/user/bank_account")
  .header("X-Api-Key", "<x-api-key>")
  .header("X-Signature", "<x-signature>")
  .header("X-Timestamp", "<x-timestamp>")
  .header("X-Request-Id", "<x-request-id>")
  .header("X-User-Id", "<x-user-id>")
  .header("Content-Type", "application/json")
  .body("{\n  \"account_number\": \"12345678901234\",\n  \"account_holder_name\": \"John Doe\",\n  \"bank_code\": \"HDFC0001234\",\n  \"account_type\": \"SAVINGS\",\n  \"bank_name\": \"HDFC Bank\",\n  \"country\": \"IND\"\n}")
  .asString();

require 'uri'
require 'net/http'

url = URI("https://api.saber.money/api/v2/user/bank_account")

http = Net::HTTP.new(url.host, url.port)
http.use_ssl = true

request = Net::HTTP::Post.new(url)
request["X-Api-Key"] = '<x-api-key>'
request["X-Signature"] = '<x-signature>'
request["X-Timestamp"] = '<x-timestamp>'
request["X-Request-Id"] = '<x-request-id>'
request["X-User-Id"] = '<x-user-id>'
request["Content-Type"] = 'application/json'
request.body = "{\n  \"account_number\": \"12345678901234\",\n  \"account_holder_name\": \"John Doe\",\n  \"bank_code\": \"HDFC0001234\",\n  \"account_type\": \"SAVINGS\",\n  \"bank_name\": \"HDFC Bank\",\n  \"country\": \"IND\"\n}"

response = http.request(request)
puts response.read_body

{
  "success": true,
  "data": {
    "bank_id": "550e8400-e29b-41d4-a716-446655440000",
    "account_number": "12XXXXX1234",
    "ifsc_code": "HDFC0001234",
    "account_holder_name": "John Doe",
    "account_type": "SAVINGS",
    "name": "HDFC Bank",
    "iban": null,
    "bic": null,
    "validation_status": "PENDING",
    "routing_type": "IFSC",
    "created_at": "2024-01-01T00:00:00Z",
    "updated_at": "2024-01-01T00:00:00Z",
    "message": "",
    "country": "IND",
    "is_nre": false
  }
}

{
  "success": false,
  "errors": [
    {
      "code": 304001,
      "text": "invalid country code"
    }
  ]
}

{
  "success": false,
  "errors": [
    {
      "code": 304001,
      "text": "invalid country code"
    }
  ]
}

{
  "success": false,
  "errors": [
    {
      "code": 304001,
      "text": "invalid country code"
    }
  ]
}

{
  "success": false,
  "errors": [
    {
      "code": 304001,
      "text": "invalid country code"
    }
  ]
}

Bank Account Operations

Add Bank Account

Add a bank account for a user. Supported for all jurisdictions.

Country	Required Fields
India (`IND`)	`account_number`, `bank_code` (IFSC format)
UK (`GBR`)	`account_holder_name`, `account_number` (max 8 digits), `bank_code` (sort code), `account_type`, `bank_name`
UAE (`ARE`)	`account_holder_name`, `account_type`, `bank_name`, `bank_iban` (23 chars, starts with `AE`)
Europe (EUR countries)	`account_holder_name`, `bank_iban`, `account_type`, `bank_name`
Philippines (`PHL`)	`account_number` (no spaces), `account_holder_name`, `bank_code`

For India, bank accounts go to PENDING and are validated asynchronously via penny-drop (a ₹1 deposit to confirm the account and match the account holder name against the user’s KYC legal_name). For the Philippines, accounts are approved instantly with no penny-drop step. Use Get Bank Codes for Philippines to look up valid bank_code values before calling this endpoint.

Response field values

Field	Possible Values
`account_type`	`SAVINGS`, `CURRENT`, `JOINT`, `CHECKING`
`validation_status`	`UNINITIATED`, `PENDING`, `APPROVED`, `DELETED`, `DELETED_BY_USER`, `REJECTED`, `NAME_REJECTED`, `VERIFICATION_REQUIRED`
`routing_type`	`IFSC`, `ROUTING_NUMBER`, `SORT_CODE`, `BANK_CODE`, `IBAN`, `null`
`is_nre`	`true` if this is an Indian NRE (Non-Resident External) account — set automatically during penny-drop validation, not client-settable. See INR Payouts to NRE Bank Accounts.
`country`	ISO alpha-3 country code. Omitted if not resolved.

A user can have a limited number of APPROVED bank accounts at a time (error 304012 when exceeded) — the exact limit is configured per client/country; contact Saber to confirm yours.

POST

api

user

bank_account

Add Bank Account

curl --request POST \
  --url https://api.saber.money/api/v2/user/bank_account \
  --header 'Content-Type: application/json' \
  --header 'X-Api-Key: <x-api-key>' \
  --header 'X-Request-Id: <x-request-id>' \
  --header 'X-Signature: <x-signature>' \
  --header 'X-Timestamp: <x-timestamp>' \
  --header 'X-User-Id: <x-user-id>' \
  --data '
{
  "account_number": "12345678901234",
  "account_holder_name": "John Doe",
  "bank_code": "HDFC0001234",
  "account_type": "SAVINGS",
  "bank_name": "HDFC Bank",
  "country": "IND"
}
'

import requests

url = "https://api.saber.money/api/v2/user/bank_account"

payload = {
    "account_number": "12345678901234",
    "account_holder_name": "John Doe",
    "bank_code": "HDFC0001234",
    "account_type": "SAVINGS",
    "bank_name": "HDFC Bank",
    "country": "IND"
}
headers = {
    "X-Api-Key": "<x-api-key>",
    "X-Signature": "<x-signature>",
    "X-Timestamp": "<x-timestamp>",
    "X-Request-Id": "<x-request-id>",
    "X-User-Id": "<x-user-id>",
    "Content-Type": "application/json"
}

response = requests.post(url, json=payload, headers=headers)

print(response.text)

const options = {
  method: 'POST',
  headers: {
    'X-Api-Key': '<x-api-key>',
    'X-Signature': '<x-signature>',
    'X-Timestamp': '<x-timestamp>',
    'X-Request-Id': '<x-request-id>',
    'X-User-Id': '<x-user-id>',
    'Content-Type': 'application/json'
  },
  body: JSON.stringify({
    account_number: '12345678901234',
    account_holder_name: 'John Doe',
    bank_code: 'HDFC0001234',
    account_type: 'SAVINGS',
    bank_name: 'HDFC Bank',
    country: 'IND'
  })
};

fetch('https://api.saber.money/api/v2/user/bank_account', options)
  .then(res => res.json())
  .then(res => console.log(res))
  .catch(err => console.error(err));

<?php

$curl = curl_init();

curl_setopt_array($curl, [
  CURLOPT_URL => "https://api.saber.money/api/v2/user/bank_account",
  CURLOPT_RETURNTRANSFER => true,
  CURLOPT_ENCODING => "",
  CURLOPT_MAXREDIRS => 10,
  CURLOPT_TIMEOUT => 30,
  CURLOPT_HTTP_VERSION => CURL_HTTP_VERSION_1_1,
  CURLOPT_CUSTOMREQUEST => "POST",
  CURLOPT_POSTFIELDS => json_encode([
    'account_number' => '12345678901234',
    'account_holder_name' => 'John Doe',
    'bank_code' => 'HDFC0001234',
    'account_type' => 'SAVINGS',
    'bank_name' => 'HDFC Bank',
    'country' => 'IND'
  ]),
  CURLOPT_HTTPHEADER => [
    "Content-Type: application/json",
    "X-Api-Key: <x-api-key>",
    "X-Request-Id: <x-request-id>",
    "X-Signature: <x-signature>",
    "X-Timestamp: <x-timestamp>",
    "X-User-Id: <x-user-id>"
  ],
]);

$response = curl_exec($curl);
$err = curl_error($curl);

curl_close($curl);

if ($err) {
  echo "cURL Error #:" . $err;
} else {
  echo $response;
}

package main

import (
	"fmt"
	"strings"
	"net/http"
	"io"
)

func main() {

	url := "https://api.saber.money/api/v2/user/bank_account"

	payload := strings.NewReader("{\n  \"account_number\": \"12345678901234\",\n  \"account_holder_name\": \"John Doe\",\n  \"bank_code\": \"HDFC0001234\",\n  \"account_type\": \"SAVINGS\",\n  \"bank_name\": \"HDFC Bank\",\n  \"country\": \"IND\"\n}")

	req, _ := http.NewRequest("POST", url, payload)

	req.Header.Add("X-Api-Key", "<x-api-key>")
	req.Header.Add("X-Signature", "<x-signature>")
	req.Header.Add("X-Timestamp", "<x-timestamp>")
	req.Header.Add("X-Request-Id", "<x-request-id>")
	req.Header.Add("X-User-Id", "<x-user-id>")
	req.Header.Add("Content-Type", "application/json")

	res, _ := http.DefaultClient.Do(req)

	defer res.Body.Close()
	body, _ := io.ReadAll(res.Body)

	fmt.Println(string(body))

}

HttpResponse<String> response = Unirest.post("https://api.saber.money/api/v2/user/bank_account")
  .header("X-Api-Key", "<x-api-key>")
  .header("X-Signature", "<x-signature>")
  .header("X-Timestamp", "<x-timestamp>")
  .header("X-Request-Id", "<x-request-id>")
  .header("X-User-Id", "<x-user-id>")
  .header("Content-Type", "application/json")
  .body("{\n  \"account_number\": \"12345678901234\",\n  \"account_holder_name\": \"John Doe\",\n  \"bank_code\": \"HDFC0001234\",\n  \"account_type\": \"SAVINGS\",\n  \"bank_name\": \"HDFC Bank\",\n  \"country\": \"IND\"\n}")
  .asString();

require 'uri'
require 'net/http'

url = URI("https://api.saber.money/api/v2/user/bank_account")

http = Net::HTTP.new(url.host, url.port)
http.use_ssl = true

request = Net::HTTP::Post.new(url)
request["X-Api-Key"] = '<x-api-key>'
request["X-Signature"] = '<x-signature>'
request["X-Timestamp"] = '<x-timestamp>'
request["X-Request-Id"] = '<x-request-id>'
request["X-User-Id"] = '<x-user-id>'
request["Content-Type"] = 'application/json'
request.body = "{\n  \"account_number\": \"12345678901234\",\n  \"account_holder_name\": \"John Doe\",\n  \"bank_code\": \"HDFC0001234\",\n  \"account_type\": \"SAVINGS\",\n  \"bank_name\": \"HDFC Bank\",\n  \"country\": \"IND\"\n}"

response = http.request(request)
puts response.read_body

{
  "success": true,
  "data": {
    "bank_id": "550e8400-e29b-41d4-a716-446655440000",
    "account_number": "12XXXXX1234",
    "ifsc_code": "HDFC0001234",
    "account_holder_name": "John Doe",
    "account_type": "SAVINGS",
    "name": "HDFC Bank",
    "iban": null,
    "bic": null,
    "validation_status": "PENDING",
    "routing_type": "IFSC",
    "created_at": "2024-01-01T00:00:00Z",
    "updated_at": "2024-01-01T00:00:00Z",
    "message": "",
    "country": "IND",
    "is_nre": false
  }
}

{
  "success": false,
  "errors": [
    {
      "code": 304001,
      "text": "invalid country code"
    }
  ]
}

{
  "success": false,
  "errors": [
    {
      "code": 304001,
      "text": "invalid country code"
    }
  ]
}

{
  "success": false,
  "errors": [
    {
      "code": 304001,
      "text": "invalid country code"
    }
  ]
}

{
  "success": false,
  "errors": [
    {
      "code": 304001,
      "text": "invalid country code"
    }
  ]
}

Headers

X-Api-Key

string

required

Your API key (configured in credentials)

X-Signature

string

required

HMAC-SHA256 signature (auto-generated) To test manually: HMAC-SHA256 of apiKey + timestamp (or apiKey + timestamp + userId when X-User-Id is required), keyed with your API secret. The HMAC Generator flow computes this for you.

X-Timestamp

string

required

Unix timestamp in seconds (auto-generated) Unix seconds, e.g. Math.floor(Date.now() / 1000). Must match the timestamp used in the X-Signature computation.

X-Request-Id

string

required

Unique request identifier (auto-generated) Any unique string per request, e.g. a UUID.

X-User-Id

string

required

User UUID (set above)

Body

application/json

country

string

required

ISO 3166-1 alpha-3 country code (e.g. IND, GBR, ARE).

account_number

string

Bank account number. Required for IND, GBR, PHL.

account_holder_name

string

Full name of the account holder. Required for GBR, ARE, EUR countries, and PHL — not required for IND (matched against KYC legal_name via penny-drop instead).

bank_name

string

Name of the bank. Required for GBR, PHL, and EUR countries.

bank_code

string

Bank routing code — IFSC for IND, sort code for GBR, SWIFT/BIC for EUR countries.

account_type

enum<string>

Account type. Required for GBR, ARE, and EUR countries.

Available options:

SAVINGS,

CURRENT,

CHECKING

bank_iban

string

IBAN. Required for UAE (ARE) and European countries.

bank_bic

string

BIC / SWIFT code.

routing_type

enum<string>

Routing type. Required for GBR (SORT_CODE) and EUR countries (IBAN).

Available options:

SORT_CODE,

IBAN,

IFSC,

ROUTING_NUMBER,

BANK_CODE

Response

Successful response

success

boolean

data

object

Show child attributes

User Operations

KYC and EDD Operations

Bank Account Operations

Limits

Offramp

Onramp

Wallet Operations

Add Bank Account

Headers

Body

Response