Skip to main content

Lookup APIs

The Lookup APIs lets you to attempt fetching certain details of the investor from a couple of third party sources. At present, bank account details and demographic information of the investor can be attempted to fetch using the below 2 APIs -

  1. Bank Account Lookup API
  2. Customer Data Lookup API

Bank Account Lookup API​

The Bank account lookup API lets you fetch the bank account details of your investor that is registered against their primary VPA / UPI ID.

Bank account lookup object​

{
    "object": "bank_account_lookup",
    "id": "bal_32PUeQZKweX8ZBSXY22Iqq9u3yg",
    
    "status": "success",
    
    "source_ref_id": "1a478f56-54df-41aa-951a-b2c7edbada2",
    "phone_number": "9012390123",

    "consent": {
        "collected_at": "2026-02-02T14:09:20",
        "text": "I allow <partner> to fetch my bank account details using my phone number via Cybrilla and its partners.",
        "mode": "checkbox",
        "ip_address": "191.163.219.78"
    },
    
    "data": {
        "account_holder_name": "Rakshith Agarwal",
        "account_number": "98123108291821",
        "ifsc_code": "utib0003076",
        "type": "savings"
    }
}

Create Bank Account Lookup​

POST /v2/bank_account_lookups

This API lets you create a bank account lookup object.

curl --location '{{base_url}}/v2/bank_account_lookups' \
--header 'Content-Type: application/json' \
--header 'Authorization: Bearer <token>' \
--data  '{
    "source_ref_id": "1a478f56-54df-41aa-951a-b2c7edbada2",
    "phone_number": "9012390123",

    "consent": {
        "collected_at": "2026-02-02T14:09:20",
        "text": "I allow <partner> to fetch my bank account details using my phone number via Cybrilla and its partners.",
        "mode": "checkbox",
        "ip_address": "191.163.219.78"
    }
}
'
Response

The bank_account_lookup object will be returned as the response.

Fetch Bank Account Lookup​

GET /v2/bank_account_lookups/:id

This API lets you fetch a bank account lookup object.

curl --location '{{base_url}}/v2/bank_account_lookups/:id' \
--header 'Content-Type: application/json' \
--header 'Authorization: Bearer <token>'
Response

The bank_account_lookup object will be returned as the response.

Customer Data Lookup API​

The Customer Data Lookup API lets a partner fetch certain demographic information of the investor from certain third party sources.

Customer Data Lookup object​

{
    "object": "customer_data_lookup",
    "id": "cdl_32PUk5aUMxb7pLGdEGsyk9cRF9t",
    
    "status": "success",
    
    "source_ref_id": "910563db-deb1-44b3-9e34-5819c396de54",
    "name": "Rakshith",
    "phone_number": "9012390123",

    "consent": {
        "collected_at": "2026-02-02T14:09:20",
        "text": "I allow <partner> to fetch my bank account details using my phone number via Cybrilla and its partners.",
        "mode": "checkbox",
        "ip_address": "191.163.219.78"
    },
    
    "data": {
        "name": "Rakshith Agarwal",
        "date_of_birth": "1992-03-15",
        "gender": "male",
        "pan": "jsdpr9021f",
        "aadhaar_number": null,
        "income_slab": "upto_1lakh",
        "occupation": null,
        "addresses": [
            {
                "line": "123 36th cross 24th main jayanagar 4th t block bangalore south",
                "state": "karnataka",
                "pincode": "560041",
                "reported_date": "2025-08-31"
            }
        ],
        "email_addresses": [
            {
                "email": "iamagarwalrakshith@gmail.com",
                "reported_date": "2025-06-30"
            }
        ]
    }
}

Create Customer Data Lookup​

POST /v2/customer_data_lookups

This API lets you create a customer data lookup object.

curl --location '{{base_url}}/v2/customer_data_lookups' \
--header 'Content-Type: application/json' \
--header 'Authorization: Bearer <token>' \
--data  '{
    "source_ref_id": "910563db-deb1-44b3-9e34-5819c396de54",
    "name": "Rakshith",
    "phone_number": "9012390123",

    "consent": {
        "collected_at": "2026-02-02T14:09:20",
        "text": "I allow <partner> to fetch my bank account details using my phone number via Cybrilla and its partners.",
        "mode": "checkbox",
        "ip_address": "191.163.219.78"
    }
}
'
Response

The customer_data_lookup object will be returned as the response.

Fetch Customer Data Lookup​

GET /v2/customer_data_lookups/:id

This API lets you fetch a customer data lookup object.

curl --location '{{base_url}}/v2/customer_data_lookups/:id' \
--header 'Content-Type: application/json' \
--header 'Authorization: Bearer <token>'
Response

The customer_data_lookup object will be returned as the response.


Please note
  • Both these APIs attempt to fetch data from third-party sources provided they are available
  • Once data is fetched, accuracy isn’t validated. We strongly advise you to share these fetched details with the investor and proceed only after their approval
  • You can only fetch these details once per phone number

Obligations and Limitations for Lookup APIs​

  • You should be using industry standard, strong encryption algorithms (e.g.,RSA, AES, etc.) to store PII fetched from Lookup APIs
  • You should get an approval from a sponsor AMC. If the sponsor AMC decides not to sponsor you, Cybrilla shall disable access of Lookup APIs in such cases
  • You should fetch the data only for investors who are initiating a mutual fund transaction or doing a mutual fund KYC. You should not use this data for any other purpose
  • You should not resell this data fetched from Lookup APIs
  • You should not store this data on foreign servers
  • You should not lookup data without verifying investors' phone number
  • You should not lookup data without obtaining explicit one time consent from investors
  • You should ensure that the investor consent text used is the same as approved by Cybrilla and not alter it in any manner
    • Consent text for Bank account lookup - I allow <partner> to fetch my bank account details using my phone number via Cybrilla and its partners.
    • Consent text for Customer data lookup - I allow <partner> to fetch my demographic details using my phone number and name from the credit bureau via Cybrilla and its partners.
  • You should only fetch bank account details once per phone number
  • You should only fetch investor details once per phone number + name combination
  • You should allow your investors to review the fetched data and edit it as needed
  • You shall not use robot/crawler or any other automated mechanism to invoke lookup APIs
  • Cybrilla doesn't guarantee any SLAs for lookup APIs
  • Cybrilla doesn't guarantee the quality of the data returned via lookup APIs
  • Cybrilla may audit your implementation at any time, and you will fully cooperate and provide necessary support for such audits

Go-live checklist for Lookup APIs​

  • Get an approval from a sponsor AMC with which Cybrilla has signed an agreement for facilitating this sponsorship
  • Sign a Lookup offering agreement/addendum with Cybrilla
  • Cybrilla will review your implementations and sign-off on the below items -
    • Lookup APIs are not called before collecting explicit investor consents
    • Explicit investor consents are obtained separately for Bank Account Lookup and Customer Data Lookup
    • Cybrilla pre-approved text is used as consent text
    • Checkboxes are provided for investors for opting in (i.e. for providing consent) for data fetch and these checkboxes are not checked by default
    • Your app or any other digital asset is verifying the investor's phone number before invoking these APIs
    • The data fetched is used only for mutual fund transaction processing in the UI workflow
    • Investors have an option to review the data fetched and edit the same