Cross Check Rules variables

Use pre-programmed variables to configure cross-check rules.

This article lists all variables available for selection when configuring Cross Check Rules. Some of the variables have nested attributes and elements.

You can use these variables to compare applicant data from different sources and set up rules that help identify inconsistencies during verification.

Root variables

Field	Description
applicant	Branch of items related to information about an applicant.
poi, poi2, poi3, poi4	Fields identifying the proof of identity document conditions.
poa, poa2	Items associated with the proof of address document.
checks	Items including the Background checks information.
action	Applicant action information.

applicant

Field	Description
`id`	Applicant ID.
`externalUserId`	Value you passed to `externalUserId` during applicant creation, usually the applicant id on your side.
`createdAt`	Applicant creation date.
`fullName`	Applicant's full name.
`country`	Applicant's country as per ISO 3166-1 alpha-3.
`countryOfBirth`	Applicant's country of birth as per ISO 3166-1 alpha-3.
`info`	Information extracted from documents or external databases.
fixedInfo	Basic applicant information provided to the Sumsub SDK/API when an applicant passes a verification level. To use these fields in Workflow Builder conditions, they must be marked as required in the level settings.
review	Applicant's review.
`sourceKey`	Applicant's source key.
derivatives	Various information derived from an applicant.
`metadata`	Applicant's metadata.
riskLabels	Applicant risk labels.
`tags`	Applicant tags.
assessment	Applicant assessment.
`email`	Applicant's email information.
phone	Applicant's telephone data.
`emailDomain`	Applicant email's domain name.
type	Applicant entity type: individual or company.
`allMemberRoles`	Roles of the applicant.

poi, poi2, poi3, poi4

Field	Description
`country`	Country where an identity document was issued (ISO 3166-1 alpha-3).
`idDocType`	Identity document type.
`number`	Identity document number.
`additionalNumber`	Identity document additional number.
`dob`	Date of birth of an identity document owner.
`nationality`	Nationality of an identity document owner.
`placeOfBirth`	Place of birth of an identity document owner.
`issuedDate`	Date of an identity document.
`issueAuthority`	Authority that issued an identity document.
`issueAuthorityCode`	Unique code of the authority that issued an identity document.
`validUntil`	Validity date of an identity document.
validityPeriod	Validity period of an identity document.
`firstIssuedDate`	Date of an identity document's first issue.
`metadata`	Metadata related to an identity document.
address	Address specified in an identity document.
`category`	Identity document category, for example, category of a driver's license.
nfc	NFC information on an identity document.
`fullMrz`	Machine-Readable Zone lines separated by the (\n) symbol.

poa, poa2

Field	Description
`country`	Country where the proof of address document was issued (ISO 3166-1 alpha-3).
`idDocType`	Document type.
`number`	Document number.
`metadata`	Metadata related to a proof of address document.
address	Address specified in a proof of address document.
`issuedDate`	ID Document issue date.
`detectedLanguages`	List of languages detected in a proof of address document specified in the format of 2-letter codes (ISO 639-1).
image	Image's technical details.

checks

Field	Description
all	Aggregated information about all checks by type.
poa	Proof of address information (UTILITY_BILL).
`poa2`	2nd proof of address information (UTILITY_BILL2).
company	Business verification information.
personWatchlist	Watchlists matching an applicant.
email	Email confirmation
phone	Phone confirmation.
ip	IP information.

action

Field	Description
`id`	Action ID.
`externalActionId`	External action ID.
`createdAt`	Action creation date.
review	Action review.
`metadata`	Action metadata.
`questionnaires`	Questionnaire item values nested by questionnaire, section, and then item id. For example, `questionnaire["myQuestionnaireId"]["mySectionId"]["myItemId"]`

date

Field	Description
`timestamp`	Unix timestamp in milliseconds.
`yyyymmdd`	Numeric day in YYYYMMDD format, for example, `20230123`.
`year`	Year.
`month`	Months of the year (start from 1).
`dayOfMonth`	Day of the month (starts from 1).
`ageInYears`	Time delta in years between this date and now.
`ageInDays`	Time delta in days between this date and now.

applicant.info, applicant.fixedInfo

Field	Description
`country`	Applicant's country (ISO 3166-1 alpha-3).
`countryOfBirth`	Applicant's country of birth (ISO 3166-1 alpha-3).
`firstName`	Applicant's first name.
`firstNameEn`	Transliterated first name.
`middleName`	Applicant's middle name.
`middleNameEn`	Transliterated middle name.
`lastName`	Applicant's last name.
`lastNameEn`	Transliterated last name.
`gender`	Applicant's gender (M or F).
`nationality`	Applicant's nationality (ISO 3166-1 alpha-3).
`taxResidenceCountry`	Applicant's Tax Residence Country (ISO 3166-1 alpha-3)
`residenceCountry`	Applicant's Residence Country (ISO 3166-1 alpha-3)
`age`	Applicant's age.
`address`	Applicant's address.
`companyInfo`	Company information (Business verification).
`tin`	Applicant's Individual Taxpayer Identification Number.
`phone`	Applicant's telephone data.

applicant.review, action.review

Field	Description
`levelName`	Applicant level.
`decision`	Review of the decision.
`reviewAnswer`	Review of the answer.
`attemptCnt`	Number of attempts.
`rejectLabels`	List of rejection labels.
`buttonIds`	List of button ids.

applicant.derivatives

Field	Description
`estimatedAge`	Applicant's estimated age.

applicant.riskLabels

Field	Description
`email`	Email risk labels.
`phone`	Phone risk labels.
`device`	Device risk labels.
`crossCheck`	Cross-check risk labels.
`selfie`	Selfie risk labels.
`aml`	AML risk labels.
`person`	Person risk labels.
`company`	Company risk labels.

applicant.assessment

Field	Description
`scores`	Applicant risk assessment score that is calculated via the transaction monitoring tags.

phone

Field	Description
`number`	Applicant's phone number.
`country`	Phone number's country.

applicant.type

Field	Description
`individual`	Individual applicant.
`company`	Company applicant.

validityPeriod

Field	Description
`millis`	Validity period of a document in milliseconds.
`days`	Validity period of a document in days.
`hours`	Validity period of a document in hours.
`minutes`	Validity period of a document in minutes.
`seconds`	Validity period of a document in seconds.

address

Field	Description
`country`	Country code (ISO 3166-1 alpha-3).
`formattedAddress`	Address in a human-readable format.
`state`	Name of the state or region, if applicable.
`town`	Name of the town, if applicable.
`street`	Name of the street, if applicable.
`subStreet`	Name of the sub-street, if applicable.
`postCode`	Post code if applicable.

nfc

Field	Description
`fullMrz`	Full MRZ data.

poa.image, poa2.image

Field	Description
`softwareTag`	Software information.

checks.all

Field	Description
`ip`	Aggregated IP check information.

checks.poa, checks.poa2

Field	Description
`companyType`	Proof of address, company type.
`subType`	Proof of address subtype if applicable.
`unconventionalProvider`	Indicates whether PoA was obtained via an unconventional provider, for example, a neo-bank if companyType equals "bank".

checks.company

Field	Description
`answer`	Answer on the business verification results. The possible items for the field are: `GREEN`, `RED`, `YELLOW`, `IGNORED`, `ERROR`.
info	Company check information (Business verification).

checks.companyWatchlist

Field	Description
`matchStatuses`	Watchlist match statuses for the company. The possible statuses are: `unknown`, `no_match`, `potential_match`, `false_positive`, or `true_positive`.

checks.company.info

Field	Description
`employeesNumber`	Approximate number of employees.
`incorporatedOn`	Date of company incorporation. Supports standard date variables (see date section).
`industryCode`	Industry classification codes, including the `code` and `descriptions` fields for identifying the company’s industry sector.
`legalForm`	Legal form of the company (for example, Private limited company, Joint stock company).
`licenseInfo`	Company license information, including issue and expiration dates (`issuedDate`, `validUntil`). Date fields support standard date variables (see date section).
`registeredCapitalAmount`	Registered capital of the company.
`startDate`	Date when the company started operations. Supports standard date variables (see date section).
`status`	Company status. Possible values: `active`, `inactive`, `unknown`.
`type`	Company legal type (for example, `privateCompany`, `publicCompany`).

checks.personWatchlist

Field	Description
`matchStatuses`	Watchlist match statuses for the person. The possible statuses are: `unknown`, `no_match`, `potential_match`, `false_positive`, or `true_positive`.
`ongoingMatchStatuses`	Ongoing watchlist match statuses for the person. The possible statuses are: `unknown`, `no_match`, `potential_match`, `false_positive`, or `true_positive`.
`ongoingUpdatedAt`	The date of the last ongoing watchlist match status update. Supports standard date variables (see date section).

checks.email

Field	Description
`confirmedViaOtp`	Email OTP confirmation answer.
`nonDisposable`	Non-disposable email answer.
`blacklisted`	Blocklisted email answer.

checks.phone

Field	Description
`confirmedViaOtp`	Phone OTP confirmation answer.
`blacklisted`	Blocklisted phone answer.

checks.ip

Field	Description
`riskLevel`	Labels the detected IP address as safe (GREEN), suspicious (YELLOW), risky (RED), IGNORED, or ERROR.
`abuseVelocity`	Indicates frequent abusive behavior over the past 24-48 hours. Could be High, Medium, or Low.
`country`	IP Address country.
`proxy`	Indicates whether a proxy server is used and labels it as safe (GREEN), suspicious (YELLOW), risky (RED), IGNORED, or ERROR.
`vpn`	IP Address VPN answer.
`tor`	IP Address TOR answer.

Elements of applicant.review.rejectLabels, Elements of action.review.rejectLabels

Field	Description
`FORGERY`	Forgery attempt was recognized.
`CRIMINAL`	Applicant is involved in illegal actions.
`DOCUMENT_TEMPLATE`	Submitted documents are templates downloaded from the internet.
`LOW_QUALITY`	Documents have low quality that does not allow definitive decisions to be made.
`SPAM`	Applicant was created by mistake or is just a spam user (irrelevant images were supplied).
`NOT_DOCUMENT`	Submitted documents are not relevant for the verification procedure.
`SELFIE_MISMATCH`	Applicant's photo (profile image) does not match a photo on the provided documents.
`ID_INVALID`	Document that identifies a person (like a passport or an ID card) is not valid.
`DOCUMENT_DEPRIVED`	Applicant has been deprived of the document
`FOREIGNER`	Rejection label associated with the applicants from an unsupported country or, for example, for example, without a residence permit.
`DUPLICATE`	Applicant has multiple accounts while duplicates are not allowed by the regulations.
`BAD_AVATAR`	Applicant's avatar does not meet the client's requirements.
`WRONG_USER_REGION`	Applicant from a region/country that is not allowed to be registered.
`WRONG_ADDRESS`	Address from the applicant's documents does not match the address entered by them manually.
`INCOMPLETE_DOCUMENT`	Some information is missing from the document, or it is partially visible.
`BLOCKLIST`	Applicant is blocklisted by a client.
`OTHER`	There is some unclassified reason for rejection.
`UNSATISFACTORY_PHOTOS`	There were problems with the photos during verification, like poor quality or masked information.
`GRAPHIC_EDITOR`	Document has been edited by a graphical editor.
`DOCUMENT_PAGE_MISSING`	Some pages of a document are missing (if applicable).
`DOCUMENT_DAMAGED`	Document is damaged.
`DIGITAL_DOCUMENT`	Document is digital and cannot be accepted
`REGULATIONS_VIOLATIONS`	Some violations of the regulations were found.
`INCONSISTENT_PROFILE`	Data or documents of different persons were uploaded to one applicant.
`PROBLEMATIC_APPLICANT_DATA`	Applicant data does not match the data in their documents.
`GPS_AS_POA_SKIPPED`	GPS as PoA option was skipped, and no image was uploaded instead.
`ADDITIONAL_DOCUMENT_REQUIRED`	Additional documents are required to pass the check for image review.
`MORE_DOCUMENTS_REQUIRED`	Additional documents required to pass the check for applicant review.
`AGE_REQUIREMENT_MISMATCH`	Age requirement is not met (for example, cannot rent a car to a person below 25yo).
`REQUESTED_DATA_MISMATCH`	Provided information does not match the data recognized from a document.
`EXPERIENCE_REQUIREMENT_MISMATCH`	Applicant does not have enough experience (for example, driving experience is not enough).
`COMPROMISED_PERSONS`	Applicant does not correspond to Compromised Person Politics.
`PEP`	Applicant belongs to the PEP category.
`ADVERSE_MEDIA`	Applicant was found in the adverse media.
`FRAUDULENT_PATTERNS`	There was fraudulent behavior detected during the verification.
`SANCTIONS`	Applicant was found on the sanction lists.
`NOT_ALL_CHECKS_COMPLETED`	Not all of the checks were completed.
`FRONT_SIDE_MISSING`	Front side of the document is missing.
`BACK_SIDE_MISSING`	Back side of the document is missing.
`SCREENSHOTS`	Applicant uploaded screenshots.
`BLACK_AND_WHITE`	Applicant uploaded black and white photos of their documents.
`INCOMPATIBLE_LANGUAGE`	Document's translation is required.
`EXPIRATION_DATE`	Applicant uploaded an expired document.
`UNFILLED_ID`	Applicant uploaded the document without signatures and stamps.
`BAD_SELFIE`	Applicant uploaded a selfie in poor quality.
`BAD_VIDEO_SELFIE`	Applicant uploaded a video selfie in poor quality.
`BAD_FACE_MATCHING`	Face check between a document and a selfie was failed.
`BAD_PROOF_OF_IDENTITY`	Applicant uploaded a poor quality ID document.
`BAD_PROOF_OF_ADDRESS`	Applicant uploaded a poor quality proof of address.
`BAD_PROOF_OF_PAYMENT`	Applicant uploaded a poor quality proof of payment.
`SELFIE_WITH_PAPER`	Special selfie is required (for example, selfie with a piece of paper and the date on it).
`FRAUDULENT_LIVENESS`	There was an attempt to bypass the liveness check.
`OK`	Custom reject label.
`COMPANY_NOT_DEFINED_STRUCTURE`	Entity's control structure was not defined.
`COMPANY_NOT_DEFINED_BENEFICIARIES`	Entity's beneficial owners weren't identified and duly verified.
`COMPANY_NOT_VALIDATED_BENEFICIAL_OWNERS`	Not all beneficial owners have passed the identity verification procedure.
`COMPANY_NOT_VALIDATED_BENEFICIARIES`	Entity's Beneficiaries were not validated.
`COMPANY_NOT_VALIDATED_DIRECTORS`	Not all directors have passed the identity verification procedure.
`COMPANY_NOT_DEFINED_REPRESENTATIVES`	Entity's representatives were not defined.
`COMPANY_NOT_VALIDATED_REPRESENTATIVES`	Entity's representatives were not validated.
`UNSUITABLE_DOCUMENT`	Document either does not fit the required type or lacks obligatory elements, like seal, apostille, or notary certification.
`OUTDATED_DOCUMENT_VERSION`	Based on the publicly available state company register, not the most recent version was provided.
`COMPANY_NOT_DEFINED_OWNERSHIP_STRUCTURE`	Company ownership structure has not been specified or differs from the one declared by the corporate documents.
`COMPANY_INACTIVE_ENTITY`	According to the publicly available state company registry, the entity is inactive / dissolved / deregistered.
`COMPANY_INCORRECT_DATA`	Provided company attributes like Name, Registration, or Tax Number do not match the provided documents or the state company registry.
`COMPANY_PROBLEMATIC_STRUCTURE`	There are officials in the control and ownership structure who got rejected.
`COMPANY_DATA_MISMATCH`	Company attributes like Name, Registration on provided documents do not match the state company registry data.
`APPLICANT_INTERRUPTED_INTERVIEW`	Applicant refused to finish the interview on the video ident call.
`DOCUMENT_MISSING`	Applicant refused to show or did not have required documents on the video ident call.
`UNSUITABLE_ENV`	Applicant is either not alone or nor visible on the video ident call.
`CONNECTION_INTERRUPTED`	Video Ident call connection was interrupted.
`UNSUPPORTED_LANGUAGE`	Video Ident' applicant does not speak the language common to the operator.
`THIRD_PARTY_INVOLVED`	Video Ident applicant trying to pass verification to pass the account to a third party.
`INCORRECT_SOCIAL_NUMBER`	Incorrect TIN/SSN was provided to perform the check.
`CHECK_UNAVAILABLE`	External database service is not available at the moment.
`DB_DATA_NOT_FOUND`	Data not found in the external database.
`DB_DATA_MISMATCH`	Input/document data does not match data from the external database.
`RESTRICTED_PERSON`	Person is found in a restricted list (for example, Prohibited from betting).

Elements of applicant.riskLabels.email

Field	Description
`mediumRisk`	Medium-risk email address.
`highRisk`	High-risk email address.
`disposable`	Temporary email address, which is provided by a disposable email service and usually expires in a few minutes.
`noWebRegistrations`	Email registration is not detected.
`noWebsiteExists`	Email domain does not exist.
`nonDeliverable`	Messages fail to be delivered to this email address.
`invalidEmail`	Email address is invalid.

Elements of applicant.riskLabels.phone

Field	Description
`mediumRisk`	Medium-risk phone number.
`highRisk`	High-risk phone number.
`virtual`	Virtual phone that allows a user to make calls through the internet and is not associated with a physical location.
`noWebRegistrations`	Phone number registration is not detected.
`disposable`	Disposable phone.

Elements of applicant.riskLabels.device

Field	Description
`vpnUsage`	VPN usage is detected.
`torUsage`	TOR usage is detected.
`highRiskIp`	High risk of used IP addresses.
`multipleDevices`	Multiple devices were used.
`multipleMobileDevices`	Multiple mobile devices were used.
`lengthySession`	Session is too long.
`failedSessionContinuation`	Session was interrupted.
`distantIpLocations`	Login from different and distant IP addresses for a short time interval.
`thirdPartyLinkAccess`	Link access via external source, for example, WhatsApp or Telegram.
`riskySessionContinuation`	Session continued from a risky IP after the link could not be opened or accessed via messenger.

Elements of applicant.riskLabels.crossCheck

Field	Description
`diverseIdDocCountries`	Identity documents issued in different countries.
`manyAccountDuplicates`	Lots of account duplicates are created.
`accountsInManyServices`	Same account is registered in different services.
`addressCountryVsIpCountryMismatch`	Physical address in the country mismatches the country IP address.
`idDocCountryVsIpCountryMismatch`	Identity document country mismatches the country IP address.
`exifCountryVsIdDocCountryOrIpCountryMismatch`	Country detected by EXIF mismatches either the document country or the country IP address.
`strongLinkToFraudulentApplicant`	A strong link to a known fraudulent applicant is detected, based on duplicate search (biometrics, documents, email, phone) or a reliable fraud networks pattern such as exact same device.
`potentialLinkToFraudulentApplicant`	A potential link to a known fraudulent applicant is detected, based on a fraud networks pattern with softer signals such as similar device.

Elements of applicant.riskLabels.selfie

Field	Description
`asleep`	Person in the selfie is actually asleep.
`estimatedAgeMismatch`	Estimated age mismatches the age in documents.
`virtualCameraPresent`	Virtual (a software-based) camera that simulates a physical camera is detected.
`manyAttempts`	Numerous attempts of passing a selfie check.
`sameFaceWithDifferentData`	The same face on documents with different data.
`thirdPartyInvolved`	There are signs that another person may be assisting or present during the selfie or Liveness capture process.
`phone`	There are indications that a phone or similar device may be used during the selfie or Liveness capture process.

Elements of applicant.riskLabels.aml

Field	Description
`pep`	Applicant belongs to the PEP (Politically Exposed Person) category.
`sanctions`	Applicant was found on sanctions lists.
`terrorism`	Applicant is suspected of terrorism.
`crime`	Applicant is suspected of criminal activity.
`adverseMedia`	Applicant compromising published information that is related to the user was found in the media.
`fitnessProbity`	Applicant does not comply with Fitness and Probity regime. The core function of the Fitness and Probity Regime is to ensure that individuals in key and customer facing positions are competent and capable.

Elements of applicant.riskLabels.person

Field	Description
`famousPerson`	Applicant is supposedly a famous person.
`strangeName`	Applicant has a strange name that does not seem to be a real one.
`noPhoneNamesFromWebServices`	No phone names are found in web services.
`phoneNameMismatchFromWebServices`	Name mismatch with the names associated with the phone number.
`noEmailNamesFromWebServices`	No email names are found in web services.
`emailNameMismatchFromWebServices`	Name mismatch with the names associated with the email address.

Elements of applicant.riskLabels.company

Field	Description
`companyAdditionalDataNotFound`	Company data not found in the database.
`companyDataMismatch`	Company data does not match the database data.

Elements of applicant.assessment.scores

Field	Description
`tag`	Applicant tag.
`score`	Applicant score.