Create external transfers with beneficiaries data

OAuth scope: payment.write

This operation requires Strong Customer Authentication.

Example of SCA usage: Postman visual flow

This endpoint will be sunsetted on March 31, 2026. For SEPA transfers, please use the Create a SEPA Bulk Transfer endpoint instead. The new endpoint works for both trusted and untrusted beneficiaries.

Solo basic plans

• Creates a single external transfer with beneficiary data.
• Solo basic plans are not allowed to do bulk transfers. If a bulk transfer is attempted, it will fail and an error will be returned.

Rest of plans

Creates up to 400 external transfers with beneficiaries data.

Business rules and validations are applied to each individual transfer synchronously. For instance, transfers above 30,000 EUR require at least one attachment. This validation is performed synchronously so, if the attachment is missing for one transfer, an error will be sent for that transfer (cf. response payload) but the other tranfers will be initiated normally.

By default, transfers will be processed as instant. If instant processing isn’t possible, it will automatically fall back to standard processing. It will be the case if the amount of the individual transfer is above the following thresholds 👇

Untrusted beneficiary

• The individual transfer is above 5,000 EUR;
• More than 20,000 EUR have been sent to this beneficairy within 24 hours.

Trusted beneficiary

• The individual transfer is above 10,000 EUR;
• More than 50,000 EUR have been sent to this beneficairy within 24 hours.

To learn more about instant transfers, please read this article.

This endpoint requires user interaction for approval of the external transfers. If you want to fully automate external transfers, check our POST /v2/external_transfers endpoint.

POST /v2/external_transfers/checkout

Create external transfers with beneficiaries data

cURL

curl --request POST \
  --url https://thirdparty.qonto.com/v2/external_transfers/checkout \
  --header 'Authorization: Bearer <token>' \
  --header 'Content-Type: application/json' \
  --data '
{
  "vop_proof_token": "proof_1234567890abcdef",
  "debit_iban": "<string>",
  "external_transfers": [
    {
      "credit_iban": "<string>",
      "credit_account_name": "<string>",
      "credit_account_currency": "<string>",
      "reference": "<string>",
      "currency": "<string>",
      "amount": "<string>",
      "note": "<string>",
      "scheduled_date": "2021-07-12",
      "idempotency_key": "3c90c3cc-0d44-4b50-8888-8dd25736052a",
      "attachment_ids": [
        "3c90c3cc-0d44-4b50-8888-8dd25736052a"
      ]
    }
  ]
}
'

200

only successes

{
  "external_transfers": [
    {
      "id": "3fa85f64-5717-4562-b3fc-2c963f66afa6",
      "slug": "my-slug",
      "debit_iban": "string",
      "debit_amount": "12.55",
      "debit_amount_cents": "1255",
      "debit_currency": "EUR",
      "initiator_id": "3fa85f64-5717-4562-b3fc-2c963f66afa6",
      "beneficiary_id": "3fa85f64-5717-4562-b3fc-2c963f66afa6",
      "credit_amount": "12.55",
      "credit_amount_cents": "1255",
      "credit_currency": "EUR",
      "rate_applied": null,
      "payment_purpose": "goods",
      "reference": "my-reference",
      "note": "Some note",
      "declined_reason": null,
      "status": "pending",
      "scheduled_date": "2021-07-12",
      "created_at": "2021-01-27T22:05:07.000Z",
      "completed_at": "2021-01-27T22:05:07.000Z",
      "processed_at": "2021-01-27T22:05:07.000Z",
      "transaction_id": "3fa85f64-5717-4562-b3fc-2c963f66afa6"
    }
  ],
  "errors": []
}

Authorizations

Authorization · string · header · required

Bearer authorization header: Bearer <token>, where <token> is the access token received from the authorization server at the end of the OAuth 2.0 flow.

Headers

X-Qonto-Staging-Token · string

Required only for Sandbox API requests; to get one, please sign up to the Developer Portal.

Body

application/json

vop_proof_token · string · required

Proof token from a bulk payee verification attempt. Use the token from bulk verify payee to opt-out from the verification.

Example:

"proof_1234567890abcdef"

debit_iban · string · required

IBAN of account to debit.

external_transfers · object[] · required

Show child attributes

Response

200

application/json

Returns the external transfers created.

external_transfers · object[] · required

Show child attributes

errors · object[] · required

Detailed errors for each failing transfer in the job.

Show child attributes