GET /kyc

GET /api/v1/remittance/kyc?phone={msisdn}

Phone number validation + internal blacklist check. Independent of /account-lookup, which queries the telco.

Auth: Basic merchant_code:merchant_secret

Query params

Param	Required	Description
phone	yes	MSISDN (with country code), any format. Normalized server-side to E.164.

Response (200 OK)

{
  "status": "success",
  "data": {
    "phone":       "+243812345678",
    "e164":        "+243812345678",
    "country":     "CD",
    "operator":    "mpesa",
    "blacklisted": false
  }
}

When to use it

• Sanity-check a beneficiary number before showing a form field error to your user.
• Detect known-bad numbers from previous fraud attempts (blacklist).

For the telco subscriber name (the one you pass to /inbound as expected_receiver_name), use /account-lookup — it is the authoritative source and always fresher than any cache on your side.