Firm Banking Integration Flow

The Easy Cash Direct Debit (Firm Banking) process consists of three stages: Authentication → Account Enrollment → Payment.

End-to-End Flow

Customer

Merchant Server

Hecto Financial

11. Payment request

1. Payment request

22. Mobile identity verification request

2. Mobile identity verification request

33. OTP sent via SMS

3. OTP sent via SMS

44. OTP entry

4. OTP entry

55. Identity verification confirmation

5. Identity verification confirmation

66. Account holder name inquiry

6. Account holder name inquiry

77. Account ownership verification (ARS / micro-deposit)

7. Account ownership verification (ARS / micro-deposit)

88. Account enrollment (direct debit registration)

8. Account enrollment (direct debit registration)

99. Payment (direct debit execution)

9. Payment (direct debit execution)

1010. Payment result response

10. Payment result response

NOTE

One-Time Registration

Account enrollment (step 8) is performed only once. For subsequent payments using an already-enrolled account, you can call the payment API directly without repeating the authentication and enrollment steps.

Step 1: Mobile Identity Verification

Verifies the customer's identity using their mobile phone number.

Order	API	URI	Description
1	Identity verification request	`POST /v1/api/auth/mobile/req`	Sends OTP to the customer's mobile phone
2	Identity verification confirmation	`POST /v1/api/auth/mobile/check`	Validates the OTP entered by the customer

Authentication API Documentation

Mobile Identity Verification Request

Send OTP via SMS

Mobile Identity Verification Confirmation

Validate OTP

Step 2: Account Holder Name Inquiry

After identity verification, verify the account holder's name using the provided name and account details.

API	URI	Description
Account Holder Name Inquiry I	`POST /v1/api/auth/acnt/ownercheck1`	Verifies account holder based on account number
Account Holder Name Inquiry II	`POST /v1/api/auth/acnt/ownercheck2`	Verifies account holder based on account number and additional information
Account Holder Name Inquiry (with amount)	`POST /v1/api/auth/acnt/ownercheckWithAmount`	Verifies account holder using micro-transfer method

Account Holder Verification API Documentation

Account Holder Name Inquiry I

Basic account holder verification

Account Holder Name Inquiry II

Account holder verification with additional information

Step 3: Account Ownership Verification

Generate proof of account ownership for direct debit enrollment via ARS or micro-deposit verification.

API	URI	Description
ARS verification request	`POST /v1/api/auth/ars`	Places an ARS call to the customer's phone
ARS verification confirmation	`POST /v1/api/auth/arscheck`	Retrieves ARS verification result
Account ownership verification request (2-step)	`POST /v1/api/auth/ownership/req`	Initiates micro-deposit (1 KRW) transfer
Account ownership verification confirmation (2-step)	`POST /v1/api/auth/ownership/check`	Confirms micro-deposit verification
Account ownership verification (single call)	`POST /v1/api/auth/acnt/ownership`	Single-call method

Account Ownership Verification API Documentation

ARS Verification Request

Initiate ARS automated voice verification

ARS Verification Confirmation

Retrieve ARS verification result

Account Ownership Verification

Account ownership confirmation via micro-deposit

Step 4: Account Enrollment (Direct Debit Registration)

Enrolls the verified account under the merchant's customer profile.

API	URI	Description
Account enrollment	`POST /v1/api/acnt/reg`	Register direct debit account
Account cancellation	`POST /v1/api/acnt/unreg`	Cancel an enrolled account

Account Management API Documentation

Account Enrollment

Account Cancellation

Cancel an enrolled account

Step 5: Payment (Direct Debit Execution)

Executes a payment using the enrolled account.

API	URI	Description
Payment	`POST /v1/api/pay/confirm`	Direct debit payment capture
Payment void / refund	`POST /v1/api/pay/cancel`	Void or refund a payment
Remittance	`POST /v1/api/pay/rmt`	Transfer from merchant to customer account

Transfer Service API Documentation

Payment

Direct debit payment capture

Payment Void / Refund

Void or refund a payment

Full API Reference

Complete list of APIs provided by Easy Cash Direct Debit (Firm Banking). All APIs use the POST method.

Authentication Services (10 APIs)

API Name	URI
Identity verification request	`/v1/api/auth/mobile/req`
Identity verification confirmation	`/v1/api/auth/mobile/check`
Account holder name inquiry I	`/v1/api/auth/acnt/ownercheck1`
Account holder name inquiry II	`/v1/api/auth/acnt/ownercheck2`
Account holder name inquiry (with amount)	`/v1/api/auth/acnt/ownercheckWithAmount`
Account ownership verification (single call)	`/v1/api/auth/acnt/ownership`
Account ownership verification request (2-step, step 1)	`/v1/api/auth/ownership/req`
Account ownership verification confirmation (2-step, step 2)	`/v1/api/auth/ownership/check`
ARS verification request	`/v1/api/auth/ars`
ARS verification confirmation	`/v1/api/auth/arscheck`

Account Management (3 APIs)

API Name	URI
Account enrollment	`/v1/api/acnt/reg`
Account cancellation	`/v1/api/acnt/unreg`
Merchant self-enrollment	`/v1/api/acnt/reg/self`

Transfer Services (4 APIs)

API Name	URI
Payment	`/v1/api/pay/confirm`
Payment void / refund	`/v1/api/pay/cancel`
Remittance	`/v1/api/pay/rmt`
Remittance account balance inquiry	`/v2/api/pay/rmt/blc`

Recurring Billing (5 APIs)

API Name	URI
Recurring billing key issuance	`/v1/api/regular/reg`
Recurring billing capture	`/v1/api/regular/confirm`
Recurring billing cancellation	`/v1/api/regular/unreg`
Recurring billing information inquiry	`/v1/api/regular/info`
Recurring billing transaction history	`/v1/api/regular/translist`

Inquiry Services (10 APIs)

API Name	URI	Notes
Transaction result inquiry	`/v1/api/pay/morw`
Transaction history inquiry	`/v1/api/pay/translist`
Account list inquiry	`/v1/api/acnt/list`
Bank list inquiry	`/v1/api/bank/list`
Bank maintenance inquiry	`/v1/api/bank/timecheck`
Account ownership verification history inquiry	`/v1/api/auth/ownership/translist`
Account ownership verification bank maintenance inquiry	`/v1/api/bank/timecheck/detail`
KFTC direct debit deregistration inquiry	`/v1/api/acnt/isttunreg/list`	nspay domain only
Test call	`/v1/api/test/testcall`
Payment password confirmation	`/v1/api/auth/pwdcnf`

Request / Response Structure

All API requests and responses use JSON format.

Request Example

{
  "mchtId": "Merchant ID",
  "ver": "0A19",
  "method": "RA",
  "bizType": "B0",
  "encCd": "23",
  "mchtTrdNo": "ORDER20240101100000",
  "trdDt": "20240101",
  "trdTm": "100000",
  "pktHash": "SHA-256 hash value",
  "trdAmt": "AES-encrypted amount"
}

Success / Failure Indicators

Field	Success	Failure
`outStatCd`	`0021`	`0031`
`outRsltCd`	`0000`	Error code

Parameter validation failure response example

{
  "outStatCd": "0031",
  "outRsltCd": "ST09",
  "outRsltMsg": "Invalid request message"
}

Next Steps

Detailed Documentation by Feature

Authentication Services

Identity verification, account holder inquiry, and account ownership verification APIs

Recurring Billing

Recurring billing key issuance, capture, and cancellation

Inquiry Services

Transaction result, transaction history, and account list inquiry

Need technical support?

Code Samples

HectoFinancial GitHub