Integrate the SSA eCBSV consent-based SSN verification API for financial identity proofing

Steps

1. Apply to the SSA eCBSV program at ssa.gov/dataexchange/eCBSV; your organization must be a permitted entity (financial institution, fintech subject to BSA/AML requirements) and pay the annual tier-based subscription fee established in April 2025.
2. Complete the OIDC technical specification requirements: SSA uses OAuth 2.0 and OpenID Connect to authenticate permitted entity systems; register your system's OIDC client credentials before attempting the eCBSV online registration.
3. Collect explicit written or electronic consent from each individual before submitting a verification request; the consent must specifically authorize verification of the individual's SSN, name, and date of birth against SSA records.
4. Submit a verification request to the eCBSV API with the individual's SSN, first name, last name, and date of birth; the response returns a match (Y/N), a death indicator, and an SSN issuance indicator.
5. Retain the consent record and the verification response as part of your identity proofing audit trail to demonstrate compliance with the eCBSV participation agreement and applicable BSA/AML requirements.
6. Handle the death indicator output with care: a death flag does not definitively confirm fraud but requires additional manual review before onboarding the applicant.