Payment Reference Validation
Payment Reference Validation process
Last updated
Payment Reference Validation process
Last updated
Thus process refers to ingesting, verifying and storing a payment reference added by a user as part of a fulfillment request.
A ref refers to any string of characters the SHOULD be used to redeem or identify a potential fulfillment request for a specific service or product. eg. a cellphone, email, username, service number, ID card, etc.
The payment references are sensitive in nature because they can potentially identify an individual. So we MUST deem them as PII. To protect users’ data, the protocol uses a combination of off-chain with on-chain mechanisms to route the payment correctly.
The user inputs the ref
The Ref Validation API ingests the payment reference into the backend
The system will perform format validations as well as KYC and/or FP validations
Once verified, the reference is stored securely off-chain, and a random identifier is generated
The random identifier is then submitted to the **Reference Registry** smart contract on-chain, which holds every validated reference known to the protocol.
The process of reference validation involves both off-chain and on-chain components.
When a reference is submitted for verification, the BFP protocol performs necessary checks, validates the format, and carries out FP (fraud prevention) actions. After these steps, the on-chain protocol needs to be informed about the reference.
At this stage, the BFP interacts with the ManagerContract to accept the reference and store it on-chain. When the setServiceRef method is called, the ManagerContract uses the reference ID and stores it in the reference registry contract.
It's crucial to note that the reference IDs are not the actual payment references, but rather random strings that point to the actual references stored off-chain.