This is the most common payout flow for platforms that hold a user balance and disburse to that user when they request a withdrawal — gaming platforms, marketplaces, gig economy apps, reward programs, SaaS creator earnings, and similar.
Your backend tracks the balance. When a user requests a payout, you call Coinflow to (1) verify the user’s identity, (2) save where they want their money sent, and (3) initiate the payout. Funds come out of your Coinflow wallet.
Platforms where the merchant tracks user balances and initiates payouts on the user’s behalf.
Your Coinflow wallet — the same balance that receives proceeds from Coinflow Checkout.
US bank account, US debit card (push-to-card), IBAN (EUR/GBP), PIX (BRL).
API-driven. Coinflow optionally provides a pre-built Bank Authentication UI that handles KYC + linking a destination.
This integration assumes you’ve completed the Account Setup prerequisites — sandbox merchant account, API key, team access, and any product-specific configuration (settlement location, chargeback protection, or wallet funding).
Before sending real payouts, you’ll need:
Authorization Headers:
Authorization — Your API key from the merchant dashboard.x-coinflow-auth-user-id — A unique customer ID from your own systems identifying the payer or payee.x-coinflow-auth-session-key — A JWT that authorizes the payer. Valid for 24 hours; refresh after expiry.Every user must complete identity verification before their first payout. Once verified, the same user can be paid out repeatedly with no re-verification.
Choose the path that matches how you handle identity today:
Pass the user’s details to Coinflow and we run identity verification end-to-end.
US withdrawers require full SSN, address, and date of birth.
Non-US withdrawers require email and country only at this step. The user completes identity verification through a hosted link returned in the response.
451 response? Coinflow needs additional info from the user. Redirect them to the verificationLink in the response body — they’ll upload a photo ID and complete a selfie verification. After they finish, poll GET /withdraw until verification.status === "approved".
After KYC, fetch the withdrawer record to confirm verification status before adding a payout destination. You can call this at any time to look up a withdrawer.
Save the place the user wants to receive funds. Available destinations depend on the country they verified under.
Want to skip building destination UI? Coinflow’s Bank Authentication UI embeds the entire KYC + destination flow in your app. If you use it, you can skip Step 1 and Step 3 — you’ll only need the quote and payout endpoints below.
Before initiating, fetch a quote so you can show the user fees, expected delivery time, and how much they’ll actually receive. The response includes every speed option available for their destination — card (instant), asap (RTP), same_day (Same-Day ACH), and standard (Standard ACH).
Submit the payout. Your Coinflow wallet is debited; the user’s funds are sent to their selected destination.
effectiveSpeed may differ from the speed you requested. Same-Day ACH requests above NACHA’s per-transaction limit ($1,000,000) are automatically downgraded to standard. Always read effectiveSpeed from the response to confirm how the payout was actually processed.
Track payouts through whichever channel suits your operations:
In sandbox, contact the Coinflow team to provision test funds — there’s no production money involved.
In production, your Coinflow wallet fills automatically from Coinflow Checkout proceeds. If you need to top up directly (e.g., to seed payouts before you’ve taken any pay-ins), contact the Coinflow team for wire instructions.
Coinflow does not currently provide a drop-in UI for merchant-initiated payouts — this integration is API-driven. You can use Coinflow’s Bank Authentication UI for the KYC and destination-linking portion only, then call the quote and payout endpoints from your own UI for the rest of the flow.
Coinflow needs additional information from the withdrawer (commonly a photo ID and selfie). The response body includes a verificationLink — redirect the user there. Once they complete the steps, poll GET /withdraw and check verification.status === "approved".
Bank authentication confirms the user owns the account they’re connecting. Per AML policy, Coinflow requires it before any withdrawal. It also prevents fraud, reduces failed payments, and protects against chargebacks.
Raw card numbers must never reach your servers (PCI compliance). Coinflow provides PCI-compliant tokenization through hosted iframe components.
Merchants need a current Attestation of Compliance (AOC) from a Qualified Security Assessor. Sample formats: merchant AOC, service-provider AOC. If you’re implementing on behalf of a merchant, you need a service-provider AOC.