Credit Scoring

Get a credit score for a DRC citizen, computed from verified alternative and financial data — mobile money, telecom, banking and utility payment histories — linked to their RDCPASS identity. Each score comes with a risk band, a 12-month probability of default and the factors that drove it, so you can make fast, explainable lending decisions for customers with or without a banking history.

At a glance

Obtaining consent

Consent is given by the citizen, on their own device, after seeing exactly who is asking and why. There are two ways to obtain it; both produce a consent identifier prefixed cns_ that you pass in consent.consent_id.

In both cases the citizen approves inside the RDCPASS app, so consent.method is always rdcpass_app.

Consent rules

• A consent is bound to one citizen and one application. It cannot be reused for another identifier or shared between applications.
• It is valid for 30 days from approval (expires_at) and can be used for new scores during that period — for example to re-score before disbursement.
• The citizen can revoke it at any time from the RDCPASS app. Revocation takes effect immediately; subsequent requests return consent_required.
• Scores already delivered remain valid until their own valid_until, but you may only use them for the credit decision the citizen consented to.

HTTP/1.1 403 Forbidden

{
  "error": "consent_required",
  "message": "Consent cns_5e8a2d71c4 has expired. Ask the citizen to approve a new consent request."
}

Request

The plaintext body below is encrypted and signed before it is sent, as described in Authentication. Every POST also accepts the optional Idempotency-Key header (24-hour window) and Prefer: respond-async.

{
  "identifier": {
    "type": "rdcpass_id",
    "value": "COD-2103-0214-4937"
  },
  "consent": {
    "method": "rdcpass_app",
    "consent_id": "cns_5e8a2d71c4"
  },
  "purpose": "credit_assessment",
  "product": "microcredit",
  "amount_requested": { "value": 1500000, "currency": "CDF" },
  "reference": "loan-2026-0917"
}

Response

A successful call returns 200 OK with a credit_score object.

Credit Scoring returns basic KYC only. Additional KYC scopes never apply to this service — use KYC Validation if your onboarding needs addresses, documents or other scoped data.

Score bands

Bands group scores into risk levels. Probability-of-default ranges are indicative, based on observed 12-month default rates across the RDCPASS scored population; always rely on the probability_of_default returned for the individual citizen.

Factors

Each factor explains part of the score. Use them to give applicants the principal reasons for a decision and to guide them on how to improve their score.

Data sources

data_sources lists only the sources that contributed data for this citizen. A score built on fewer sources is still valid; its factors show what it is based on.

Product types

Full response

{
  "id": "crs_5a9e2c7b14",
  "object": "credit_score",
  "livemode": true,
  "reference": "loan-2026-0917",
  "status": "completed",
  "identifier": { "type": "rdcpass_id", "value": "COD-2103-0214-4937" },
  "consent": {
    "method": "rdcpass_app",
    "consent_id": "cns_5e8a2d71c4",
    "granted_at": "2026-09-26T10:12:40Z",
    "expires_at": "2026-10-26T10:12:40Z"
  },
  "product": "microcredit",
  "amount_requested": { "value": 1500000, "currency": "CDF" },
  "score": 712,
  "band": "B",
  "probability_of_default": 0.034,
  "factors": [
    {
      "code": "payment_history",
      "impact": "positive",
      "weight": 0.35,
      "description": "Mobile credit and loan instalments repaid on time over the last 24 months."
    },
    {
      "code": "mobile_money_activity",
      "impact": "positive",
      "weight": 0.25,
      "description": "Regular monthly inflows on the primary mobile money wallet."
    },
    {
      "code": "credit_utilization",
      "impact": "negative",
      "weight": 0.15,
      "description": "Outstanding balances use 68 % of available credit lines."
    },
    {
      "code": "telecom_tenure",
      "impact": "positive",
      "weight": 0.1,
      "description": "Same primary phone number for more than 6 years."
    },
    {
      "code": "utility_payments",
      "impact": "positive",
      "weight": 0.08,
      "description": "Electricity and water bills settled without arrears."
    },
    {
      "code": "recent_inquiries",
      "impact": "negative",
      "weight": 0.07,
      "description": "3 credit applications in the last 90 days."
    }
  ],
  "data_sources": ["mobile_money", "telecom", "banking", "utilities"],
  "valid_until": "2026-10-26T10:15:02Z",
  "account": {
    "rdcpass_id": "COD-2103-0214-4937",
    "status": "active",
    "certified": true,
    "created_at": "2025-03-14T09:22:41Z",
    "level_of_assurance": "LOA3"
  },
  "kyc": {
    "basic": {
      "full_name": "Kabeya Mwamba Tshisekedi",
      "first_name": "Kabeya",
      "last_name": "Tshisekedi",
      "date_of_birth": "1988-04-12",
      "age": 38,
      "gender": "male",
      "nationality": "COD"
    }
  },
  "purpose": "credit_assessment",
  "created_at": "2026-09-26T10:15:02Z"
}

Example request

The header values are illustrative placeholders — see Authentication for how to compute a real X-RDCPASS-Signature and encrypt the body. Each sample handles consent_required.

# Plaintext body shown — it is AES-256-GCM encrypted (IV in X-RDCPASS-IV) and signed per /docs/authentication before sending.
curl https://api.rdcpass.cd/v1/credit/scores \
  -X POST \
  -H "X-RDCPASS-Key-Id: key_live_8f2a1c0e9b" \
  -H "X-RDCPASS-Timestamp: 1735689600" \
  -H "X-RDCPASS-Nonce: 2d7b4e91-6c3a-4f08-b5e2-8a1f0c9d3e67" \
  -H "X-RDCPASS-Signature: 8c1d4f...b62e" \
  -H "X-RDCPASS-IV: mX4p9Qz2Lr8sT1vB" \
  -H "Idempotency-Key: e4a9c2f7-1b3d-4e6a-9f05-7c2b8d1e0a53" \
  -H "Content-Type: application/json" \
  -d '{
    "identifier": { "type": "rdcpass_id", "value": "COD-2103-0214-4937" },
    "consent": { "method": "rdcpass_app", "consent_id": "cns_5e8a2d71c4" },
    "purpose": "credit_assessment",
    "product": "microcredit",
    "amount_requested": { "value": 1500000, "currency": "CDF" },
    "reference": "loan-2026-0917"
  }'

Request modes

Credit Scoring supports all four request modes. See Single, batch & async for polling, pagination and cancellation.

Batch: pre-approval campaigns

Score a list of customers at once — for example to pre-approve mobile credit limits for wallet holders who opted in. Each item must carry its own valid consent: a batch never bypasses consent, and items without one fail individually with consent_required while the rest succeed. purpose and product set at batch level apply to every item unless the item overrides them.

curl https://api.rdcpass.cd/v1/credit/scores/batches \
  -X POST \
  -H "X-RDCPASS-Key-Id: key_live_8f2a1c0e9b" \
  -H "X-RDCPASS-Timestamp: 1735689600" \
  -H "X-RDCPASS-Nonce: 2d7b4e91-6c3a-4f08-b5e2-8a1f0c9d3e67" \
  -H "X-RDCPASS-Signature: 8c1d4f...b62e" \
  -H "X-RDCPASS-IV: mX4p9Qz2Lr8sT1vB" \
  -H "Idempotency-Key: e4a9c2f7-1b3d-4e6a-9f05-7c2b8d1e0a53" \
  -H "Prefer: respond-async" \
  -H "Content-Type: application/json" \
  -d @preapproval-campaign.json   # plaintext shown; encrypt per /docs/authentication before sending

{
  "purpose": "credit_assessment",
  "product": "mobile_credit",
  "items": [
    {
      "reference": "camp-0917-00001",
      "identifier": { "type": "rdcpass_id", "value": "COD-2103-0214-4937" },
      "consent": { "method": "rdcpass_app", "consent_id": "cns_5e8a2d71c4" },
      "amount_requested": { "value": 100, "currency": "USD" }
    },
    {
      "reference": "camp-0917-00002",
      "identifier": { "type": "rdcpass_id", "value": "COD-1907-5530-1186" },
      "consent": { "method": "rdcpass_app", "consent_id": "cns_91c3b7e0a2" },
      "amount_requested": { "value": 250, "currency": "USD" }
    },
    {
      "reference": "camp-0917-00003",
      "identifier": { "type": "rdcpass_id", "value": "COD-1512-8841-0273" },
      "consent": { "method": "rdcpass_app", "consent_id": "cns_0d4f6a8b17" }
    }
  ]
}

HTTP/1.1 202 Accepted

{
  "id": "bat_7c2e91f04a",
  "object": "batch",
  "service": "credit_scoring",
  "status": "pending",
  "total_items": 3,
  "processed_items": 0,
  "succeeded_items": 0,
  "failed_items": 0,
  "created_at": "2026-09-26T10:15:00Z",
  "completed_at": null,
  "results_url": "/v1/batches/bat_7c2e91f04a/results"
}

{
  "object": "list",
  "data": [
    {
      "reference": "camp-0917-00001",
      "status": "succeeded",
      "result": {
        "id": "crs_5a9e2c7b14",
        "object": "credit_score",
        "score": 712,
        "band": "B",
        "probability_of_default": 0.034,
        "valid_until": "2026-10-26T10:15:02Z",
        "...": "..."
      }
    },
    {
      "reference": "camp-0917-00002",
      "status": "succeeded",
      "result": {
        "id": "crs_b82f1d6e03",
        "object": "credit_score",
        "score": 598,
        "band": "C",
        "probability_of_default": 0.091,
        "valid_until": "2026-10-26T10:15:03Z",
        "...": "..."
      }
    },
    {
      "reference": "camp-0917-00003",
      "status": "failed",
      "error": {
        "code": "consent_required",
        "message": "Consent cns_0d4f6a8b17 was revoked by the citizen."
      }
    }
  ],
  "next_cursor": null
}

Synchronous batches over 50 items return 413 batch_too_large. Asynchronous batches accept up to 10,000 items; you receive batch.completed or batch.completed_with_errors when processing ends. Each succeeded item is billed individually; items rejected for consent_required are not billed.

Asynchronous scoring

Send Prefer: respond-async with a single request to get a job back immediately. When the score is ready, RDCPASS delivers a credit_score.completed event to your webhook URL; its data is the completed job, with the same object a synchronous call returns embedded in result. You can also poll GET /v1/jobs/{job_id}.

HTTP/1.1 202 Accepted

{
  "id": "job_9e3c5a1f7d",
  "object": "job",
  "service": "credit_scoring",
  "status": "pending",
  "created_at": "2026-09-26T10:15:00Z",
  "result_url": "/v1/jobs/job_9e3c5a1f7d"
}

{
  "id": "evt_5d1a8f3c7e2b9a40",
  "object": "event",
  "type": "credit_score.completed",
  "livemode": true,
  "created_at": "2026-09-26T10:15:03Z",
  "data": {
    "object": {
      "id": "job_9e3c5a1f7d",
      "object": "job",
      "service": "credit_scoring",
      "status": "completed",
      "created_at": "2026-09-26T10:15:00Z",
      "result_url": "/v1/jobs/job_9e3c5a1f7d",
      "result": {
        "id": "crs_5a9e2c7b14",
        "reference": "loan-2026-0917",
        "object": "credit_score",
        "status": "completed",
        "score": 712,
        "band": "B",
        "probability_of_default": 0.034,
        "...": "..."
      }
    }
  }
}

Verify the webhook signature before trusting the payload — see Webhooks.

Errors

Errors use the standard format described in Errors. Codes specific to this service:

Next steps

• Login with RDCPASS — collect credit consent at sign-in with rdcpass:credit.score.
• Single, batch & async — batches, jobs and pagination in detail.
• Going to production — enhanced due diligence required for Credit Scoring in production.
• Billing — how scores and batch items are metered.