OPT-CBP-001Bank's choiceregulatedConfirmation of funds

Funds confirmation token

Which token does the CBPII use to check that funds are available?

The options

  • With the PSU

    Authorization code, OpenID Connect or CIBA, after an SCA.

  • Client credentials

    When the PSU has enrolled the CBPII with their bank beforehand.

Bank side
The bank picks one model and states it in the security section of this path in its OpenAPI. Enrolment happens outside the API.
TPP side
Read the security section of /funds-confirmations in the OpenAPI the bank publishes. With client credentials, request the cbpii scope explicitly, since the default scope is pisp.
Regulation

The payer gives their bank explicit consent to answer a given CBPII, before the first request (Article 65(1) of PSD2). The answer is a yes or a no, with no blocking of funds (Articles 65(3) and 65(4)).

Texts cited

Entry checked on October 19, 2026.

Based on the STET PSD2 API 1.6.3 specification, licensed CC BY 3.0 FR.

The entry as stored
{
  "id": "OPT-CBP-001",
  "edition": "1.6.3",
  "chooser": "aspsp",
  "title": {
    "fr": "Token de la confirmation de fonds",
    "en": "Funds confirmation token",
    "es": "Token de la confirmación de fondos",
    "pt-br": "Token da confirmação de fundos"
  },
  "question": {
    "fr": "Quel token le CBPII utilise-t-il pour vérifier la couverture ?",
    "en": "Which token does the CBPII use to check that funds are available?",
    "es": "¿Qué token usa el CBPII para comprobar la disponibilidad de fondos?",
    "pt-br": "Qual token o CBPII usa para verificar a disponibilidade de fundos?"
  },
  "options": [
    {
      "label": {
        "fr": "Avec le PSU",
        "en": "With the PSU",
        "es": "Con el PSU",
        "pt-br": "Com o PSU"
      },
      "text": {
        "fr": "Authorization code, OpenID Connect ou CIBA, après une SCA.",
        "en": "Authorization code, OpenID Connect or CIBA, after an SCA.",
        "es": "Authorization code, OpenID Connect o CIBA, tras una SCA.",
        "pt-br": "Authorization code, OpenID Connect ou CIBA, após uma SCA."
      }
    },
    {
      "label": {
        "fr": "Client credentials",
        "en": "Client credentials",
        "es": "Client credentials",
        "pt-br": "Client credentials"
      },
      "text": {
        "fr": "Quand le PSU a enrôlé le CBPII au préalable auprès de sa banque.",
        "en": "When the PSU has enrolled the CBPII with their bank beforehand.",
        "es": "Cuando el PSU ha dado de alta previamente al CBPII en su banco.",
        "pt-br": "Quando o PSU cadastrou previamente o CBPII junto ao seu banco."
      }
    }
  ],
  "stet": {
    "sections": [
      {
        "part": "framework",
        "section": "3.4.4.3",
        "page": 47
      },
      {
        "part": "functional-model",
        "section": "4.11.2",
        "page": 54
      }
    ],
    "openapi": [
      "POST /funds-confirmations"
    ],
    "flows": [],
    "changes": [],
    "remark": null
  },
  "aspsp": {
    "fr": "La banque choisit un modèle et l'indique dans la section `security` de ce chemin dans son OpenAPI. L'enrôlement se fait hors de l'API.",
    "en": "The bank picks one model and states it in the `security` section of this path in its OpenAPI. Enrolment happens outside the API.",
    "es": "El banco elige un modelo y lo indica en la sección `security` de esa ruta en su OpenAPI. El alta se hace fuera de la API.",
    "pt-br": "O banco escolhe um modelo e o indica na seção `security` desse caminho no seu OpenAPI. O cadastro é feito fora da API."
  },
  "tpp": {
    "fr": "Lire la section `security` de `/funds-confirmations` dans l'OpenAPI publiée par la banque. En client credentials, demander explicitement le scope `cbpii`, puisque le scope par défaut est `pisp`.",
    "en": "Read the `security` section of `/funds-confirmations` in the OpenAPI the bank publishes. With client credentials, request the `cbpii` scope explicitly, since the default scope is `pisp`.",
    "es": "Leer la sección `security` de `/funds-confirmations` en el OpenAPI publicado por el banco. En client credentials, pedir explícitamente el scope `cbpii`, ya que el scope por defecto es `pisp`.",
    "pt-br": "Ler a seção `security` de `/funds-confirmations` no OpenAPI publicado pelo banco. Em client credentials, pedir explicitamente o scope `cbpii`, já que o scope padrão é `pisp`."
  },
  "regulation": {
    "text": {
      "fr": "Le payeur donne à sa banque son consentement explicite pour qu'elle réponde à un CBPII donné, avant la première demande (art. 65(1) de la DSP2). La réponse est un oui ou un non, sans blocage des fonds (art. 65(3) et 65(4)).",
      "en": "The payer gives their bank explicit consent to answer a given CBPII, before the first request (Article 65(1) of PSD2). The answer is a yes or a no, with no blocking of funds (Articles 65(3) and 65(4)).",
      "es": "El ordenante da a su banco su consentimiento explícito para que responda a un CBPII concreto, antes de la primera solicitud (art. 65(1) de la DSP2). La respuesta es un sí o un no, sin bloqueo de fondos (art. 65(3) y 65(4)).",
      "pt-br": "O pagador dá ao seu banco o consentimento explícito para que ele responda a um determinado CBPII, antes da primeira solicitação (art. 65(1) da DSP2). A resposta é um sim ou um não, sem bloqueio dos fundos (art. 65(3) e 65(4))."
    },
    "sources": [
      {
        "act": "psd2",
        "ref": "art. 65(1)"
      },
      {
        "act": "psd2",
        "ref": "art. 65(3)"
      },
      {
        "act": "psd2",
        "ref": "art. 65(4)"
      }
    ]
  },
  "note": null,
  "production": null,
  "verifiedAt": "2026-10-19"
}