Connect External Accounts

External bank accounts can be connected to an account holder financial account as a funding source. These accounts transfer funds via ACH.

Highnote has partnered with Plaid and Finicity as secure, NACHA-compliant options to verify and link external accounts. Account holders can connect their external accounts to Highnote by invoking Plaid or Finicity’s widget from your app or website. Once linked, account holders can seamlessly transfer funds via ACH between their Highnote financial account and external bank account.

There are two methods for transferring funds using an external account:

• Fund-in transfers: A funds transfer from an external account to a Highnote financial account. Fund-in transfers require external account verification via Plaid or Finicity.
• Fund-out transfers: A funds transfer from a Highnote financial account to an external account. Fund-out transfers do not require verification of the external account and can only be initiated on card products with a cash deposit (ex: debit and secured debit cards).

There are two types of ExternalFinancialAccounts referenced in the Highnote API:

• NonVerifiedExternalUSFinancialBankAccount: Indicates the account can only be used to fund out a payment.
• ExternalFinancialBankAccount: Indicates the account is verified and may be used to fund in or fund out a payment.

You can use Plaid's drop-in module on your app or website to provide an easy interface for account holders to connect their external accounts. Highnote's Plaid integration was built with security in mind and it eliminates the need for you to store sensitive information from your account holder's external bank accounts.

Note: The accounts array from Plaid contains information about bank accounts associated with the credentials entered by the user. If the user has multiple bank accounts, the accounts array may contain information from multiple accounts.

Highnote requires only one bank account. To have the customer select a single account to link, set Account Select to "enabled for one account" in the Plaid Developer Dashboard. When this setting is selected, the accounts array will always contain exactly one account.

To use Plaid, you must first create a Plaid account. Use the following steps to set up your Plaid account before integrating with Highnote:

1. Sign up for Plaid API keys.
2. Integrate with Plaid Link to create a link_token. For information on integrating with Plaid Link, see Plaid's Documentation.
3. Once Plaid is integrated, your customers can use the drop-in module on your app or website to connect their external bank accounts.
4. Once a customer has selected and verified their external bank account, Plaid will provide you with Highnote’s processor_token. You'll send this token to Highnote, and we will use it to securely retrieve account and routing numbers from Plaid.

To test Plaid, you will need to use your processor_tokens. You can create Highnote processor_tokens in all three of Plaid’s API environments:

• Plaid Sandbox: Test simulated users
• Plaid Development: Test live users
• Plaid Production: Production environment for when you're ready to go live and have valid Highnote live environment API keys

Once you have received the processor_token from Plaid, you’ll provide this token to Highnote using the AddExternalBankAccountVerifiedThroughPlaid mutation. Highnote retrieves the account number, routing number, and account type from Plaid and links the information to the associated account holder for future payment usage.

If the response includes a processor token error, you should obtain a new processor_token from Plaid and reattempt adding the external bank account. All processor token errors must be resolved with Plaid. In some cases, your customer may need to resubmit their bank account credentials for you to retrieve a new processor_token. See Plaid's error documentation for a comprehensive list of possible Plaid-related errors.

Use the following mutation to add an external bank account using Plaid:

With a Finicity integration, account holders can connect verified external bank accounts within your app or website. Once an external bank account is verified, you can use Highnote to transfer money between the account holder’s external bank account and their financial account. This integration was built with security in mind and it eliminates the need for you to store sensitive information from your account holder’s external bank accounts.

Before integrating with Finicity, you must sign up for an account and create an access token:

1. Sign up for Finicity API keys.
2. Once you have Finicity API keys, create a Finicity Access Token to onboard your account holders.
3. Once the Access Token is shared with Highnote, it is used to securely retrieve account and routing numbers from Finicity.

Note: Highnote's Finicity partner ID is 2445583993914. When testing, input this value as the thirdPartyPartnerId.

You can test Finicity API keys in a live environment, using their preset test profiles to test for all scenarios. Finicity has also set up mock FinBanks to simulate testing against live financial institutions.

To begin testing, you must first set up your Finicity test environment. After setting up your test environment, refer to the following steps:

1. Generate Finicity-App-Token.
2. Create a test customer in Finicity's System.
3. Generate Connect URL and simulate customer linking bank accounts to Finicity .
4. Refresh customer accounts.
5. Generate 3rd party API access token information to send to Highnote. Use the following POST request to https://api.finicity.com/aggregation/v1/partners/accessKey:

Headers

Copy code snippet

Body (raw, JSON)

Copy code snippet

Sample response payload

Copy code snippet

With a Finicity Access Token, you can call the Highnote API with the following mappings to link an external bank account:

• moneyTransferDetails -> ACH_DETAILS
• availableBalanceLive -> CURRENT_BALANCE
• accountOwner -> ACH_OWNER_DETAILS

Use the following mutation to add an external bank account with Finicity:

Note: A bank account number can be de-tokenized if it has been added using the addNonVerifiedExternalFinancialBankAccount mutation. For bank accounts connected and verified via the addExternalBankAccountFromToken mutation, the bank account number cannot be de-tokenized for security purposes.

External bank accounts that have not been verified by a third-party service such as Plaid or Finicity are considered to be "non-verified". Funds may only be sent to a non-verified external bank account from a Highnote financial account. Non-verified accounts may not be used to move funds into Highnote. The most common use case for non-verified external bank accounts is to return funds to an account holder in the event of account closure.

When connecting an external bank account, your account holder must provide the following external account information:

• Routing number
• Account number
• Account type: Checking or savings

Optionally, a nickname can be assigned to the non-verified account for reference.

Use the following mutation to add a non-verified external bank account:

Note: The same mutation is used to disconnect verified and non-verified external bank accounts.

You can use the CloseExternalFinancialBankAccount to provide the following experiences for disconnecting an external account:

• Provide an interface for account holders to disconnect external accounts from your app or website
• Provide an interface for your organization's support team to disconnect external accounts

Note the following guidelines for disconnecting an external bank account:

• When the external bank account is disconnected, all scheduled payments associated with the external bank account will be canceled. If the Highnote financial account associated with the external bank account has a pending payment, the account can't be disconnected until the pending payment(s) settles.
• Once disconnected, the customer will need to re-verify their identity to reconnect a verified bank account to their Highnote financial account.
• If the customer is disconnecting or reconnecting a non-verified bank account, they do not need to re-verify their identity.

Use the following mutation to disconnect a verified or non-verified external bank account:

You can view and present a list of an account holder's external bank accounts using the following query: