Try it Out (Sandbox)

A guide for developers to try code examples and test Rabobank’s Payee Account Check APIs.

📘
The Rabobank Sandbox uses stubs.

End‑to‑end flows cannot be tested—only simulated responses.

Certificates are not validated against requirements.

Authentication in Sandbox

We provide a key and certificate for mTLS authentication and request signing:

mTLS

Signing

Base URL

All sandbox API endpoints start with:

https://api-sandbox.rabobank.nl/openapi/sandbox/spv

Available Endpoints

Verify name and IBAN of the beneficiary: /payments/single-payee-verification

Example request and responses

Verify name and IBAN of the beneficiary

Endpoint: https://api-sandbox.rabobank.nl/openapi/sandbox/spv/payments/single-payee-verification

Request

X-Request-ID: e9c96b7e-8470-410a-937c-396fe9512fea
Date: Thu, 18 Mar 2021 15:10:46 GMT
Signature-Certificate: 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
PSU-IP-Address: 192.68.1.1
Signature: keyId="474941545142452678797059264714336600071935444114",algorithm="rsa-sha512",headers="date digest x-request-id",signature="Rl4WgP3YLnOV9gElKFD+moAoVS/Jz+qX5r4gslNrfNrRBUNwOePLVHL5w6Uzz2ZNkXsI5g10KmPD293wCztL9FFzLi5IvehTktDecxH0cVMpzQ9GPzAdEuiiHxg/Uv764NQlaI5/o7oIUx9oDAeZ6Feva5ykEbbhh05TQ8nXCWPDp3QfoKG9pj4g9fSsZZJiECGaz+Tfq0hDF5mjkFK6z6U3nKc1rLBVTDOGi/wV2qZLO99GydVtmDYWdcz20faaot/iK6dJzf3/E4DsEMOojfpSp1K6fjL2MGL+bW1p+S+Ucp0z/UX2U+l6VPz0b7wjWJQnRMF0NQBZqXXVtTguVg=="
Digest: sha-512=xHvtnUZEO7x+cq5sEuvWeZeJIMoZIR7gLeDJ0syqIR1dMkicvl2uRfpAQ9C2SOlqpxIUUHeL3OsKedjEkbPBpQ==
Content-Type: application/json
Body: {"account":{"name":"Allen Martin","value":"NL60RABO159349508","type":"IBAN"}}

Response

{
    "result": {
        "resultType": "MATCHING"
    }
}

Test scenarios

We offer predefined scenarios to test happy flows, errors, and edge cases.

Status Code	Result Code	IBAN	Description
200 OK	MATCHING	NL60RABO159349508	The result of the request is good. You can decide to execute the payment instruction.
200 OK*	NOT_MATCHING	NL34RABO0305240692	The result of the request is good. You can decide decide whether or not to execute the payment instruction.
200 OK**	CLOSE_MATCH	NL03RABO0300000146	The result of the request is good. You can decide decide whether or not to execute the payment instruction.
401 Unauthorised	CERTIFICATE_INVALID		Use the value invalid for the header: Signature-Certificate.
401 Unauthorised	CERTIFICATE_MISSING		Use the value missing for the header: Signature-Certificate.
401 Unauthorised	CERTIFICATE_EXPIRED		Use the value expired for the header: Signature-Certificate.
401 Unauthorised	CERTIFICATE_BLOCKED		Use the value blocked for the header: Signature-Certificate.
401 Unauthorised	CERTIFICATE_REVOKED		Use the value revoked for the header: Signature-Certificate.
405 Method Not Allowed			Use GET instead of POST
503 SERVICE_UNAVAILABLE		NL03RABO0300000147	Forced service unavailable.

Digest: sha-512=sxLop4PDQ6wlWPEynwLgVeVCxOrBwEQcxnNH+3S9Gg23rgraLqyI3UTB2fnEgs8RoG+hh1CDeoz89eEDkPEROw==
Signature: keyId="474941545142452678797059264714336600071935444114",algorithm="rsa-sha512",headers="date digest x-request-id",signature="EnooZTw0T9Z5c6EywU0S0rhQTmcvm2gKGxGJN0XeFB/BDGZrcF5hje8J6jxNxz7JAvRk00sr9qFjQqB2lqHu5HqBO3Rq+nIlDv1nNC733Mz4/gyOSKo/Yzbdq4qPoSHxo1OqGRuJhRwdwNRhmmKdjLo7JcJtT56bZ6wzJMWkyPQdgYa6mCZSmdc4UzAml+GVtIJjGAdM8VQ6QrwMOmUJMpJ/WWT2gStGCg03k8KG4lJChpuSxuRA8HZ896caD4Wn388HhHkdULUV8+vztbgILvqKKYCL8HpyvjPC674kVS75DOwCdes2qkILxGosrGFu9agMsfxgBKbeiUV263rPmw=="

Digest: sha-512=OvQFSsKdcPZEk/4AFFS+0VHJaWNZEsEMoEahwbk/mV/lsV6yEGltuBCMZSz+o9daB6MIsVCvas4IKhtmL1guNA==
Signature: keyId="474941545142452678797059264714336600071935444114",algorithm="rsa-sha512",headers="date digest x-request-id",signature="SCEDc+aSWZI1dPpd4g8yX04WwQohwHF1HOsE18MZdXLkZgXZ+YNuqNpnXN8zmCb0xGjE26a99mWtbkL26J1xt8GMR8EaZuP8Adp2EkGrfe5CxY8IGKayNtfwoMt7YeX3dvDisVu2LpcKNEP9hbQ1Ut3j0a7svSctWmRCp2Q6w+uqXuPPPnfdyg3OQEoBSWr+2VZI3b9wuloA0JTrGA5tQ9BTRaa5K9PD8+bjtEyqJOAefpYNdekz2OX+v+S5cYuT7lofWHQJzu2rUtQbbj2qVMHDzh4w3aVpdpFBCUPp+mSVtbg+oxmtvfQNltiwee8XWA0cJVCJuKKTsDslON+bTw=="

Note: These codes are for Sandbox only.