Report fraud to the national fraud desk and follow the case to its outcome
Fraud Reporting files cases involving individuals or companies, Congolese or foreign, with the RDCPASS national fraud desk. Investigators review each one and compare it with reports from the other banks, operators and platforms on the network. Your system is told every time the case moves, and confirmed cases feed AML & CTF Screening and Credit Scoring.
- People and companies, in the DRC or abroad
- Case updates sent to your system
- Free for approved organizations
Report a fraud case
- Type
- SIM swap
- Victim
- Kabeya Mwamba Tshisekedi
- Loss
- 2,450,000 CDF
- Signing request · HMAC-SHA256
- Encrypting payload · AES-256-GCM
- Filing with the national fraud desk
- Tracking case status by webhook
Result
- case types
- 12
- case types
- tracked case statuses
- 5
- tracked case statuses
- for approved organizations
- Free
- for approved organizations
- case status updates
- Webhook
- case status updates
Why businesses choose Fraud Reporting
Stop the same fraud elsewhere
When one operator reports a SIM swap, the same citizen’s bank account in another city can be protected that day.
Follow each case to its outcome
Every report gets a case number, and your system is notified each time its status changes.
Feed the checks you already use
A confirmed suspect is flagged by AML & CTF Screening and weighs on Credit Scoring for every organization on the network. A victim is never penalised.
How it works
- 01
Your team spots fraud
At a branch, online, in your app, over USSD or in your call centre.
- 02
You file a factual report
Say what type of fraud it is, who is involved and what happened, with where, when and any evidence you hold.
- 03
RDCPASS investigators review it
They assess the case and compare it with other reports and signals on the network.
- 04
You receive each status update
Under review, confirmed, dismissed or escalated to the competent authorities. Each update goes straight to your system.
Capabilities
What you receive
For every report, RDCPASS gives you what you need to track the case:
- A unique case number to use with RDCPASS or the authorities
- Confirmation that the case was received and is waiting for review
- A notification each time the case changes status
- The final outcome: confirmed, dismissed or escalated to the competent authorities
- Your own case or ticket reference, repeated on every update
Twelve fraud types
Identity usurpation, document forgery, account takeover, SIM swap, money laundering, terrorist financing, robbery, payment fraud, phishing, social engineering, insider fraud and other cases.
People and companies, in the DRC or abroad
Report a person by RDCPASS ID, identity document or just a name, date of birth and phone number, including foreign nationals with a passport from any country. Report a company by RCCM, ID NAT or NIF, or a foreign company by name and registration number. Cross-border cases take any country and currency.
Supporting evidence
Attach images, documents, transaction logs or audio recordings. Only RDCPASS investigators can open them.
Suspects and victims, never confused
Name the author of the fraud, its victims, both or neither. Victims can be people or companies, identified by documents or by name, or anonymous. Only confirmed suspects are flagged by other services; named victims receive an identity-fraud alert that protects them instead.
Historical case import
Bring the cases you have already investigated onto the network from day one, up to 10,000 in one request.
Real time or in the background
File a case in real time. Reports with large evidence files can be processed in the background.
Integration
One integration for sandbox and production
Requests are HTTPS calls with JSON bodies, signed and encrypted. The sandbox returns the same formats as production, so the code you test with is the code you ship.
- 1
Create an application
Sign up, create a sandbox application and select the services and data scopes you need.
- 2
Make your first call
Start from an official SDK or from the samples on the right. Eight languages are covered.
- 3
Go live
After due diligence, replace the sandbox keys with production keys and add your mTLS certificate. The request code stays the same.
Request modes
Single · sync
One record, answered immediately.
Single · async
One record, result by webhook.
Batch · sync
Up to 50 records per call.
Batch · async
Up to 10,000 records, result by webhook.
# Body shown in plaintext — encrypt it per /docs/authentication before sending.
curl https://api.rdcpass.cd/v1/fraud/reports \
-X POST \
-H "X-RDCPASS-Key-Id: key_live_8f2a1c0e9b" \
-H "X-RDCPASS-Timestamp: 1790418900" \
-H "X-RDCPASS-Nonce: 3c7e1a9d-2b4f-4d6a-8e15-9f0b7c2d4a61" \
-H "X-RDCPASS-IV: q2Vh8Zk1pX0rT7mB" \
-H "X-RDCPASS-Signature: b61d4e...9a07" \
-H "Idempotency-Key: 5f0c2a8e-7d41-4b39-a6e2-1c9d8b3f7a50" \
-H "Content-Type: application/json" \
-d '{
"type": "sim_swap",
"subject": {
"role": "suspect",
"full_name": "Agent de vente non autorisé — kiosque Kenya",
"phone_number": "+243970001122"
},
"victims": [
{
"identifier": {
"type": "rdcpass_id",
"value": "COD-2103-0214-4937"
},
"full_name": "Kabeya Mwamba Tshisekedi",
"phone_number": "+243812345678"
}
],
"description": "SIM card replaced at an unauthorised agent in Lubumbashi, followed within 40 minutes by three mobile money transfers the customer did not initiate.",
"occurred_at": "2026-09-24T09:12:00Z",
"location": {
"country": "COD",
"province": "Haut-Katanga",
"city": "Lubumbashi"
},
"amount": {
"value": 2450000,
"currency": "CDF"
},
"channel": "ussd",
"evidence": [
{
"type": "transaction_log",
"file": {
"url": "https://files.example-bank.cd/cases/88213/transfers.csv"
},
"description": "Wallet transaction export for 24 September 2026"
}
],
"reporter_reference": "INC-2026-88213"
}'{
"id": "frd_5c8e1a7d42",
"object": "fraud_report",
"livemode": true,
"case_number": "RDC-FRD-2026-004812",
"status": "received",
"type": "sim_swap",
"subject": { "type": "individual", "role": "suspect", "country": "COD" },
"victims": [{ "type": "individual", "country": "COD", "anonymous": false }],
"reporter_reference": "INC-2026-88213",
"created_at": "2026-09-26T10:15:02Z"
}Where it’s used
Trust & privacy
- Each report is attributed to your application, audited, and reviewed as part of your production due diligence.
- Evidence files can only be accessed by RDCPASS investigators, for as long as the case exists.
- A money laundering report filed here complements your own suspicious transaction reporting to CENAREF. It never replaces it.
- Requests are signed, encrypted end to end and sent over mutually authenticated connections.
Pricing
Free for every approved organization.
Fraud reports are never billed, whether single or batch, real time or in the background. Each case you file adds to what every connected organization can see.
Frequently asked questions
What if I do not know the person’s RDCPASS ID?+
Report them by passport, CENI voter card, driving licence or national ID — foreign passports included. You can also use their name, date of birth, nationality and phone number. An RDCPASS ID gives the fastest correlation.
Can I report a company, or a case outside the DRC?+
Yes. Report a Congolese company by RCCM, ID NAT or NIF, and a foreign one by name, registration number and country. State where the fraud happened and the loss in its own currency.
Can I file a report without knowing who did it, or without naming the victim?+
Yes. A report can name the suspect, the victims, both or neither — for example a scam website with no known author. A victim who asked not to be named can be reported as anonymous. The more parties you identify, the more the case protects others.
Will the victim of a fraud be penalised?+
No. A victim is never flagged by AML & CTF Screening and their credit score never changes. Other services only raise an identity-fraud alert, so lenders verify the person more carefully before acting on their identity.
What happens after I file a report?+
An RDCPASS investigator reviews the case and compares it with other reports. It is then confirmed, dismissed, or referred to the competent judicial, police or financial intelligence authorities. You are notified at each step.
Should I tell the person that a report was filed?+
No. Stick to facts rather than opinions, and never inform the subject. This matters most in money laundering and terrorist financing cases.
Can I try it before going live?+
Yes. The sandbox is free and behaves like production, using synthetic test identities.
Related products
AML & CTF Screening
Screen people and companies before you onboard them, then keep watching.
Learn moreCredit Scoring
Assess applicants who have no bank credit history, with their consent.
Learn moreKYC Validation
Verify a person against their certified RDCPASS account and receive the data you are approved for.
Learn moreStart using Fraud Reporting
Building and testing in the sandbox is free. You go live once your business and application have passed due diligence.