Step 1: Create a Customer and transfer

Step 1A: Obtain an application access token

Your application will exchange its client_id, client_secret, and grant_type=client_credentials for an application access token. An application access token can then be used to make calls to the Dwolla API on behalf of your application.

Step 1B: Create a Customer

Create a Customer for each user you’d like to transfer funds from. At a minimum, provide the user’s full name, and email address to create the Customer. More detail is available in API docs. For the purpose of this guide we’ll be creating the Unverified Customer type.

Content-Type: application/vnd.dwolla.v1.hal+json
Accept: application/vnd.dwolla.v1.hal+json
Authorization: Bearer 0Sn0W6kzNicvoWhDbQcVSKLRUpGjIdlPSEYyrHqrDDoRnQwE7Q

"firstName": "Joe",
"lastName": "Buyer",
"email": "",
"ipAddress": ""

HTTP/1.1 201 Created
request_body = {
  :firstName => 'Joe',
  :lastName => 'Buyer',
  :email => '',
  :ipAddress => ''

# Using DwollaV2 - (Recommended)
new_customer = "customers", request_body
new_customer.response_headers[:location] # => ""

var requestBody = {
  firstName: 'Joe',
  lastName: 'Buyer',
  email: '',
  ipAddress: ''

  .post('customers', requestBody)
  .then(function(res) {
    res.headers.get('location'); // => ''
request_body = {
  'firstName': 'Joe',
  'lastName': 'Buyer',
  'email': '',
  'ipAddress': ''

# Using dwollav2 - (Recommended)
new_customer ='customers', request_body)
new_customer.headers['location'] # => ''

$customersApi = new DwollaSwagger\CustomersApi($apiClient);

$new_customer = $customersApi->create([
  'firstName' => 'Joe',
  'lastName' => 'Buyer',
  'email' => '',
  'ipAddress' => ''

print($new_customer); # =>
CustomersApi cApi = new CustomersApi(a);

CreateCustomer newCustomerData = new CreateCustomer();


try {
    Unit$ r = cApi.create(myNewCust);
    System.out.println(r.getLocationHeader()); // =>
catch (Exception e) {
    System.out.println("Something's up!");

When the Customer is created, you’ll receive the Customer URL in the location header.

  1. Provide the IP address of the end-user accessing your application as the `ipAddress` parameter. This enhances fraud detection and tracking.

Step 1C: Attach a funding source to the Customer

Next you will attach a verified funding source to the Customer, which will be done using Instant Account Verification (IAV). This method will give the Customer the ability to add and verify their bank account in a matter of seconds by authenticating with their online banking credentials. Once the Customer reaches the page in your application to add a bank account you’ll ask Dwolla’s server to generate an IAV token.

Generate a single-use IAV token for our Customer:

curl -X POST
\ -H "Content-Type: application/vnd.dwolla.v1.hal+json"
\ -H "Accept: application/vnd.dwolla.v1.hal+json"
\ -H "Authorization: Bearer 0Sn0W6kzNicvoWhDbQcVSKLRUpGjIdlPSEYyrHqrDDoRnQwE7Q"
\ ""

HTTP/1.1 200 OK
customer_url = ''

# Using DwollaV2 - (Recommended)
customer = "#{customer_url}/iav-token"
customer.token # => "lr0Ax1zwIpeXXt8sJDiVXjPbwEeGO6QKFWBIaKvnFG0Sm2j7vL"
// Using dwolla-v2 -
var customerUrl = '';

  .then(function(res) {
    res.body.token; // => 'lr0Ax1zwIpeXXt8sJDiVXjPbwEeGO6QKFWBIaKvnFG0Sm2j7vL'
customer_url = ''

# Using dwollav2 - (Recommended)
customer ='%s/iav-token' % customer_url)
customer.body['token'] # => 'lr0Ax1zwIpeXXt8sJDiVXjPbwEeGO6QKFWBIaKvnFG0Sm2j7vL'
$customersApi = new DwollaSwagger\CustomersApi($apiClient);

$fsToken = $customersApi->getCustomerIavToken("");
$fsToken->token; # => "lr0Ax1zwIpeXXt8sJDiVXjPbwEeGO6QKFWBIaKvnFG0Sm2j7vL"

Then, you’ll pass this single-use IAV token to the client-side of your application where it will be used in the JavaScript function dwolla.iav.start. This token will be used to authenticate the request asking Dwolla to render the IAV flow. Before calling this function you’ll want to include dwolla.js in the HEAD of your page.

<script src=""></script>

Next, you’ll add in a container to the body of your page where you want to render the IAV flow.

<div id="mainContainer">
  <input type="button" id="start" value="Add Bank">

<div id="iavContainer"></div>

Now that you have dwolla.js initialized on the page and the container created where you’ll render the IAV flow, you’ll create a JavaScript function that responds to the Customer clicking the “Add bank” button on your page. Once the Customer clicks “Add Bank”, your application will call dwolla.iav.start() passing in the following arguments: a string value of your single-use IAV token, options such as the iavContainer element where IAV will render, and a callback function that will handle any error or response.

<script type="text/javascript">
$('#start').click(function() {
  var iavToken = '4adF858jPeQ9RnojMHdqSD2KwsvmhO7Ti7cI5woOiBGCpH5krY';
  dwolla.iav.start(iavToken, {
          container: 'iavContainer',
          stylesheets: [
          microDeposits: 'true',
          fallbackToMicroDeposits: (fallbackToMicroDeposits.value === 'true')
        }, function(err, res) {
    console.log('Error: ' + JSON.stringify(err) + ' -- Response: ' + JSON.stringify(res));

The customer will complete the IAV flow by authenticating with their online banking credentials. You’ll know their bank account was successfully added and verified if you receive a JSON response in your callback that includes a link to the newly created funding source.

  • Sample response: {"_links":{"funding-source":{"href":""}}}

Great! The funding source should now be verified.

Production: Operational

Financial institutions play an important role in the Dwolla network.

Dwolla, Inc. is an agent of Veridian Credit Union and all funds associated with your account in our network are held in one or more pooled accounts at Veridian Credit Union. These funds may not be eligible for share insurance by the National Credit Union Share Insurance Fund. Dwolla, Inc. is the operator of a software platform that communicates user instructions for funds transfers to Veridian Credit Union.