When simulating into NEEDS_INFORMATION status, the default underwriting review type required is DEPOSIT_METHOD_1. This will require the merchant to review and update their deposit method information.

Providing an underwriting_review_types value is only allowed when status is NEEDS_INFORMATION.

To require other underwriting review types, you may provide an array of strings. Supported values are:

• BUSINESS_NAME_TIN: require the merchant to review and update their business's legal name and/or TIN value
• BUSINESS_VERIFICATION: require the merchant to upload documents to verify their business registration
• FINANCIAL_1: require the merchant to upload documents to complete a financial review, including processing statements or bank statements
• FINANCIAL_2: require the merchant to upload documents to complete a financial review, including processing statements, bank statements, and financial statements
• DEPOSIT_METHOD_1: require the merchant to update their funding bank account or upload a document, such as a bank letter or voided check
• OWNER_1_NAME_SSN: require the merchant to review and update the first name, last name, and/or SSN for owner #1
• OWNER_2_NAME_SSN: require the merchant to review and update the first name, last name, and/or SSN for owner #2
• OWNER_3_NAME_SSN: require the merchant to review and update the first name, last name, and/or SSN for owner #3
• OWNER_4_NAME_SSN: require the merchant to review and update the first name, last name, and/or SSN for owner #4

If any of the provided underwriting_review_types values are not applicable to the merchant application, a 400 Bad Request will be returned indicating which values were not applicable to the application's merchant type.

For example, if the application has no owner #2 specified, requiring OWNER_2_NAME_SSN will result in a 400 Bad Request.

FINANCIAL_1 and FINANCIAL_2 are mutually exclusive and only one can be chosen as an underwriting review type.

Similarly, if the application's merchant type is INDIVIDUAL and BUSINESS_NAME_TIN is included, a 400 Bad Request will be returned because an individual merchant type application does not collect business name and TIN values.