1. Settings
  • Cobre Docs
    • Cobre Intro
      • Welcome
      • Get started
      • Products
        • Local Payments
          • Local Payments with Cobre
          • Payouts
            • Colombia
              • Money Movements with Bre-B
              • Money Movements with Cobre Fast Pay
            • Mexico
              • Money Movements with CLABEs and SPEI Cards
            • Multi-region
              • Money Movements Scheduler
          • Payins
            • Colombia
              • Checkout
              • Request to Pay (R2P)
              • Static Bre-B Keys
            • México
              • CLABE-backed Cobre Balances
              • Account Reference – Virtual CLABEs
          • Other feaures
            • Bulk Money Movements
            • Enabling Approval Workflows (Maker–Checker)
        • Cross Border Payments
          • Cross Border Payments with Cobre
        • Stablecoins
          • Global Payouts in Stablecoins
        • Connect
          • Connect bank accounts with Cobre
      • Other features
        • Account Verification
        • Notifications and subcriptions
        • Security at Cobre
        • Performance and throughput
    • Portal
      • Introduction & Quick Start
      • Authentication in Portal
      • Troubleshooting & Support
      • Movements
        • Local Money Movement
        • Unitary Payment Initiation
        • Bulk Money Movement Initiation
        • Approval Process (Maker-Checker)
        • Scheduler
        • Cross-Border Money Movements
        • Payment Links
      • Transactions
        • Transactions
      • Accounts
        • Account and Balance Management
      • Counterparties
        • Counterparties
      • Reports
        • Reports & Reconciliation
      • Settings
        • Users and Roles Management
        • Security and Control
      • Developers
        • Subscription management
    • Developers
      • API Guides
        • Quick Start
        • Authentication
        • Cobre Balances
          • Managing Cobre Balances
          • Account Linkeage
        • Connect Accounts
          • Managing Connect Accounts
        • Counterparties
          • Managing Counterparties
        • Local Payments
          • Money Movement
          • Payouts
            • Colombia
              • Fast Pay & ACH
              • Bre-B
            • Mexico
              • SPEI
            • Cross-Region
              • Bulk Money Movements
              • Bulk Money Movements Approval
              • Money Movement Scheduler
          • Payins
            • Colombia
              • Cobre Keys with Bre-B
              • Checkout
              • Direct Link
              • Direct Debit
            • Mexico
              • Account Reference – Virtual CLABEs
        • Cross Border Payments
          • Cross Border Payments
          • Create Fx Quotes
          • Create a Cross Boder Money Movement
          • Fund your global Cobre Balance
        • Cross Features
          • Reports
          • Report Scheduler
          • Evidence API
          • Account Verification
          • Notifications & Subscriptions
        • Error Handling
          • Error Dictionary
        • Testing
          • General Testing
          • Testing Cases
      • API Explorer
        • Authentication API
          • Authentication
        • Cobre Balances
          • Create a Cobre Balance
          • Obtain all Accounts
          • Obtain one Account
          • Update an Account
          • Close a Cobre Balance
          • Obtain one Account Transactions
          • Obtain one Transaction
          • Obtain all Client Transactions
          • Obtain Account Daily Balance History
          • Assign or Change Primary Account
          • Unlinking Primary Account
        • Connect Accounts
          • Connect an Account
          • Obtain one Connected Account
          • Obtain all Connected Accounts
          • Obtain one Transaction
          • Obtain all Account Transactions
          • Obtain all Client Transactions
          • Update an account
        • Account Verifications
          • Create an Account Verification
          • Obtail all Account Verifications
        • Account References
          • Create an Account Reference
          • List one Account Reference
          • List all Account References
          • Delete an Account References
        • Counterparties
          • Account Debit Registration
            • Register a Counterparty for Direct Debit
            • Obtain all Registrations
            • Obtain one Registration
          • Create a Counterparty
          • Obtain one Counterparty
          • Obtain all Counterparties
          • Delete a Counterparty
        • Money Movements
          • Create a Money Movement
          • Obtain one Money Movement
          • Obtain all Money Movements
          • Return a Money Movement
        • Money movement Approvals
          • Approve a Money Movement
          • List all Money Movement Approvals
        • Money Movement Scheduler
          • Create a Money Movement Scheduler
          • List all Money Movement Schedulers
          • Cancel an Active Scheduler
        • Bulk Money Movement
          • Create a Bulk Money Movement
          • List all Bulk Money Movements
          • List one Bulk Money Movement
        • Bulk Money Movement Approvals
          • Bulk Money Movements Decision
        • Cobre Keys
          • Create a Key
          • Obtain all Keys
          • Obtain one Key
          • Cancel a Key
          • Block or Reactivate Keys
        • Cross Border
          • Create a FX Quote
          • Obtain one FX Quote
          • Obtain all the FX Quotes
          • Create a Cross Border Money Movement
          • Obtain one Cross Border Money Movement
          • Obtain all the Cross Border Money Movements
        • Checkout
          • Create a Checkout
          • Obtain one Checkout
          • Obtain all Checkouts
          • Desactivate a Checkout
        • Evidence API
          • Evidence Requests
            • Obtain Evidence Request
            • Search Evidence Requests
          • Evidence Documents
            • Generate Upload Links
            • Generate Download Link
          • Evidence Information
            • Submit Evidence Information
        • Report Scheduler
          • Create a Report Scheduler
          • Obtain all Reports Schedulers
          • Delete a Report Scheduler
        • Reports
          • Create a Report
          • Obtain all Reports
          • Generate Download Link for Selected Reports
          • Create a Cobre Balance Statement
        • Notifications & Subscriptions
          • Subscribe to Events
          • Obtain all Subcriptions
          • Delete a Subscription
          • List all Available Events
      • Platform Catalogs
        • Mexican Bank Codes
        • Colombian Bank Codes
        • Transaction Types
        • Account Providers
      • Reports Layout
        • Money Movements Layout
          • All Money Movements (CSV)
          • All Money Movements (JSON)
          • SPEI Money Movements (CSV)
          • LEGACY Money Movements (CSV)
        • Transactions Layout
          • All Transactions (CSV)
          • All Transactions (JSON)
          • Cobre Balance Statement (PDF)
        • Counterparties Layout
          • All Counterparties (CSV)
        • Multicash Layout
          • Multicash Header (TXT)
          • Multicash Detail (TXT)
      • Testing APIs
        • Create a Transaction Adjustment
        • Change a Money Movement Status
        • Transaction Adjustment (QA)
        • Change Money Movement Status (QA)
    • Schemas
      • Counterparties
        • RequestBodies
          • Counterparty-request
        • Colombia
          • PayOut
            • Counterparty | Create Metadata Type CC (CO)
            • Counterparty | Response Metadata Type CC (CO)
            • Counterparty | Create Metadata Type CH (CO)
            • Counterparty | Response Metadata Type CH (CO)
            • Counterparty | Create Metadata Type DP (CO)
            • Counterparty | Response Metadata Type DP (CO)
            • Counterparty | Create Metadata Type Breb Key (CO)
            • Counterparty | Response Metadata Type Breb Key (CO)
            • Counterparty | Create Metadata Type Cobre Balance (CO)
            • Counterparty | Response Metadata Type Cobre Balance (CO)
          • PayIn
            • Counterparty | Create Metadata Type r2p (CO)
            • Counterparty | Response Metadata Type r2p (CO)
            • Counterparty | Create Metadata Type r2p Breb (CO)
            • Counterparty | Response Metadata Type r2p Breb (CO)
          • Secondary Counterparty
            • Secondary Counterparty Create Request (CO)
            • Secondary Counterparty Create Response (CO)
            • Secondary Counterparty Create Metadata Type NP (CO)
            • Secondary Counterparty Response Metadata Type NP (CO)
            • Secondary Counterparty Request Metadata Type LE
            • Secondary Counterparty Response Metadata Type LE (CO)
          • Direct Debit
            • Direct Debit Registration | Create
            • Direct Debit Registration | Response
            • Direct Debit Registration | List All Items
          • Counterparty | Create Request (CO)
          • Counterparty | Create Response (CO)
        • Mexico
          • PayOut
            • Counterparty | Create Metadata Type Clabe (MX)
            • Counterparty | Response Metadata Type Clabe (MX)
            • Counterparty | Create Metadata Type SPEI Card (MX)
            • Counterparty | Response Metadata Type SPEI Card (MX)
          • Counterparty | Create Request (MX)
          • Counterparty | Create Response (MX)
        • Global
        • Counterparty | List All Items
        • MEX Money Movement Return
      • Transactions
        • Global
          • Transaction | Debit Cross Border
          • Transaction | Credit Cross Border
        • Colombia
          • Debit
            • Transaction | Debit FI (CO) (col_debit)
            • Transaction | Debit Cobre Balance (CO)
            • Transaction | Debit Breb (CO) (breb_debit)
          • Credit
            • Transaction | Credit Direct Debit (CO) (dd_credit)
            • Transaction | Rejected Breb (breb_rejected)
            • Transaction | Credit Top Up (CO) (col_top_up_credit)
            • Transaction | Credit FI (CO) (col_credit)
            • Transaction | Credit Cobre Balance (CO) (col_cb_credit)
            • Transaction | Credit Breb (CO) (breb_credit)
            • Transaction | Credit r2p (r2p_credit)
            • Transaction | Credit r2p Breb (CO) (r2p_breb_credit)
          • Transaction | Connect Obtain (CO)
          • Transaction | Cobre Balance Obtain (CO)
        • Mexico
          • Debit
            • Transaction | Debit FI (MX) (mex_debit)
            • Transaction | Debit SPEI (MX) (spei_debit)
            • Transaction | Debit Internal SPEI (MX)
          • Credit
            • Transaction | Credit FI (MX)
            • Transaction | Credit SPEI (MX)
            • Transaction | Credit Internal SPEI (MX)
          • Transaction | Connect Obtain (MX)
          • Transaction | Cobre Balance Obtain (MX)
          • Transaction | Return SPEI (MX)
        • Transactions | Connect List All Items
        • Transactions | Cobre Balance List All Items
        • Transaction | Debit Misc
        • Transaction | Credit Misc
        • Transaction | Adjustment Debit
        • Transaction | Adjustment Credit
      • Authentication
        • Authentication | Request
        • Authentication | Response
      • Cobre Keys
        • Colombia
          • Cobre Key | Create Request
          • Cobre Key | Create Response
          • Cobre Key | Obtain Response
          • Cobre Key | Reactive Request
      • Money Movements
        • Approvals
          • Money Movement Approvals | Create Request
          • Money Movement Approvals | Create Response
          • Money Movement Approvals | List All Items
        • Mexico
          • PayOut
            • Money Movement | Create Metadata Type SPEI
            • Money Movement | Response Metadata Type SPEI
          • Return
            • Money Movement Return | Create Request
            • Money Movement Return | Response Medatada Type SPEI
            • Money Movement Return | Create Response
        • Colombia
          • PayOut
            • Money Movement | Create Metadata Type Fast Pay
            • Money Movement | Response Metadata Type Fast Pay
            • Money Movement | Create Metadata Type ACH
            • Money Movement | Response Metadata Type ACH
            • Money Movement | Create Metadata Type Breb
            • Money Movement | Response Metadata Type ACH
          • PayIn
            • Money Movement Direct Link | Create Metadata Rail PSE
            • Money Movement Direct Link | Response Metadata Rail PSE
            • Money Movement Direct Link | Response Metadata Rail Bancolombia
            • Money Movement Direct Link | Response Metadata Rail Nequi
            • Money Movement Direct Link | Create Metadata Rail r2p Breb
            • Money Movement Direct Link | Response Metadata Rail r2p Breb
          • Direct Debit
            • Money Movement Direct Debit | Create Metadata
            • Money Movement Direct Debit | Response Metadata
        • Money Movement | Create Response
        • Money Movement | List All Items
      • Accounts
        • Account Verification
          • Mexico
            • Account Verification Create Metadata Type mex_acc_details_1
            • Account Verification Response Metadata Type mex_acc_details_1
            • Account Verification Create Request
            • Account Verification Create Response
            • Account Verification Create Metadata Type mex_acc_ownership_1
            • Account Verification Response Metadata Type mex_acc_ownership_1
            • Account Verifications List All Items
          • Colombia
            • Account Verification Response Metadata Type col_key_details_1
            • Account Verification Create Metadata Type col_key_details_1
            • Account Verification Create Metadata Type col_key_ownership_1
            • Account Verification Response Metadata Type col_key_ownership_1
        • Account References
          • Account References Request
          • Account Reference Response
          • List all account references
        • Cobre Balances
          • Mexico
            • Cobre Balance | Create Metadata (MX)
            • Cobre Balance | Create Response (MX)
          • Colombia
            • Cobre Balance | Create Metadata (CO)
            • Cobre Balance | Create Response (CO)
          • Global
            • Cobre Balance | Create Metadata (Global)
            • Cobre Balance | Create Response (Global)
          • Cobre Balance | Create Request
          • Cobre Balances | List All Items
          • Account_request_PATCH
          • Account_request_CONNECT_PATCH
        • Daily Balance
          • Daily Balance Obtain Response
          • Daily Balance Historiy List All Items
        • Account Connect
          • Mexico
            • Account Conect | Create Metadata (MX)
            • Account Connect | Response Metadata (MX)
          • Colombia
            • Account Conect | Create Metadata (CO)
            • Account Connect | Response Metadata (CO)
          • Account Connect | Create Request
          • Accounts Connect | List All Items
      • Bulk Money Movement
        • Bulk Money Movement | Obtain Response
        • Bulk Money Movement Decision | Create Request
        • Bulk Money Movements | List All Items
      • Money Movement Scheduler
        • Money Movement Scheduler | Create Request
        • Money Movement Scheduler | Create Response
        • Money Movement Scheduler | List All Items
      • Checkout
        • Colombia
          • Checkout | Create Request
          • Checkout | Create Response
          • Checkout | List All Items
          • Checkout | Delete
      • Notifications
        • Subscription | Create Request
        • Subscription | Create Response
        • Subscription | List All Items
        • Subscribable Events | List All Items
        • Subscribable Events | Metadata
      • Evidence Request
        • Schemas
          • Error
          • Evidence Request
          • Document Type
          • Evidence Id
          • Upload Intent
          • Evidence Request Id
          • Evidence Request Status
          • Information Type
          • Information
          • Evidence
          • Information Status
          • Document
          • Document Status
          • Headers
        • RequestBodies
          • UploadIntentRequest
      • Cross Border
        • Cross Border Money Movement
          • Cross Border Money Movement Create Request
          • Cross Border Money Movement Create Response
          • Cross Border Money Movement Obtain Response
          • Cross Border Money Movements List All Items
        • FX Quote
          • FX Static Quote
            • FX Quote Static | Create Request
            • FX Quote Static | Create Response
          • FX Rolling Quote
            • FX Quote Rolling | Create Request
            • FX Quote Rolling | Create Response
          • FX Quote | Create Request
          • FX Quote | List All Items
          • FX Quote | Metadata Quote Tiers
          • FX Quote | Metadata Penalization Tier
          • FX Quote | Metadata Fees Breakdown
      • Reports
        • Download
          • Report Download Create Request
          • Report Download Create Response
        • Reports Create Request
        • Reports Create Response
        • Reportes Create Metadata
        • Request Body Reports
        • Reports List All Items
        • Reports Object
      • Error Model
        • Error-model
      • Report Scheduler
        • Report Schedulers | Create Request
        • Report Schedulers | Create Response
  1. Settings

Security and Control

The Security and Control module gives you the tools to protect your financial operations and enforce internal policies. From multi-factor authentication to transaction limits, these features help you prevent fraud, meet compliance requirements, and maintain accountability across your team.

Multi-Factor Authentication (MFA)#

MFA adds a critical layer of protection to your account. Every user must complete MFA verification for login and sensitive actions—there are no exceptions, and no way to disable it.

How MFA Works#

Cobre uses time-based one-time passcodes (TOTP) generated by authenticator apps like Google Authenticator, Authy, or 1Password. Each code is valid for 30 seconds and can only be used once.

Setting Up MFA#

When you first log in, the portal will walk you through MFA setup before granting access:
1.
Enter your email and password
2.
Check your email for a verification code and enter it
3.
Open your authenticator app and scan the QR code (or enter the setup key manually)
4.
Enter the 6-digit code from your app to confirm
That's it—MFA is now active on your account.

Actions That Require MFA#

MFA verification is required for high-impact operations:
ActionWhen MFA is Required
LoginEvery session
Initiate single paymentWhen submitting
Initiate bulk paymentWhen submitting the file
Approve or reject paymentBefore confirming
Deactivate Dual ControlBefore saving
Change number of approversBefore saving
Configure operational limitsBefore saving

Lost Access to Your Authenticator?#

If you can't access your authenticator app, create a support ticket. After the reset, you'll be prompted to configure MFA again at your next login.

Dual Control#

Dual Control ensures that no single person can both initiate and approve a sensitive action. When enabled, someone else on your team must approve any payment you create—and vice versa.
This maker-checker separation is a standard treasury control that reduces fraud risk and creates clear accountability.

Current Status#

You'll find Dual Control settings under Settings > Security. The interface shows:
A toggle to enable or disable the feature
The last update timestamp
Which actions require dual control (currently: Movements approvals)

How to Configure Dual Control#

To enable: Toggle the switch ON. No MFA required—it's a security upgrade.
To disable: Toggle the switch OFF and complete MFA verification. The extra step prevents unauthorized weakening of your security controls.

What Changes When Dual Control is Active#

When you enable Dual Control:
You cannot approve payments you initiated
All approvals must come from a different user
Admins can approve transactions initiated by other users, but not their own
Single payments, bulk payments, and other money movement operations all follow this rule

Multiple Approvers#

For transactions that need more than just one sign-off, you can require multiple approvers. This is useful for high-value payments, regulatory compliance, or internal governance policies.

Current Status#

The Approvers section shows:
The current number of required approvers (dropdown from 1 to 5)
Last update timestamp

How to Configure#

1.
Go to Settings > Security > Approvers
2.
Select the number of approvers from the dropdown (1–5)
3.
Complete MFA verification
4.
Save your changes

How Multiple Approvers Works#

Approvals can happen in any order—there's no required sequence
Each approver must be a unique user (no double-approving)
A transaction stays pending until it reaches the required number of approvals
Transactions keep their original approval requirements even if you change the rule later
Example: If you require 3 approvers and then change it to 2, existing pending transactions still need their original 3 approvals.

Operational Limits#

Operational Limits let you cap daily inflows and outflows by currency. This helps you stay within internal policies, manage risk exposure, and catch unusual activity before it becomes a problem.

Current Status#

Under Settings > Operations Control > Limits, you'll see:
How many limits are currently active (e.g., "2 of 4 active limits")
Separate controls for Daily Outflows and Daily Inflows
Currency-specific toggles and amounts for COP and MXN

What's Covered#

Daily Outflows include:
Unit payments (single transfers)
Bulk payments
International payments
Daily Inflows include:
Top-ups
Payment requests

How to Configure Limits#

1.
Navigate to Settings > Operations Control > Limits
2.
For each limit you want to set:
Toggle the switch ON
Enter the maximum daily amount
3.
Complete MFA verification
4.
Save your changes
To remove a limit, toggle it OFF and save.

How Limits Work#

The system tracks three values for each active limit:
ValueDescription
Limit SetThe maximum you've configured
Limit UsedHow much has been processed today
Limit AvailableWhat's left (Limit Set minus Limit Used)
Limits reset daily. Any transaction that would exceed your remaining limit will be blocked, and you'll see a notification explaining why.
Tip: Set limits based on your typical daily operations, with some buffer for normal variations. You can always adjust them as your business needs change.

Frequently Asked Questions#

Is MFA required for all users?
Yes. MFA is mandatory and cannot be disabled for any user.
Can I use both TOTP and Passkeys?
Not yet. Support for multiple authentication methods is planned for a future release.
Can admins approve their own payments?
No. When Dual Control is enabled, no user—including admins—can approve their own transactions.
Can I define a specific order for approvals?
No. Approvals can be completed in any order by any authorized approver.
What happens if a payment exceeds the daily limit?
The payment is blocked and you'll see a notification. You can either wait for the next day's reset or adjust your limits if you have permission.
Do pending transactions follow old or new approval rules?
Existing transactions keep their original approval requirements. Only new transactions follow updated rules.

Best Practices#

Start with Dual Control. It's the single most effective control for preventing unauthorized transactions. Enable it before processing any significant volume.
Match approver count to risk. One approver works for routine payments. High-value or sensitive transactions benefit from 2-3 approvers.
Set realistic limits. Review your typical daily volumes and set limits that catch anomalies without blocking normal operations.
Review settings regularly. As your team and transaction patterns change, revisit your security configuration to make sure it still fits your needs.
Modified at 2025-12-24 15:46:13
Previous
Users and Roles Management
Next
Subscription management
Built with