Solution · ITMX CFR API
CFR Fast-Track
Connect every ITMX CFR API, freeze fraud funds while they are still moving, and go live on time.
- On time
- Day-one ready
- Audit-ready


The 2-Minute Problem
Fraudsters move money faster than banks can find out.
~2 min
for stolen funds to leave the first mule account
~18 hrs
before the victim notices and reports it
114,000 THB
average loss per case (CFR data, Jan–Jun 2025)
Since 13 Apr 2025, banks also share liability for fraud losses unless they can prove they met BOT standards. A freeze is not enough without the evidence.
Sources: Bank of Thailand, BOT Symposium 2025, via THE STANDARD (20 Sep 2025) · Bank of Thailand, progress on tackling financial fraud (19 Aug 2025) · Bank of Thailand, Press Release No. 15/2025 (28 Apr 2025)
Code Is Not the Bottleneck
Most CFR API projects are not slowed down by coding. They get stuck at these four points.
Core Banking APIs
Your systems must be able to hold, extend and release funds. Many banks do not have these APIs yet, and the core team's queue is full.
6 core-side APIsNITMX Onboarding
CSR, certificates, firewall, IP allow-list and API Hub registration take months.
~2–3 monthsITMX Test Windows
Smoke tests with ITMX (SIT / UAT / NFT) run in fixed windows, with the year-end bank freeze in between.
Miss one = wait for the next20 CFR APIs + Security
Outbound and inbound calls, callbacks, mTLS, JWS sign / verify and multi-hop money-trail reconciliation.
20 APIs
CFR Fast-Track
A ready-built CFR API layer, delivered end to end, so your bank does not start from scratch.
Your bank
- Call Center
- Fraud Ops
- Core Banking
- SSO / Email / SIEM
CFR Fast-Track by Sirisoft
- Case Portal
- CFR Connector
- Core Banking Adapter
- Control & Evidence
ITMX
- NITMX API Hub
- ITMX CFR
- Receiving banks
On time
- Plan tied to ITMX test windows from day one
- Connector and screens ready to use
- NITMX onboarding runs in parallel with development
Day-one ready
- Call center opens a case in one click, no re-keying
- Cases received and holds placed automatically, 24/7
- Failures retry on their own and alert the team
Audit-ready
- Hold evidence for every case, measured against the time target
- Tamper-evident audit log kept for 7 years
- Export reports for auditors on demand
See It in Action
Sample screens from CFR Fast-Track, as used by the call center, Fraud Ops and auditors.
- Customer Search
- Statement from Core
- Pre-send Checks
- Submit to ITMX (MTE) in one click
- Money Trail Map
- Master & Sub Cases
- Case Timeline
- Reconciliation alert
- SLA Dashboard
- Scheduled CSV/XLSX Reports
- Tamper-evident Audit Log (hash-chain, 7 years)
- Maker-Checker
- Auto Retry (same reference ID)
- Field Validation
- Email & In-app Alert
- Recovery Notice
Sample screens. All data is fictional. Screens and fields can be adjusted after requirements gathering.
What We Deliver, What You Prepare
A clear split from day one, so your IT team can focus fully on the core side.
Sirisoft delivers
- CFR Connector with all 20 APIs, callbacks, retry and reconciliation
- Core Banking Adapter and fraud-type mapping
- Case Portal, money trail, SLA dashboard, alerts and audit log
- Support for NITMX onboarding and smoke tests with ITMX
- SIT, plus support for UAT, NFT, VA scan and DR test
- Full documentation, training and knowledge transfer
- 1-month hypercare and 12-month warranty
Your bank prepares
- 6 Core Banking APIsaccount, statement, create / extend / release hold, hold status
- PlatformOpenShift/K8s, database, CI/CD to bank standards
- NITMXFI/CFR code, certificate, endpoint, firewall
- Shared servicesSSO, SMTP, logging/SIEM, test data
Start with a 10‑Day Readiness Check
Know within 10 working days whether your bank will make the deadline, and what to unblock first.
We check
- Core Banking API readiness
- NITMX onboarding status
- Infrastructure and security
- ITMX deadlines and freeze periods
- Team and owners
You get
- An on track / at risk / off track assessment
- A list of blockers, each with an owner
- A go-live plan with real dates
- NITMX onboarding paperwork started during the check
Frequently Asked Questions
Can our own IT team build this?
Yes. But what usually causes delays is the core APIs, NITMX onboarding and test windows, not the code. Your IT team can focus fully on the core side while Sirisoft takes care of the whole CFR layer.
Can we keep using ITMX Web?
Yes, until your group's deadline. Until then every case waits for someone to key it in. Nights and weekends are the slowest, and that is exactly when you need to prove the hold was on time.
There are fewer than 7 months left. Can we still make it?
Yes, if you kick off by mid-November, because the connector and screens are already built. The Readiness Check tells you, with dates, where you are blocked.
We have already connected the CFR API. Is this still useful?
Yes. Sirisoft can add the SLA dashboard, audit log, auto-retry and alerts on top of your existing connector without replacing it.
Our core banking vendor has already proposed something. Will this overlap?
No. The core vendor builds the 6 core-side APIs to spec. Sirisoft builds the entire CFR layer.
Where does it run?
On your bank's infrastructure (OpenShift / Kubernetes), with database and CI/CD to your bank's standards.