# Retrieve Inquiry
source: https://developer.mastercard.com/onboard-risk-check/documentation/use-cases/orc/retrieve-inquiry/index.md

## Using ORC {#using-orc}

The Onboard Risk Check Retrieve Inquiry endpoint should be used once a customer has successfully called the [Initiate Inquiry endpoint](https://developer.mastercard.com/onboard-risk-check/documentation/use-cases/orc/initiate-inquiry/index.md) and received an Inquiry Reference Number (IRN). The IRN is needed to call back and review the results.

IRNs received by submitting an inquiry directly on the user interface are also supported by the Retrieve Inquiry endpoint.

Retrieve Inquiry results will help a customer make quicker, more informed decisions during merchant onboarding. Key data points returned include:

* Cyber Risk rating
  * Overall Cyber Risk score.
  * 9 Security Domain ratings.
* Sanctions Screening
  * Match Status.
  * Relevancy Score.
  * Links to relevant content.
* Business Identity Verification
  * 3 possible returned results on data inputted:
    * Match: Indicates that a match between the input and the database has been found.
    * No Match: Indicates that a match between the input and the database could not be found.
    * Missing: Indicates that an input was either missing from the user or in the database.
  * Business Status: "Active" or "Inactive".  

The IRN will only be available for 30 days. Once expired, a new inquiry will need to be submitted.
Diagram retrieve-inquiry
API Reference: `GET /inquiries/{inquiry_reference_number}`

To get a better understanding of the implementation and related error scenarios of this use case, please refer below sections:

* [Acquirers: Onboard Risk Check API onboarding](https://developer.mastercard.com/onboard-risk-check/tutorial/orc-inquiries/index.md).
* [Acquirers: Code and Formats](https://developer.mastercard.com/onboard-risk-check/documentation/code-and-formats/orc/index.md).

<br />

## Using MATCH {#using-match}

The Onboard Risk Check Retrieve Inquiry endpoint should be used once a customer has successfully submitted an inquiry through [MATCH](https://developer.mastercard.com/onboard-risk-check/documentation/glossary/index.md) and has received an IRN. All MATCH inquiry methods can be used to create IRN and will be supported in the Retrieve Inquiry endpoint.

**Key Points to Note:**

* The data returned through this call is specific to ORC and is in addition to the data a customer receives from the [MATCH](https://developer.mastercard.com/onboard-risk-check/documentation/glossary/index.md) system. The result for the MATCH system will not be made available through this API call.

* To use this function, users must enable this function to allow/opt-in MATCH inquiries to be run through Onboard Risk Check. The red boundary in the image below highlights the MATCH Configuration button available in the ORC UI used to allow MATCH inquiries through ORC.   

  ![](https://static.developer.mastercard.com/content/onboard-risk-check/uploads/Match_Config.png)


  Retrieve Inquiry results will help a customer make quicker, more informed decisions during merchant onboarding. Key data points returned include:

* Cyber Risk rating

  * Overall Cyber Risk score.
  * 9 Security Domain ratings.
* Sanctions Screening

  * Match Status.
  * Relevancy Score.
  * Links to relevant content.
* Business Identity

  * The Business Identity option is currently not available for MATCH inquiries. When making a Business Identity Verification inquiry while opted into MATCH, please be sure to provide the following details for maximum accuracy in your results: Business Name and Business Registration Number (BRN) for all businesses and, for US, also include Tax Id and Jurisdiction of Incorporation in addition.   

    The IRN will only be available for 30 days. Once expired, a new inquiry will need to be submitted.

Diagram retrieve-inquiry-match
API Reference: `GET /inquiries/{inquiry_reference_number}`

<br />

Note: Certain inquiry types are prohibited in certain countries. If your business/entity is located in a restricted country for an inquiry type, you will receive "null" in the results for that inquiry type.