Skip to content

Verify PIN
deprecated

Request

To clear a PIN challenge listed in a OTT.

Notes:

  1. User is required to create pin before the verification can be successful.
  2. Rate limit may be applied if there are 5 continuous unsuccessful attempts and OTT creation will be blocked for 15 minutes.
Security
UserToken
Headers
One-Time-Tokenstringrequired

Text value of a OTT.

Acceptstringrequired
Value:"application/jose+json"
Example:application/jose+json
X-TW-JOSE-Methodstringrequired

JOSE method identifier.

Value:"jwe"
Example:jwe
X-External-Correlation-Idstring, (uuid), <= 36 characters

Optional UUID for correlating requests across systems. If provided, Wise echoes it back in the response. Maximum 36 characters. Learn more.

Example:f47ac10b-58cc-4372-a567-0e02b2c3d479
Bodyapplication/jose+jsonrequired
string

JWE-encrypted string. The payload before encryption should contain a pin field.

Original payload:

{"pin": "1234"}

Encoded (JWE):

eyJlbmMiOiJBMjU2R0NNIiwi...
curl -i -X POST \
  https://api.wise-sandbox.com/v1/one-time-token/pin/verify \
  -H 'Authorization: Bearer <YOUR_TOKEN_HERE>' \
  -H 'Accept: application/jose+json' \
  -H 'Accept-Encoding: identity' \
  -H 'Content-Type: application/jose+json' \
  -H 'Content-Encoding: identity' \
  -H 'X-TW-JOSE-Method: jwe' \
  -H 'One-Time-Token: <one time token>' \
  -d 'eyJlbmMiOiJBMjU2R0NNIiwi...'

Responses

Encrypted one time token status.

Headers
X-External-Correlation-Idstring, (uuid), <= 36 characters

Echoed back when X-External-Correlation-Id was included in the request. Learn more.

Example:"f47ac10b-58cc-4372-a567-0e02b2c3d479"
x-trace-idstring

Unique trace identifier assigned by Wise. Useful when contacting support about a specific request.

Example:"fba501b6d453b96789f52338f019341f"
Bodyapplication/jose+json
string

JWE-encrypted string. Please refer to our JOSE guide on how to decrypt this.

When decrypted, the response contains oneTimeTokenProperties with the one time token details.

Response
"eyJlbmMiOiJBMjU2R0NNIiwi..."