---
title: "Complete a 2FA reset"
method: POST
path: "/sca/factors/reset/{resetId}/complete"
tags: ["Strong Customer Authentication"]
---

# Complete a 2FA reset

`POST /sca/factors/reset/{resetId}/complete`

Complete a 2FA reset once liveness has passed, clearing the lost factor so
the customer can re-enroll.

For an `SMS_OTP` reset, supply the new `mobile` number in the body — completing
the reset enrolls it as the customer's number. Other factors need no body.

This endpoint is only meaningful for customers in a region where SCA is required (e.g. EU). For customers outside SCA-regulated regions, this returns `409`.

## Request body

- TwoFactorResetCompleteRequest — Optional body for completing a 2FA reset. Only needed when resetting the `SMS_OTP` factor to a new phone number; omit the body entirely otherwise.
  - `mobile` object — For an `SMS_OTP` reset, the new mobile number to enroll as the customer completes the reset. Required for an `SMS_OTP` reset; ignored for `TOTP` / `PASSKEY` resets.
    - `countryCode` string, required — The country dialing code, including the leading `+`.
    - `number` string, required — The national subscriber number, without the country code.

## Response `204`

Reset completed; no content is returned.

## Other responses

- `400` — Reset not ready (liveness not yet passed)
- `401` — Unauthorized
- `404` — Customer or reset not found
- `409` — SCA is not required for this customer.
- `500` — Internal service error

---

[API](https://skmtc.net/stainless-api/apis/grid-api.md) · [All operations](https://skmtc.net/stainless-api/apis/grid-api/llms.txt) · [OpenAPI document](https://skmtc-service-staging.skmtc.workers.dev/v1/apis/stainless-api/grid-api/versions/151f2d9bad9c/schema)