Sign in

v5

latestOpenAPI 3.1.0Proprietary2026-08-011476181.4 MB
Strong Customer Authentication

Confirm untrusting a beneficiary

Finalize untrusting a beneficiary (identified by the externalAccountId in the path) by submitting the SCA proof (code for SMS_OTP / TOTP, or passkeyAssertion + origin for PASSKEY), echoing the challengeId when one was issued. Returns trusted: false.

This endpoint is only meaningful for customers in a region where SCA is required (e.g. EU). For customers outside SCA-regulated regions, this returns 409.

In sandbox, the SMS/TOTP code is always 123456.

post/customers/external-accounts/{externalAccountId}/untrust/confirm

Request body

OR

Example request

{
  "code": "123456",
  "origin": "https://app.example.com"
}

Response

Beneficiary untrusted.

trustedboolean required

Whether the beneficiary is now trusted. true after a successful trust, false after a successful untrust.