Strong Customer Authentication
Start trusting a beneficiary
Begin trusting (whitelisting) an external account so future sends to it can skip the per-transaction SCA ceremony. Returns the scaChallenge to satisfy (when one is issued). Complete with POST /customers/external-accounts/{externalAccountId}/trust/confirm.
This endpoint is only meaningful for customers in a region where SCA is required (e.g. EU). For customers outside SCA-regulated regions, this returns 409.
post/customers/external-accounts/{externalAccountId}/trust
Response
Beneficiary trust started; the SCA challenge (if any) is returned.
Example response
{
"scaChallenge": {
"id": "ScaChallenge:019542f5-b3e7-1d02-0000-000000000007",
"expiresAt": "2025-10-03T12:05:00Z",
"availableFactors": [
"SMS_OTP"
],
"purpose": "PAYOUT",
"passkeyAllowedOrigins": [
"https://app.example.com"
]
}
}