Strong Customer Authentication
Start untrusting a beneficiary
Begin untrusting (removing the trusted mark from) an external account, so future sends to it are dynamically linked and require the per-transaction SCA ceremony again. Returns the scaChallenge to satisfy (when one is issued). Complete with POST /customers/external-accounts/{externalAccountId}/untrust/confirm.
This endpoint is only meaningful for customers in a region where SCA is required (e.g. EU). For customers outside SCA-regulated regions, this returns 409.
post/customers/external-accounts/{externalAccountId}/untrust
Response
Beneficiary untrust started; the SCA challenge (if any) is returned.
Example response
{
"scaChallenge": {
"id": "ScaChallenge:019542f5-b3e7-1d02-0000-000000000007",
"expiresAt": "2025-10-03T12:05:00Z",
"availableFactors": [
"SMS_OTP"
],
"purpose": "PAYOUT",
"passkeyAllowedOrigins": [
"https://app.example.com"
]
}
}