---
title: "Verify FaceMap"
method: POST
path: "/v1/one-time-token/facemap/verify"
tags: ["sca-facemaps"]
deprecated: true
---

# Verify FaceMap

`POST /v1/one-time-token/facemap/verify`

> **Deprecated.**

To clear a **FACE_MAP** challenge listed in a OTT.

Notes:
1. User is required to [enrol facemap](/api-reference/user-security/usersecurityfacemapenrol) before the verification can be successful.
2. Rate limit may be applied if there are 5 continuous unsuccessful attempts and OTT creation will be blocked for 15 minutes.

## Headers

- `One-Time-Token` string, required
- `X-External-Correlation-Id` string, uuid

## Request body

- object
  - `faceMap` string — Base64-encoded binary data as a string. For more details how to get this binary, please read FaceTec's [export API](https://dev.facetec.com/api-guide#export-3d-facemap). To retrieve Wise's FaceTec public key, please refer to our FaceTec's [Get Public Key API](/api-reference/facetec/facetecpublickeyget).

## Response `200`

One time token status.

- OttResponse
  - `oneTimeTokenProperties` object — Properties of the one time token.
    - `oneTimeToken` string — Unique identifier of a one time token.
    - `challenges` object[] — Array of challenge objects.
      - `primaryChallenge` object — Type of challenge user can do.
        - `type` string — Type of the challenge (PIN, FACE_MAP, SMS, WHATSAPP, VOICE, PARTNER_DEVICE_FINGERPRINT).
        - `viewData` object — An object that provides data required to present a challenge window. It can be messages, IDs, or other attributes.
      - `alternatives` object[] — Alternative challenges that user can do instead.
      - `required` boolean — Required (or not) to pass the OTT.
      - `passed` boolean — Status of this challenge.
    - `validity` integer — Seconds until the one time token becomes expired.
    - `actionType` string — The action bound to the one time token. For example, `BALANCE__GET_STATEMENT` when we want to [retrieve a balance account statement](/api-reference/balance-statement/balancestatementget).
    - `userId` integer — Creator of this one time token.

## Other responses

- `429` — Rate limit exceeded. Retry after the number of seconds specified in the `Retry-After` header.

---

[API](https://skmtc.net/wise/apis/platform-api.md) · [All operations](https://skmtc.net/wise/apis/platform-api/llms.txt) · [OpenAPI document](https://skmtc-service-staging.skmtc.workers.dev/v1/apis/wise/platform-api/revisions/4907a1d269ab/schema)