---
title: "Verify SMS Challenge"
method: POST
path: "/v1/one-time-token/sms/verify"
tags: ["sca-otp"]
---

# Verify SMS Challenge

`POST /v1/one-time-token/sms/verify`

To clear a **SMS** challenge listed in a OTT.

Notes:
1. User is required to have a verified phone number. See [create phone number](/api-reference/sca-otp/usersecurityphonenumbercreate) for more information.
2. [Trigger SMS Challenge](/api-reference/sca-otp/ottsmstrigger) is required to be called first.
3. Since we won't be sending real SMS on sandbox, the **OTP Code** will always be **111111**.

## Headers

- `One-Time-Token` string, required
- `X-External-Correlation-Id` string, uuid

## Request body

- object
  - `otpCode` string — 6 digit OTP code in text format.

## Response `200`

One time token status.

- OttResponse
  - `oneTimeTokenProperties` object — Properties of the one time token.
    - `oneTimeToken` string — Unique identifier of a one time token.
    - `challenges` object[] — Array of challenge objects.
      - `primaryChallenge` object — Type of challenge user can do.
        - `type` string — Type of the challenge (PIN, FACE_MAP, SMS, WHATSAPP, VOICE, PARTNER_DEVICE_FINGERPRINT).
        - `viewData` object — An object that provides data required to present a challenge window. It can be messages, IDs, or other attributes.
      - `alternatives` object[] — Alternative challenges that user can do instead.
      - `required` boolean — Required (or not) to pass the OTT.
      - `passed` boolean — Status of this challenge.
    - `validity` integer — Seconds until the one time token becomes expired.
    - `actionType` string — The action bound to the one time token. For example, `BALANCE__GET_STATEMENT` when we want to [retrieve a balance account statement](/api-reference/balance-statement/balancestatementget).
    - `userId` integer — Creator of this one time token.

## Other responses

- `429` — Rate limit exceeded. Retry after the number of seconds specified in the `Retry-After` header.

---

[API](https://skmtc.net/wise/apis/platform-api.md) · [All operations](https://skmtc.net/wise/apis/platform-api/llms.txt) · [OpenAPI document](https://skmtc-service-staging.skmtc.workers.dev/v1/apis/wise/platform-api/revisions/4907a1d269ab/schema)