---
title: "Inform challenge result"
method: POST
path: "/v3/spend/profiles/{profileId}/3dsecure/challenge-result"
tags: ["3ds"]
---

# Inform challenge result

`POST /v3/spend/profiles/{profileId}/3dsecure/challenge-result`

Once the customer has accepted or rejected the push notification for a 3DS challenge, you can use this endpoint to notify us of the result.

You must call this endpoint before the expiration time, otherwise it will return a 400 error. You can find the expiration information from the [3DS challenge webhook event](/api-reference/webhook-event/eventcards3dschallenge).

Only the first call to this endpoint will be processed. Any subsequent duplicate requests will be ignored, although you will still receive a success response.

{% admonition type="warning" %}
This endpoint is SCA protected when it applies. If your profile is registered within the UK and/or EEA, SCA most likely applies to you. For more information, please read [implementing SCA](/guides/developer/auth-and-security/sca-and-2fa).
{% /admonition %}

## Path parameters

- `profileId` integer, required

## Headers

- `X-External-Correlation-Id` string, uuid

## Request body

- ChallengeResultRequest
  - `transactionReference` string, required — Transaction reference as received in the 3DS challenge webhook event.
  - `challengeStatus` 'APPROVED' | 'REJECTED', required — The customer's response to the 3DS challenge.

## Response `204`

No Content - Challenge result has been successfully recorded.

## Other responses

- `429` — Rate limit exceeded. Retry after the number of seconds specified in the `Retry-After` header.

---

[API](https://skmtc.net/wise/apis/platform-api.md) · [All operations](https://skmtc.net/wise/apis/platform-api/llms.txt) · [OpenAPI document](https://skmtc-service-staging.skmtc.workers.dev/v1/apis/wise/platform-api/revisions/4907a1d269ab/schema)