Verify activation OTP

POST

https://api.staging.vrtx.sa/cards/activate/verify-otp

Last modified:2025-12-03 10:51:05

Confirms a physical card activation by verifying the OTP sent during the initiate step.
Provide the session_id returned earlier along with the OTP to complete activation.

Request:

session_id: Activation session identifier

otp: 4 digit OTP sent to the user

idempotency-key: Unique key to ensure idempotent requests

Response:

card_status: Resulting status of the card after activation is confirmed

Error Responses:

404 CARD_NOT_FOUND/CARD_ISSUANCE_NOT_FOUND: Card or activation session missing

412 CARD_EXPIRED/ACTIVATION_NOT_ALLOWED: Card expired or not allowed to activate

400 ACTIVATION_FAILED: OTP validation failed or activation could not finish

503 SERVICE_UNAVAILABLE: Backend temporarily unavailable

Request

Header Params

Body Params application/jsonRequired

Example

{
    "session_id": "f1e2d3c4-b5a6-7890-c1d2-e3f4a5b6c7d8",
    "otp": "5678"
}

Request Code Samples

Shell

JavaScript

Java

Swift

PHP

Python

HTTP

Objective-C

Ruby

OCaml

Dart

curl --location --request POST 'https://api.staging.vrtx.sa/cards/activate/verify-otp' \
--header 'idempotency-key;' \
--header 'Content-Type: application/json' \
--data-raw '{
    "session_id": "f1e2d3c4-b5a6-7890-c1d2-e3f4a5b6c7d8",
    "otp": "5678"
}'

Responses

🟢200OK

application/json

Default Response

Body

Example

{
    "card_status": "ACTIVE"
}

🟠400Bad Request

🟠401Unauthorized

🟠403Forbidden

🟠404Not Found

🟠405Method Not Allowed

🟠409Conflict

🟠410Gone

🟠412Precondition Failed

🟠422Unprocessable Entity

🟠429Too Many Requests

🔴500Internal Server Error

🔴501Not Implemented

🔴503Service Unavailable

🔴504Gateway Timeout

🔴505HTTP Version Not Supported

Modified at 2025-12-03 10:51:05

Activate physical card

Display sensitive data