Verify card conversion OTP

Completes the virtual to physical card conversion by verifying the OTP sent during the initiation step.
On success, the card is converted to physical and delivery address information is returned.

Request:

session_id: Session ID (cardIssuanceId) from the convert request

otp: 4-digit OTP code sent to the customer

Response:

card: Updated card with physical card details

delivery_address: Delivery address for the physical card

Error Responses:

400 INVALID_INPUT: Invalid request body

400 INVALID_OTP_FORMAT: OTP format is invalid (must be 4 digits)

400 OTP_EXPIRED: OTP has expired

400 OTP_MAX_ATTEMPTS_REACHED: Maximum OTP verification attempts reached

400 OTP_VERIFICATION_FAILED: OTP verification failed (generic error)

400 OTP_INCORRECT: Invalid OTP provided

404 CARD_NOT_FOUND: Card does not exist

404 CARD_ISSUANCE_NOT_FOUND: Card issuance session not found

404 OTP_OPERATION_NOT_FOUND: OTP operation context missing

409 CARD_TYPE_CONFLICT: Card is already physical

412 CARD_STATUS_NOT_ALLOWED: Card is not in ACTIVE status

412 INVALID_CARD_STATUS: Card status is invalid for this operation

412 OTP_OPERATION_WRONG_STATUS: OTP operation is not in correct state

503 SERVICE_UNAVAILABLE: Service temporarily unavailable

Request Code Samples

Shell

JavaScript

Java

Swift

PHP

Python

HTTP

Objective-C

Ruby

OCaml

Dart

Responses

🟢200OK

application/json

Default Response

Body

Example

{
    "card": {
        "id": "f5a4b3c2-d1e0-9876-5432-1a0b9c8d7e6f",
        "account_id": "b2c3d4e5-f6a7-5890-b123-c4d5e6f7a8b9",
        "token": 987654321,
        "status": "LOCKED",
        "last_4_digits": "8765",
        "expiry_date": "2026-06-30",
        "design": "premium",
        "created_at": "2023-12-01T08:15:00Z",
        "updated_at": "2024-01-10T14:20:00Z",
        "is_physical": true,
        "physical_card_activation_status": "ACTIVATED",
        "physical_activated_at": "2024-02-01T09:00:00Z"
    },
    "delivery_address": {
        "id": "497f6eca-6276-4993-bfeb-53cbbbba6f08",
        "city": "string",
        "country": "string",
        "mobile_number": "string"
    }
}

🟠400Bad Request

🟠401Unauthorized

🟠403Forbidden

🟠404Not Found

🟠405Method Not Allowed

🟠409Conflict

🟠410Gone

🟠412Precondition Failed

🟠422Unprocessable Entity

🟠429Too Many Requests

🔴500Internal Server Error

🔴501Not Implemented

🔴503Service Unavailable

🔴504Gateway Timeout

🔴505HTTP Version Not Supported