POSTValidate Sender Aadhaar OTP
Verify the Aadhaar OTP for a DMT Levin sender to complete identity validation.
https://staging.eko.in/ekoapi/v3 return an error response. Test it in Production.Validates the OTP received on the sender's Aadhaar-linked mobile number in the DMT Levin flow. Use intent_id: 20 for Aadhaar validation (as opposed to intent_id: 19 for sender onboarding). On success, the sender's identity is confirmed and their DMT Levin wallet profile is updated.
Request
Path parameters
| Field | Type | Required | Description |
|---|---|---|---|
customer_id | string | required | Sender's mobile number.e.g. 9876543210 |
customer_idstringRequiredSender's mobile number.
example: 9876543210
Body parameters
| Field | Type | Required | Description |
|---|---|---|---|
initiator_id | string | required | Registered mobile number of the API user (see Platform Credentials).e.g. 9962981729 |
client_ref_id | string | optional | Unique reference ID per API call, generated by your system (10–20 characters; 10 recommended). The SDKs generate one for every non-GET call when you don't.e.g. 2026010100123456789 |
otp | integer | optional | OTP received on the Aadhaar-linked mobile number.e.g. 123456 |
otp_ref_id | integer | required | Reference ID from the Validate Aadhaar (DMT Levin) response.e.g. 93847201 |
intent_id | string | optional | Set to "19" for sender onboarding or "20" for Aadhaar validation.e.g. 20 |
additional_info | string | optional | Additional info flag. Defaults to 1.e.g. 1 |
initiator_idstringRequiredRegistered mobile number of the API user (see Platform Credentials).
example: 9962981729
client_ref_idstringoptionalUnique reference ID per API call, generated by your system (10–20 characters; 10 recommended). The SDKs generate one for every non-GET call when you don't.
example: 2026010100123456789
otpintegeroptionalOTP received on the Aadhaar-linked mobile number.
example: 123456
otp_ref_idintegerRequiredReference ID from the Validate Aadhaar (DMT Levin) response.
example: 93847201
intent_idstringoptionalSet to "19" for sender onboarding or "20" for Aadhaar validation.
example: 20
additional_infostringoptionalAdditional info flag. Defaults to 1.
example: 1
These headers authenticate and sign every request. See How Auth Works for details.
| Field | Type | Required | Description |
|---|---|---|---|
developer_key | string | required | Static API key issued to your account after KYC. |
secret-key | string | required | Dynamic per-request signature: base64(HMAC-SHA256(timestamp, base64(access_key))). |
secret-key-timestamp | string | required | Current time in milliseconds since UNIX epoch, used to compute secret-key. Must match server time. |
content-type | string | required | application/jsone.g. application/json |
developer_keystringRequiredStatic API key issued to your account after KYC.
secret-keystringRequiredDynamic per-request signature: base64(HMAC-SHA256(timestamp, base64(access_key))).
secret-key-timestampstringRequiredCurrent time in milliseconds since UNIX epoch, used to compute secret-key. Must match server time.
content-typestringRequiredapplication/json
example: application/json
Responses
statusnumberPrimary success indicator (0 = success).
messagestringHuman-readable response / error message.
response_status_idnumberUI display hint only (-1/0 success, 1 failure, 2 initiated, 3 refund initiated, 4 refunded). Never branch on it — use `status` (and `tx_status` for financial APIs), or `response_type_id` where documented.
response_type_idnumberA unique id for every possible response shape (success or error) — useful for client logic branching and analytics.
dataobjectAPI-specific response payload.
verifiedbooleanTrue if Aadhaar OTP validation was successful.
namestringVerified sender name from Aadhaar.
genderstringGender from Aadhaar record.
dobstringDate of birth from Aadhaar.
masked_aadhaarstringAadhaar number with first 8 digits masked.