POSTBank Account Verification (Pennyless)

Confirm an account number + IFSC and fetch the registered beneficiary name without transferring any money.

POST/tools/kyc/bank-acc-verify-pennyless

Validates a bank account and returns the beneficiary name registered with the bank, without performing a ₹1 penny-drop transfer. Because no money moves, there is no stray credit to reverse if the account details turn out to be wrong. Use the penny-drop API instead when you need proof that a real credit reached the account (a UTR).

Request

Body parameters

Field	Type	Required	Description
`initiator_id`	string	required	Registered mobile number of the API user (see Platform Credentials).e.g. 9962981729
`client_ref_id`	string	optional	Unique reference ID per API call, generated by your system (max 20 characters).e.g. 2026010100123456789
`account`Bank Account Number	string	required	Complete bank account number to be verified.e.g. 38759149196
`ifsc`IFSC Code	string	required	IFSC code of the bank account to be verified (11-character alphanumeric).e.g. SBIN0007515

initiator_idstringRequired

Registered mobile number of the API user (see Platform Credentials).

example: 9962981729

client_ref_idstringoptional

Unique reference ID per API call, generated by your system (max 20 characters).

example: 2026010100123456789

accountstringRequired· Bank Account Number

Complete bank account number to be verified.

example: 38759149196

ifscstringRequired· IFSC Code

IFSC code of the bank account to be verified (11-character alphanumeric).

example: SBIN0007515

These headers authenticate and sign every request. See How Auth Works for details.

Field	Type	Required	Description
`developer_key`	string	required	Static API key issued to your account after KYC.
`secret-key`	string	required	Dynamic per-request signature: base64(HMAC-SHA256(timestamp, base64(access_key))).
`secret-key-timestamp`	string	required	Current time in milliseconds since UNIX epoch, used to compute secret-key. Must match server time.
`content-type`	string	required	application/jsone.g. application/json

developer_keystringRequired

Static API key issued to your account after KYC.

secret-keystringRequired

Dynamic per-request signature: base64(HMAC-SHA256(timestamp, base64(access_key))).

secret-key-timestampstringRequired

Current time in milliseconds since UNIX epoch, used to compute secret-key. Must match server time.

content-typestringRequired

application/json

example: application/json

Responses

statusnumber
Primary success indicator (0 = success).
messagestring
Human-readable response / error message.
response_status_idnumber
Granular status id; see the shared error-codes table.
response_type_idnumber
A unique id for every possible response shape (success or error) — useful for client logic branching and analytics.
dataobject
API-specific response payload.
- verified_beneficiary_namestring
  Account holder name as registered with the bank. Use for name matching against the details you hold.
- statusstring
  Verification outcome for the account, e.g. success.
- bank_account_nostring
  Bank account number echoed back from the request.
- bank_ifscstring
  IFSC code echoed back from the request.
- messagestring
  Human-readable outcome of the verification.

Next steps

NextPOSTBulk Bank Account VerificationSubmit multiple bank accounts for penny-drop verification in a single API call; poll a status API for per-account results.

Request

Body parameters

Responses

Next steps

Related