POSTValidate Sender Aadhaar OTP

Verify the Aadhaar OTP to complete DigiKhata sender Aadhaar eKYC.

POST/customer/payment/ppi-digikhata/sender/{customer_id}/aadhaar/otp/verify

Validates the OTP dispatched during Generate Sender Aadhaar OTP. On success the Aadhaar identity is confirmed and the flow proceeds to PAN validation (Pan Number Required).

Request

Path parameters

Field	Type	Required	Description
`customer_id`	string	required	Sender's 10-digit mobile number.e.g. 8617567988

customer_idstringRequired

Sender's 10-digit mobile number.

example: 8617567988

Body parameters

Field	Type	Required	Description
`initiator_id`	string	required	Registered mobile number of the API user (see Platform Credentials).e.g. 9962981729
`client_ref_id`	string	optional	Unique reference ID per API call, generated by your system (max 20 characters).e.g. 2026010100123456789
`otp`	integer	optional	OTP received from Generate Sender Aadhaar OTP.e.g. 654321
`otp_ref_id`	integer	required	otp_ref_id received from Generate Sender Aadhaar OTP.e.g. 66748392

initiator_idstringRequired

Registered mobile number of the API user (see Platform Credentials).

example: 9962981729

client_ref_idstringoptional

Unique reference ID per API call, generated by your system (max 20 characters).

example: 2026010100123456789

otpintegeroptional

OTP received from Generate Sender Aadhaar OTP.

example: 654321

otp_ref_idintegerRequired

otp_ref_id received from Generate Sender Aadhaar OTP.

example: 66748392

These headers authenticate and sign every request. See How Auth Works for details.

Field	Type	Required	Description
`developer_key`	string	required	Static API key issued to your account after KYC.
`secret-key`	string	required	Dynamic per-request signature: base64(HMAC-SHA256(timestamp, base64(access_key))).
`secret-key-timestamp`	string	required	Current time in milliseconds since UNIX epoch, used to compute secret-key. Must match server time.
`content-type`	string	required	application/jsone.g. application/json

developer_keystringRequired

Static API key issued to your account after KYC.

secret-keystringRequired

Dynamic per-request signature: base64(HMAC-SHA256(timestamp, base64(access_key))).

secret-key-timestampstringRequired

Current time in milliseconds since UNIX epoch, used to compute secret-key. Must match server time.

content-typestringRequired

application/json

example: application/json

Responses

statusnumber
Primary success indicator (0 = success).
messagestring
Human-readable response / error message.
response_status_idnumber
Granular status id; see the shared error-codes table.
response_type_idnumber
A unique id for every possible response shape (success or error) — useful for client logic branching and analytics.
dataobject
API-specific response payload.
- application_idstring
  KYC application identifier, when issued.

Next steps

NextPOSTValidate Sender PANValidate the sender's PAN to complete DigiKhata KYC and return the updated wallet profile.

import { EpsClient } from "@ekoindia/eps-sdk";

const client = new EpsClient({

developerKey: process.env.EPS_DEVELOPER_KEY,

accessKey: process.env.EPS_ACCESS_KEY,

initiatorId: "9962981729",

environment: "sandbox",

});

const result = await client.call("ppi-digikhata-verify-aadhaar-otp", {

"customer_id": "8617567988",

"otp_ref_id": 66748392

});

console.log(result);

Request

Path parameters

Body parameters

Responses

Next steps

Related