Verify Transfer

Submits the OTP for a wallet transfer that was initiated with mode OTP_VERIFICATION. Use Get Transfer Details or webhooks for terminal status.

POST /ppi/wallet/transfer/verify

Verify Transfer

cURL

curl --request POST \
  --url https://api.cashfree.com/ppi/wallet/transfer/verify \
  --header 'Content-Type: application/json' \
  --header 'x-api-version: <x-api-version>' \
  --header 'x-client-id: <api-key>' \
  --header 'x-client-secret: <api-key>' \
  --data '
{
  "transfer_id": "TRANSFER123456",
  "otp": "222113"
}
'

import requests

url = "https://api.cashfree.com/ppi/wallet/transfer/verify"

payload = {
    "transfer_id": "TRANSFER123456",
    "otp": "222113"
}
headers = {
    "x-api-version": "<x-api-version>",
    "x-client-id": "<api-key>",
    "x-client-secret": "<api-key>",
    "Content-Type": "application/json"
}

response = requests.post(url, json=payload, headers=headers)

print(response.text)

const options = {
  method: 'POST',
  headers: {
    'x-api-version': '<x-api-version>',
    'x-client-id': '<api-key>',
    'x-client-secret': '<api-key>',
    'Content-Type': 'application/json'
  },
  body: JSON.stringify({transfer_id: 'TRANSFER123456', otp: '222113'})
};

fetch('https://api.cashfree.com/ppi/wallet/transfer/verify', options)
  .then(res => res.json())
  .then(res => console.log(res))
  .catch(err => console.error(err));

<?php

$curl = curl_init();

curl_setopt_array($curl, [
  CURLOPT_URL => "https://api.cashfree.com/ppi/wallet/transfer/verify",
  CURLOPT_RETURNTRANSFER => true,
  CURLOPT_ENCODING => "",
  CURLOPT_MAXREDIRS => 10,
  CURLOPT_TIMEOUT => 30,
  CURLOPT_HTTP_VERSION => CURL_HTTP_VERSION_1_1,
  CURLOPT_CUSTOMREQUEST => "POST",
  CURLOPT_POSTFIELDS => json_encode([
    'transfer_id' => 'TRANSFER123456',
    'otp' => '222113'
  ]),
  CURLOPT_HTTPHEADER => [
    "Content-Type: application/json",
    "x-api-version: <x-api-version>",
    "x-client-id: <api-key>",
    "x-client-secret: <api-key>"
  ],
]);

$response = curl_exec($curl);
$err = curl_error($curl);

curl_close($curl);

if ($err) {
  echo "cURL Error #:" . $err;
} else {
  echo $response;
}

package main

import (
	"fmt"
	"strings"
	"net/http"
	"io"
)

func main() {

	url := "https://api.cashfree.com/ppi/wallet/transfer/verify"

	payload := strings.NewReader("{\n  \"transfer_id\": \"TRANSFER123456\",\n  \"otp\": \"222113\"\n}")

	req, _ := http.NewRequest("POST", url, payload)

	req.Header.Add("x-api-version", "<x-api-version>")
	req.Header.Add("x-client-id", "<api-key>")
	req.Header.Add("x-client-secret", "<api-key>")
	req.Header.Add("Content-Type", "application/json")

	res, _ := http.DefaultClient.Do(req)

	defer res.Body.Close()
	body, _ := io.ReadAll(res.Body)

	fmt.Println(string(body))

}

HttpResponse<String> response = Unirest.post("https://api.cashfree.com/ppi/wallet/transfer/verify")
  .header("x-api-version", "<x-api-version>")
  .header("x-client-id", "<api-key>")
  .header("x-client-secret", "<api-key>")
  .header("Content-Type", "application/json")
  .body("{\n  \"transfer_id\": \"TRANSFER123456\",\n  \"otp\": \"222113\"\n}")
  .asString();

require 'uri'
require 'net/http'

url = URI("https://api.cashfree.com/ppi/wallet/transfer/verify")

http = Net::HTTP.new(url.host, url.port)
http.use_ssl = true

request = Net::HTTP::Post.new(url)
request["x-api-version"] = '<x-api-version>'
request["x-client-id"] = '<api-key>'
request["x-client-secret"] = '<api-key>'
request["Content-Type"] = 'application/json'
request.body = "{\n  \"transfer_id\": \"TRANSFER123456\",\n  \"otp\": \"222113\"\n}"

response = http.request(request)
puts response.read_body

200

transfer_verify_success_response

{
  "user_id": "USER827364",
  "wallet_id": "WALLET936721",
  "cf_transfer_id": "8901234567890123456",
  "transfer_id": "TRANSFER123456",
  "amount": 500.75,
  "transfer_mode": "NEFT",
  "sub_wallet": {
    "cf_sub_wallet_id": "35246543210987654321",
    "name": "Cashfree payout Wallet",
    "type": "FULL_KYC_PPI",
    "status": "ACTIVE",
    "balance": 9500.86,
    "available_balance": 9500.86,
    "funds_on_hold": 0
  },
  "status": "PENDING",
  "status_code": "TRANSFER_INITIATED",
  "bank_ref_no": null,
  "bene_details": {
    "bene_id": "BENE123",
    "cf_bene_instrument_id": "35246543210987654323",
    "instrument_details": {
      "bank_account_number": "1234567890",
      "ifsc": "HDFC0000123"
    }
  },
  "purpose": "BUSINESS",
  "remarks": "Vendor payment",
  "notes": {
    "example_key": "example_value"
  },
  "initiated_at": "2025-09-02T10:15:30Z",
  "processed_at": null
}

Call this API after Initiate Transfer. Use Get Transfer Details to proceed with bank processing after OTP succeeds.

You can submit an OTP for verification at most three times per transfer.

Authorizations

x-client-id · string · header · required

Your unique client identifier issued by Cashfree. You can find this in your Merchant Dashboard.

x-client-secret · string · header · required

The secret key associated with your client ID. Use this to authenticate your API requests. You can find this in your Merchant Dashboard.

Headers

x-api-version · string · default: 2025-11-01 · required

API version to be used. Format is in YYYY-MM-DD.

Example:

"2025-11-01"

Body

application/json

Request parameters to verify the OTP for a wallet transfer request.

transfer_id · string · required

Transfer identifier from the initiate transfer request (transfer_id you supplied while initiating the transfer).

Required string length: 1 - 50

Example:

"TRANSFER123456"

otp · string · required

One-time password received by the end user on the configured notification channels.

Required string length: 4 - 10

Example:

"222113"

Response

200

application/json

Success response for verifying a wallet transfer OTP.

user_id · string

Unique identifier for the user, as provided by you during PPI user creation.

Example:

"USER827364"

wallet_id · string

Unique identifier for the wallet, as provided by you during wallet creation.

Example:

"WALLET936721"

cf_transfer_id · string

Unique identifier for the transfer transaction, generated by Cashfree.

Example:

"8901234567890123456"

transfer_id · string

Unique identifier for the transfer transaction, as provided by you during the transfer request.

Example:

"TRANSFER123456"

amount · number<double>

Amount that was transferred.

Example:

1250.5

transfer_mode · enum<string>

Mode of transfer used.

Available options: RTGS, NEFT, IMPS, UPI

Example:

"IMPS"

sub_wallet · object

Show child attributes

status · enum<string>

Status of the transfer operation.

Available options: RECEIVED, PENDING, SUCCESS, FAILED, REJECTED, VALIDATION_PENDING, REVERSED, APPROVAL_PENDING, QUEUED, MANUALLY_REJECTED

Example:

"PENDING"

bank_ref_no · string | null

Bank reference number for the transfer. Will be null if transfer is not yet processed.

Example:

"BNK202502101530001"

status_code · string

Status code for detailed tracking of transfer progress.

Example:

"TRANSFER_INITIATED"

bene_details · object

Beneficiary details used for the transfer.

Show child attributes

purpose · string

Purpose of the transfer.

Example:

"SALARY"

remarks · string

Remarks for the transfer transaction.

Example:

"Monthly groceries transfer"

notes · object

Optional key-value pairs for any extra information. Keys and values must be strings.

Show child attributes

initiated_at · string<date-time>

Timestamp when the transfer transaction was initiated.

Example:

"2025-09-02T10:15:30Z"

processed_at · string<date-time> | null

Timestamp when the transfer transaction was processed. Will be null if still pending.

Example:

"2025-09-02T10:17:45Z"