Verify — Card - Ingo Payments Developer Hub

Authorizations

Authorization

string

header

required

HMAC-SHA512 signed Authorization header. See the Authentication page for the complete signing guide.

Body

application/json

Exactly one of the following groupings must be provided: (1) customer_account_token, (2) third_party_token, or (3) raw card fields — account, recipient_first_name, recipient_last_name, recipient_address1, recipient_city, recipient_state, recipient_zip.

participant_id

integer

required

Unique participant identifier assigned by Ingo.

Example:

12345

account_type

enum<string>

required

Always CA for card-based (debit or credit) transactions.

Available options:

CA

Minimum string length: 1

Example:

"CA"

participant_unique_id1

string

required

Participant assigned ID to be associated with customer_account_token creation. Should correlate to participant assigned values affiliated with future process requests for tracking purposes (e.g. CustomerID or AccountID). Must not contain NPI data.

Required string length: 1 - 255

Example:

"1f2739ed-3531-4af2-ae36-e6faf7936462"

timestamp

integer<int64>

required

Unix timestamp of the request.

Example:

1576097158

version

integer

required

API version of the request. Current version is 11.

Example:

11

customer_account_token

string

Alternative to raw card data when the account was previously tokenized. If provided, third_party_token and all raw card fields (account, expiration_date, recipient_first_name, recipient_last_name, recipient_address1, recipient_address2, recipient_city, recipient_state, recipient_zip) must be omitted.

Required string length: 1 - 255

Example:

"ca875cce-58c0-46a0-8f14-676190cc7df6"

third_party_token

object

Contains data about an optional third-party account token. If provided, customer_account_token and raw card fields (account, expiration_date, cvv) must be omitted. Only permitted if the client is configured for third-party token use.

Show child attributes

amount

number<float> | null

Dollar amount of disbursement. Max value determined by participant velocity limits.

Required range: x >= 0.01

Example:

1010.5

recipient_first_name

string

Recipient first name. Required unless customer_account_token is provided. Must be omitted if customer_account_token is provided.

Required string length: 1 - 255

Example:

"Johnny"

recipient_last_name

string

Recipient last name. Required unless customer_account_token is provided. Must be omitted if customer_account_token is provided.

Required string length: 1 - 255

Example:

"Rockets"

recipient_business_name

string | null

Optional recipient business name.

Maximum string length: 150

Example:

"Rockets LLC"

account

string

Card account number. Required unless customer_account_token or third_party_token is provided. Must be omitted if either token is provided.

Required string length: 1 - 255

Example:

"4111111111111111"

expiration_date

string | null

Card expiration date in YYMM format. Conditionally required based on client configuration (expiration_date_enabled). Not required if customer_account_token or third_party_token is provided.

Maximum string length: 4

Pattern: ^[0-9]{2}(0[1-9]|1[0-2])$

Example:

"2612"

cvv

string | null

CVV value (3–4 digits depending on card type). Conditionally required based on client configuration (cvv_enabled). Never required if customer_account_token or third_party_token is provided.

Pattern: ^[0-9]{3,4}$

Example:

"123"

recipient_address1

string

Recipient billing address line 1. Required unless customer_account_token is provided.

Required string length: 1 - 255

Example:

"123 Main St"

recipient_address2

string | null

Recipient billing address line 2.

Maximum string length: 255

Example:

"Apt 2"

recipient_city

string

Recipient billing city. Required unless customer_account_token is provided.

Required string length: 1 - 255

Example:

"Atlanta"

recipient_state

string

Recipient billing state (standard US postal abbreviation). Required unless customer_account_token is provided.

Required string length: 2

Pattern:

^(?:A[LKSZRAEP]|C[AOT]|D[EC]|F[LM]|G[AU]|HI|I[ADLN]|K[SY]|LA|M[ADEHINOPST]|N[CDEHJMVY]|O[HKR]|P[ARW]|RI|S[CD]|T[NX]|UT|V[AIT]|W[AIVY])$

Example:

"GA"

recipient_zip

string

Recipient billing zip code. 5-digit zip or zip+4 in xxxxx-xxxx format. Required unless customer_account_token is provided.

Maximum string length: 10

Pattern: ^[0-9]{5}(?:-[0-9]{4})?$

Example:

"30313"

recipient_phone

string | null

10-digit recipient phone number.

Maximum string length: 10

Example:

"1231231234"

participant_unique_id2

string | null

Optional second participant assigned ID to be associated with customer_account_token creation. Should be carried forward to future process requests for tracking purposes. Must not contain NPI data.

Maximum string length: 255

Example:

"90759390-01c7-47e7-8a90-6faa89b18ff6"

store_id

string | null

Client assigned store ID. Required for Retail client participants.

Maximum string length: 255

Example:

"STORE-001"

terminal_id

string | null

Client assigned terminal ID. Required for Retail client participants.

Maximum string length: 255

Example:

"TERM-042"

clerk_id

string | null

Client assigned clerk ID. Required for Retail client participants.

Maximum string length: 255

Example:

"CLK-007"

Response

Verification successful — token returned

status

integer

Numeric code describing the status of the API request. 100 = Success.

Example:

100

client_message

string

Text description associated with the status code.

Example:

"Success"

data

object

Show child attributes

time

string

Time in seconds to complete the request.

Example:

"2.4505"