Payer routes

Send the email code

POST/v1/payer/deposit-requests/{id}/verify/email/start

Sends a one-time code to the asserted mailbox and mints a payer session.

Unauthenticated

Request

Shell
curl -fsS -X POST "$API/v1/payer/deposit-requests/dr_0198f80c-…/verify/email/start"

Response

200 OK
{
  "payer_session": "…",
  "expires_at": "2026-09-07T12:00:00Z"
}

The request carries no mailbox. Session: opaque, 24 hours, stored hashed. A session in the header resends on that session. One code per request per minute. Cross-origin: hosted checkout origin only.

Headers

Payday-Payer-Sessionstring
Optional. Resend on an existing session.

Path parameters

iddr_ idrequired

Response

payer_sessionstring
expires_attimestamp

Status codes

  • 429otp_resend_cooldown Retry-After set.
  • 409verification_not_required Mode is permissionless.
  • 409verification_method_not_applicable Mode is merchant_session.
  • 410deposit_request_not_payable Closed without verification. A settled, verified request re-proves for receipt access.
  • 503verification_unavailable No identity provider configured.