UPI Penny Drop Request
curl --request POST \
--url https://sandbox.cashfree.com/verification/upi/penny-drop \
--header 'Content-Type: application/json' \
--header 'x-api-version: <x-api-version>' \
--header 'x-client-id: <api-key>' \
--header 'x-client-secret: <api-key>' \
--data '
{
"verification_id": "test_verification_id",
"vpa": "success@upi",
"user_consent": {
"obtained": true,
"type": "EXPLICIT",
"timestamp": "2025-10-27T09:24:36Z",
"purpose": "Testing the entire flow for penny drop verification"
},
"name": "John Doe"
}
'import requests
url = "https://sandbox.cashfree.com/verification/upi/penny-drop"
payload = {
"verification_id": "test_verification_id",
"vpa": "success@upi",
"user_consent": {
"obtained": True,
"type": "EXPLICIT",
"timestamp": "2025-10-27T09:24:36Z",
"purpose": "Testing the entire flow for penny drop verification"
},
"name": "John Doe"
}
headers = {
"x-api-version": "<x-api-version>",
"x-client-id": "<api-key>",
"x-client-secret": "<api-key>",
"Content-Type": "application/json"
}
response = requests.post(url, json=payload, headers=headers)
print(response.text)const options = {
method: 'POST',
headers: {
'x-api-version': '<x-api-version>',
'x-client-id': '<api-key>',
'x-client-secret': '<api-key>',
'Content-Type': 'application/json'
},
body: JSON.stringify({
verification_id: 'test_verification_id',
vpa: 'success@upi',
user_consent: {
obtained: true,
type: 'EXPLICIT',
timestamp: '2025-10-27T09:24:36Z',
purpose: 'Testing the entire flow for penny drop verification'
},
name: 'John Doe'
})
};
fetch('https://sandbox.cashfree.com/verification/upi/penny-drop', options)
.then(res => res.json())
.then(res => console.log(res))
.catch(err => console.error(err));<?php
$curl = curl_init();
curl_setopt_array($curl, [
CURLOPT_URL => "https://sandbox.cashfree.com/verification/upi/penny-drop",
CURLOPT_RETURNTRANSFER => true,
CURLOPT_ENCODING => "",
CURLOPT_MAXREDIRS => 10,
CURLOPT_TIMEOUT => 30,
CURLOPT_HTTP_VERSION => CURL_HTTP_VERSION_1_1,
CURLOPT_CUSTOMREQUEST => "POST",
CURLOPT_POSTFIELDS => json_encode([
'verification_id' => 'test_verification_id',
'vpa' => 'success@upi',
'user_consent' => [
'obtained' => true,
'type' => 'EXPLICIT',
'timestamp' => '2025-10-27T09:24:36Z',
'purpose' => 'Testing the entire flow for penny drop verification'
],
'name' => 'John Doe'
]),
CURLOPT_HTTPHEADER => [
"Content-Type: application/json",
"x-api-version: <x-api-version>",
"x-client-id: <api-key>",
"x-client-secret: <api-key>"
],
]);
$response = curl_exec($curl);
$err = curl_error($curl);
curl_close($curl);
if ($err) {
echo "cURL Error #:" . $err;
} else {
echo $response;
}package main
import (
"fmt"
"strings"
"net/http"
"io"
)
func main() {
url := "https://sandbox.cashfree.com/verification/upi/penny-drop"
payload := strings.NewReader("{\n \"verification_id\": \"test_verification_id\",\n \"vpa\": \"success@upi\",\n \"user_consent\": {\n \"obtained\": true,\n \"type\": \"EXPLICIT\",\n \"timestamp\": \"2025-10-27T09:24:36Z\",\n \"purpose\": \"Testing the entire flow for penny drop verification\"\n },\n \"name\": \"John Doe\"\n}")
req, _ := http.NewRequest("POST", url, payload)
req.Header.Add("x-api-version", "<x-api-version>")
req.Header.Add("x-client-id", "<api-key>")
req.Header.Add("x-client-secret", "<api-key>")
req.Header.Add("Content-Type", "application/json")
res, _ := http.DefaultClient.Do(req)
defer res.Body.Close()
body, _ := io.ReadAll(res.Body)
fmt.Println(string(body))
}HttpResponse<String> response = Unirest.post("https://sandbox.cashfree.com/verification/upi/penny-drop")
.header("x-api-version", "<x-api-version>")
.header("x-client-id", "<api-key>")
.header("x-client-secret", "<api-key>")
.header("Content-Type", "application/json")
.body("{\n \"verification_id\": \"test_verification_id\",\n \"vpa\": \"success@upi\",\n \"user_consent\": {\n \"obtained\": true,\n \"type\": \"EXPLICIT\",\n \"timestamp\": \"2025-10-27T09:24:36Z\",\n \"purpose\": \"Testing the entire flow for penny drop verification\"\n },\n \"name\": \"John Doe\"\n}")
.asString();require 'uri'
require 'net/http'
url = URI("https://sandbox.cashfree.com/verification/upi/penny-drop")
http = Net::HTTP.new(url.host, url.port)
http.use_ssl = true
request = Net::HTTP::Post.new(url)
request["x-api-version"] = '<x-api-version>'
request["x-client-id"] = '<api-key>'
request["x-client-secret"] = '<api-key>'
request["Content-Type"] = 'application/json'
request.body = "{\n \"verification_id\": \"test_verification_id\",\n \"vpa\": \"success@upi\",\n \"user_consent\": {\n \"obtained\": true,\n \"type\": \"EXPLICIT\",\n \"timestamp\": \"2025-10-27T09:24:36Z\",\n \"purpose\": \"Testing the entire flow for penny drop verification\"\n },\n \"name\": \"John Doe\"\n}"
response = http.request(request)
puts response.read_body{
"verification_id": "test_verification_id",
"reference_id": 12345,
"status": "VALID",
"ifsc": "ICIC0006567",
"vpa": "success@upi",
"name_at_bank": "JOHN DOE",
"utr": "123456789012",
"bank_account": "1234567890",
"name_match_score": "95",
"name_match_result": "MATCH",
"ifsc_details": {
"bank": "ICICI Bank",
"neft": "Live",
"imps": "Live",
"rtgs": "Live",
"upi": "Live",
"address": "GROUND FLOOR, 123, ABC CIRCLE, XYZ MAIN ROAD, BANGALORE - 560098",
"city": "BANGALORE",
"state": "KARNATAKA",
"branch": "BANGALORE - RAJA RAJESHWARI NAGAR BRANCH",
"category": "SUB_MEMBER",
"swift_code": "ABCDINBBDCL",
"micr": 560751026,
"nbin": 1234
}
}UPI Penny Drop
UPI Penny Drop Request
Use this API to to validate bank account details by sending a one rupee UPI transaction to the provided VPA and retrieving the associated bank account information.
View the test data and use the information to trigger the validations. The test data can be used only in the sandbox environment.
POST
/
upi
/
penny-drop
UPI Penny Drop Request
curl --request POST \
--url https://sandbox.cashfree.com/verification/upi/penny-drop \
--header 'Content-Type: application/json' \
--header 'x-api-version: <x-api-version>' \
--header 'x-client-id: <api-key>' \
--header 'x-client-secret: <api-key>' \
--data '
{
"verification_id": "test_verification_id",
"vpa": "success@upi",
"user_consent": {
"obtained": true,
"type": "EXPLICIT",
"timestamp": "2025-10-27T09:24:36Z",
"purpose": "Testing the entire flow for penny drop verification"
},
"name": "John Doe"
}
'import requests
url = "https://sandbox.cashfree.com/verification/upi/penny-drop"
payload = {
"verification_id": "test_verification_id",
"vpa": "success@upi",
"user_consent": {
"obtained": True,
"type": "EXPLICIT",
"timestamp": "2025-10-27T09:24:36Z",
"purpose": "Testing the entire flow for penny drop verification"
},
"name": "John Doe"
}
headers = {
"x-api-version": "<x-api-version>",
"x-client-id": "<api-key>",
"x-client-secret": "<api-key>",
"Content-Type": "application/json"
}
response = requests.post(url, json=payload, headers=headers)
print(response.text)const options = {
method: 'POST',
headers: {
'x-api-version': '<x-api-version>',
'x-client-id': '<api-key>',
'x-client-secret': '<api-key>',
'Content-Type': 'application/json'
},
body: JSON.stringify({
verification_id: 'test_verification_id',
vpa: 'success@upi',
user_consent: {
obtained: true,
type: 'EXPLICIT',
timestamp: '2025-10-27T09:24:36Z',
purpose: 'Testing the entire flow for penny drop verification'
},
name: 'John Doe'
})
};
fetch('https://sandbox.cashfree.com/verification/upi/penny-drop', options)
.then(res => res.json())
.then(res => console.log(res))
.catch(err => console.error(err));<?php
$curl = curl_init();
curl_setopt_array($curl, [
CURLOPT_URL => "https://sandbox.cashfree.com/verification/upi/penny-drop",
CURLOPT_RETURNTRANSFER => true,
CURLOPT_ENCODING => "",
CURLOPT_MAXREDIRS => 10,
CURLOPT_TIMEOUT => 30,
CURLOPT_HTTP_VERSION => CURL_HTTP_VERSION_1_1,
CURLOPT_CUSTOMREQUEST => "POST",
CURLOPT_POSTFIELDS => json_encode([
'verification_id' => 'test_verification_id',
'vpa' => 'success@upi',
'user_consent' => [
'obtained' => true,
'type' => 'EXPLICIT',
'timestamp' => '2025-10-27T09:24:36Z',
'purpose' => 'Testing the entire flow for penny drop verification'
],
'name' => 'John Doe'
]),
CURLOPT_HTTPHEADER => [
"Content-Type: application/json",
"x-api-version: <x-api-version>",
"x-client-id: <api-key>",
"x-client-secret: <api-key>"
],
]);
$response = curl_exec($curl);
$err = curl_error($curl);
curl_close($curl);
if ($err) {
echo "cURL Error #:" . $err;
} else {
echo $response;
}package main
import (
"fmt"
"strings"
"net/http"
"io"
)
func main() {
url := "https://sandbox.cashfree.com/verification/upi/penny-drop"
payload := strings.NewReader("{\n \"verification_id\": \"test_verification_id\",\n \"vpa\": \"success@upi\",\n \"user_consent\": {\n \"obtained\": true,\n \"type\": \"EXPLICIT\",\n \"timestamp\": \"2025-10-27T09:24:36Z\",\n \"purpose\": \"Testing the entire flow for penny drop verification\"\n },\n \"name\": \"John Doe\"\n}")
req, _ := http.NewRequest("POST", url, payload)
req.Header.Add("x-api-version", "<x-api-version>")
req.Header.Add("x-client-id", "<api-key>")
req.Header.Add("x-client-secret", "<api-key>")
req.Header.Add("Content-Type", "application/json")
res, _ := http.DefaultClient.Do(req)
defer res.Body.Close()
body, _ := io.ReadAll(res.Body)
fmt.Println(string(body))
}HttpResponse<String> response = Unirest.post("https://sandbox.cashfree.com/verification/upi/penny-drop")
.header("x-api-version", "<x-api-version>")
.header("x-client-id", "<api-key>")
.header("x-client-secret", "<api-key>")
.header("Content-Type", "application/json")
.body("{\n \"verification_id\": \"test_verification_id\",\n \"vpa\": \"success@upi\",\n \"user_consent\": {\n \"obtained\": true,\n \"type\": \"EXPLICIT\",\n \"timestamp\": \"2025-10-27T09:24:36Z\",\n \"purpose\": \"Testing the entire flow for penny drop verification\"\n },\n \"name\": \"John Doe\"\n}")
.asString();require 'uri'
require 'net/http'
url = URI("https://sandbox.cashfree.com/verification/upi/penny-drop")
http = Net::HTTP.new(url.host, url.port)
http.use_ssl = true
request = Net::HTTP::Post.new(url)
request["x-api-version"] = '<x-api-version>'
request["x-client-id"] = '<api-key>'
request["x-client-secret"] = '<api-key>'
request["Content-Type"] = 'application/json'
request.body = "{\n \"verification_id\": \"test_verification_id\",\n \"vpa\": \"success@upi\",\n \"user_consent\": {\n \"obtained\": true,\n \"type\": \"EXPLICIT\",\n \"timestamp\": \"2025-10-27T09:24:36Z\",\n \"purpose\": \"Testing the entire flow for penny drop verification\"\n },\n \"name\": \"John Doe\"\n}"
response = http.request(request)
puts response.read_body{
"verification_id": "test_verification_id",
"reference_id": 12345,
"status": "VALID",
"ifsc": "ICIC0006567",
"vpa": "success@upi",
"name_at_bank": "JOHN DOE",
"utr": "123456789012",
"bank_account": "1234567890",
"name_match_score": "95",
"name_match_result": "MATCH",
"ifsc_details": {
"bank": "ICICI Bank",
"neft": "Live",
"imps": "Live",
"rtgs": "Live",
"upi": "Live",
"address": "GROUND FLOOR, 123, ABC CIRCLE, XYZ MAIN ROAD, BANGALORE - 560098",
"city": "BANGALORE",
"state": "KARNATAKA",
"branch": "BANGALORE - RAJA RAJESHWARI NAGAR BRANCH",
"category": "SUB_MEMBER",
"swift_code": "ABCDINBBDCL",
"micr": 560751026,
"nbin": 1234
}
}Authorizations
Your unique client identifier issued by Cashfree. You can find this in your Merchant Dashboard.
The secret key associated with your client ID. Use this to authenticate your API requests. You can find this in your Merchant Dashboard.
Headers
Send the signature if two-factor authentication is selected as Public Key. More details.
API version to be used. Format is in YYYY-MM-DD.
Example:
"2024-12-01"
Body
application/json
Find the request parameters to create a UPI penny drop request.
It is the unique ID you create to identify the verification request. The maximum character limit is 50. Only alphaumeric, period (.), hyphen (-), and underscore ( _ ) are allowed.
Example:
"test_verification_id"
It is the valid UPI VPA information. Only alphanumeric, period (.), hyphen (-), underscore ( _ ), and at the rate of (@) are accepted.
Example:
"success@upi"
Consent details to be used for verification.
Show child attributes
Show child attributes
It is the name of the account holder.
Example:
"John Doe"
Response
Success response for UPI Penny Drop verification.
It is the unique ID you create to identify the verification request. The maximum character limit is 50. Only alphanumeric, period (.), hyphen (-), and underscore ( _ ) are allowed.
Example:
"test_verification_id"
It displays the unique ID created by Cashfree Payments for reference purposes.
format: int64
Example:
12345
It displays the status of the UPI penny drop verification.
Example:
"SUCCESS"
It displays the IFSC information associated with the VPA.
Example:
"ICIC0006567"
It is the valid UPI VPA information. Only alphanumeric, period (.), hyphen (-), underscore ( _ ), and at the rate of (@) are accepted.
Example:
"success@upi"
It displays the name of the account holder as registered in the bank records.
Example:
"JOHN DOE"
It displays the Unique Transaction Reference (UTR) number for the penny drop transaction.
Example:
"123456789012"
It displays the bank account number associated with the VPA.
Example:
"1234567890"
It displays the name match score when name verification is performed.
Example:
"95"
It displays the result of name matching verification.
Example:
"MATCH"
It displays the details corresponding to the IFSC information.
Show child attributes
Show child attributes
Was this page helpful?
⌘I