---
title: "Resend a rule-based account's SCA challenge code"
method: POST
path: "/internal-accounts/{id}/authorize/resend"
tags: ["Internal Accounts", "Strong Customer Authentication"]
---

# Resend a rule-based account's SCA challenge code

`POST /internal-accounts/{id}/authorize/resend`

## Request

- Base URL: `https://api.lightspark.com/grid/2025-10-13`
- URL: `https://api.lightspark.com/grid/2025-10-13/internal-accounts/{id}/authorize/resend`
- Auth: HTTP basic

Re-send the one-time code for a `PENDING` rule-based account whose
`scaChallenge.factor` is `SMS_OTP`. The existing challenge is reused and its
`scaChallenge.expiresAt` is **not** extended.

Only meaningful for customers in a region where SCA is required (e.g. EU);
a 409 is returned otherwise. `TOTP` and `PASSKEY` challenges cannot be
re-sent and return 409.

In sandbox, the code is always `123456`.

## Response `204`

Code re-sent.

## Other responses

- `401`: Unauthorized
- `404`: Internal account not found
- `409`: SCA is not required for this customer, the account has no pending challenge, or the challenge's factor cannot be re-sent.
- `429`: Too many requests.
- `500`: Internal service error

## Changes

> 117 revisions in range; 2 not diffed.

- **2026-11-03** `7ef4b76d04a3`: 1 info
  - endpoint added

[Operation history](https://skmtc.dev/lightsparkdev/apis/grid-api/changes/internal-accounts/:id/authorize/resend/post.md)

---

[API](https://skmtc.dev/lightsparkdev/apis/grid-api.md) - [All operations](https://skmtc.dev/lightsparkdev/apis/grid-api/llms.txt) - [OpenAPI document](https://skmtc.dev/lightsparkdev/apis/grid-api/revisions/7ef4b76d04a3?raw)