---
title: "Complete a 2FA reset"
method: POST
path: "/sca/factors/reset/{resetId}/complete"
tags: ["Strong Customer Authentication"]
---

# Complete a 2FA reset

`POST /sca/factors/reset/{resetId}/complete`

## Request

- Base URL: `https://api.lightspark.com/grid/2025-10-13`
- URL: `https://api.lightspark.com/grid/2025-10-13/sca/factors/reset/{resetId}/complete`
- Auth: HTTP basic

Complete a 2FA reset once liveness has passed, clearing the lost factor so
the customer can re-enroll.

The body is required and must carry the end user's `endUserIpAddress`. For an
`SMS_OTP` reset, also supply the new `mobile` number — completing the reset
enrolls it as the customer's number; other factors need no `mobile`.

This endpoint is only meaningful for customers in a region where SCA is required (e.g. EU). For customers outside SCA-regulated regions, this returns `409`.

## Request body

- TwoFactorResetCompleteRequest: Completes a 2FA reset. The body is required and carries the IP address the end user is completing the reset from; `mobile` is only needed when resetting the `SMS_OTP` factor to a new phone number.
  - `endUserIpAddress` string, required: The IP address of the end user's device completing this reset, recorded against the reset by the SCA provider. Supply the customer's address, not your server's — it feeds the provider's risk assessment of the recovery.
  - `mobile` object: For an `SMS_OTP` reset, the new mobile number to enroll as the customer completes the reset. Required for an `SMS_OTP` reset; ignored for `TOTP` / `PASSKEY` resets.
    - `countryCode` string, required: The country dialing code, including the leading `+`.
    - `number` string, required: The national subscriber number, without the country code.

## Response `204`

Reset completed; no content is returned.

## Other responses

- `400`: Reset not ready (liveness not yet passed)
- `401`: Unauthorized
- `404`: Customer or reset not found
- `409`: SCA is not required for this customer.
- `500`: Internal service error

## Changes

> 115 revisions in range; 2 not diffed.

- **2026-10-28** `d996ddfb9d2b`: 2 info
  - added the optional property `details/missingFields` to the response with the `400` status
  - added the optional property `details/refusalReason` to the response with the `400` status
- **2026-10-26** `f11f1e76bdd7`: 1 warning
  - added the new `PURCHASE_CARD_LIMIT_REACHED` enum value to the `code` response property for the response status `409`
- **2026-10-26** `0a6dad5815c7`: 1 warning
  - added the new `INVOICE_ALREADY_USED` enum value to the `code` response property for the response status `409`
- **2026-10-24** `715332dcb111`: 1 warning
  - added the new `EXACT_AMOUNT_UNAVAILABLE` enum value to the `code` response property for the response status `400`
- **2026-10-20** `761d1d030cb5`: 2 warning
  - added the new `AGENT_CARD_EXISTS` enum value to the `code` response property for the response status `409`
  - added the new `CARDHOLDER_AGREEMENT_NOT_ACCEPTED` enum value to the `code` response property for the response status `400`

[Operation history](https://skmtc.dev/lightsparkdev/apis/grid-api/changes/sca/factors/reset/:resetId/complete/post.md)

---

[API](https://skmtc.dev/lightsparkdev/apis/grid-api.md) - [All operations](https://skmtc.dev/lightsparkdev/apis/grid-api/llms.txt) - [OpenAPI document](https://skmtc.dev/lightsparkdev/apis/grid-api/revisions/7a1db46ec552?raw)