---
title: "Verify OTP Code for Pre-Verified Phone Number"
method: POST
path: "/{Version}/{Pre-Verified-Phone-Number-ID}/verify_code"
tags: ["Pre-Verified Phone Numbers"]
---

# Verify OTP Code for Pre-Verified Phone Number

`POST /{Version}/{Pre-Verified-Phone-Number-ID}/verify_code`

## Request

- Base URL: `https://graph.facebook.com`
- URL: `https://graph.facebook.com/{Version}/{Pre-Verified-Phone-Number-ID}/verify_code`
- Auth: HTTP bearer

Verify the OTP code received for a pre-verified phone number to complete the
verification process. This endpoint validates the code and updates the verification
status of the phone number.


**Use Cases:**
- Complete phone number verification during WhatsApp Business onboarding
- Verify ownership of phone numbers for business messaging
- Enable phone numbers for WhatsApp Business API usage


**Rate Limiting:**
This endpoint has specific rate limits to prevent abuse:
- 125 requests per hour for business use cases
- Standard Graph API rate limits also apply


**Code Validation:**
- Codes are time-sensitive and expire after a set period
- Each code can only be used once
- Invalid or expired codes will result in verification failure


**Error Handling:**
- Invalid codes return 400 Bad Request
- Expired codes return 422 Unprocessable Entity
- Rate limit exceeded returns 429 Too Many Requests

## Path parameters

- `Version` string, required
- `Pre-Verified-Phone-Number-ID` string, required

## Headers

- `User-Agent` string
- `Authorization` string, required

## Request body

- VerifyCodeRequest
  - `code` string, required: 6-digit verification code received via SMS or voice

## Response `200`

Successfully verified the OTP code

- VerifyCodeResponse: Response from phone number verification code verification
  - `success` boolean, required: Indicates whether the verification code was successfully verified
  - `id` string: The phone number ID that was verified

## Other responses

- `400`: Bad Request - Invalid parameters or malformed request
- `401`: Unauthorized - Invalid or missing access token
- `403`: Forbidden - Insufficient permissions or access denied
- `404`: Not Found - Pre-Verified Phone Number ID does not exist or is not accessible
- `422`: Unprocessable Entity - Code is invalid, expired, or already used
- `429`: Too Many Requests - Rate limit exceeded
- `500`: Internal Server Error - Unexpected server error

---

[API](https://skmtc.dev/meta/apis/whatsapp-business-messaging.md) - [All operations](https://skmtc.dev/meta/apis/whatsapp-business-messaging/llms.txt) - [OpenAPI document](https://skmtc.dev/meta/apis/whatsapp-business-messaging/revisions/5c1973265369?raw)