---
title: "Whitelist Destination IBAN"
method: POST
path: "/business/whitelist-iban"
tags: ["wallets"]
---

# Whitelist Destination IBAN

`POST /business/whitelist-iban`

## Request

- Base URL: `https://www.sandbox.striga.com/api/v1/wallets`
- URL: `https://www.sandbox.striga.com/api/v1/wallets/business/whitelist-iban`
- Auth: API key in header `api-key` and API key in header `Authorization`

Whitelist a destination IBAN for a business. The IBAN must be trusted via /business/beneficiary/iban/trust before it can be used as a standing-order or withdrawal destination under an SCA-enabled application.

## Request body

- BusinessWhitelistIbanRequest
  - `businessId` string, uuid, required: Unique Id of the business for whom this IBAN is being whitelisted
  - `iban` string, required: The IBAN to whitelist
  - `bic` string, required: The BIC/SWIFT code for the IBAN
  - `label` string: Optional label for this IBAN (max 30 characters)
  - `paymentType` 'SEPA' | 'SEPA_INSTANT': The SEPA payment rail to use for payouts to this IBAN

## Response `200`

success

- BusinessWhitelistIbanResponse
  - `id` string, uuid, required
  - `parentApplicationId` string, uuid, required
  - `syncedOwnerId` string, uuid, required: The businessId of the business who whitelisted this IBAN
  - `ownerType` string, required
  - `iban` string, required
  - `bic` string, required
  - `label` string
  - `paymentType` 'SEPA' | 'SEPA_INSTANT'
  - `status` string, required
  - `createdAt` string, date-time, required

## Other responses

- `400`: Bad Request. The request was unacceptable, often due to missing a required parameter.
- `401`: Invalid authentication header
- `403`: Forbidden
- `500`: Unexpected server error.

---

[API](https://skmtc.dev/striga/apis/business-wallets-transactions.md) - [All operations](https://skmtc.dev/striga/apis/business-wallets-transactions/llms.txt) - [OpenAPI document](https://skmtc.dev/striga/apis/business-wallets-transactions/revisions/ea0f4d67546d?raw)