---
title: "Revoke the Trusted Beneficiary mark from an IBAN (business)"
method: POST
path: "/business/beneficiary/iban/untrust"
tags: ["Business Trusted Beneficiary"]
---

# Revoke the Trusted Beneficiary mark from an IBAN (business)

`POST /business/beneficiary/iban/untrust`

## Request

- Base URL: `https://www.sandbox.striga.com/api/v1`
- URL: `https://www.sandbox.striga.com/api/v1/business/beneficiary/iban/untrust`
- Auth: API key in header `api-key` and API key in header `Authorization`

Single-call TOTP-confirmed untrust for a business. The supplied `totpCode` is verified and the trust is removed in a single request.

## Request body

- object
  - `businessId` string, uuid, required
  - `whitelistedIbanId` string, uuid, required
  - `totpCode` string, required: 6–8 character TOTP or recovery code, verified at the time of the request.

## Response `200`

Untrust applied.

- object
  - `ok` boolean, required

## Other responses

- `400`: Request was rejected. The `errorCode` field disambiguates.
- `401`: Invalid API key or HMAC signature.

---

[API](https://skmtc.dev/striga/apis/striga-strong-customer-authentication.md) - [All operations](https://skmtc.dev/striga/apis/striga-strong-customer-authentication/llms.txt) - [OpenAPI document](https://skmtc.dev/striga/apis/striga-strong-customer-authentication/revisions/6a0cf1c67072?raw)