---
title: "Confirm trust (IBAN or address) with the chosen SCA factor"
method: POST
path: "/wallets/beneficiary/confirm-trust"
tags: ["Trusted Beneficiary"]
---

# Confirm trust (IBAN or address) with the chosen SCA factor

`POST /wallets/beneficiary/confirm-trust`

## Request

- Base URL: `https://www.sandbox.striga.com/api/v1`
- URL: `https://www.sandbox.striga.com/api/v1/wallets/beneficiary/confirm-trust`
- Auth: API key in header `api-key` and API key in header `Authorization`

Provide exactly one of `whitelistedIbanId` or `whitelistedAddressId`. For USDC addresses, address eligibility is re-checked at confirmation time. — Required body fields per factor: `sms` needs `challengeId` and `code` (6-digit numeric); `totp` needs `code` (6–8 characters); `passkey` needs `origin` and `credential`.

## Request body

- object
  - `userId` string, required
  - `whitelistedIbanId` string: Required when trusting an IBAN.
  - `whitelistedAddressId` string: Required when trusting a USDC address.
  - `verificationMethod` 'sms' | 'totp' | 'passkey': Defaults to `sms` when omitted.
  - `challengeId` string: Required for `sms`.
  - `code` string: 6-digit OTP for `sms`; 6–8 char code for `totp`.
  - `origin` string: Required for `passkey`.
  - `credential` object: WebAuthn assertion. Required for `passkey`.
    - `id` string
    - `rawId` string
    - `type` string
    - `response` object
      - `clientDataJSON` string
      - `authenticatorData` string
      - `signature` string
      - `userHandle` string
    - `clientExtensionResults` object: WebAuthn client extension results.
      - `appid` string: Optional appid extension result.

## Response `200`

Trust applied.

- object
  - `ok` boolean, required

## Other responses

- `400`: Request was rejected. The `errorCode` field disambiguates.
- `401`: Invalid API key or HMAC signature.

---

[API](https://skmtc.dev/striga/apis/striga-strong-customer-authentication.md) - [All operations](https://skmtc.dev/striga/apis/striga-strong-customer-authentication/llms.txt) - [OpenAPI document](https://skmtc.dev/striga/apis/striga-strong-customer-authentication/revisions/6a0cf1c67072?raw)