Skip to main content
POST
/
upi
/
penny-drop
UPI Penny Drop Request
curl --request POST \
  --url https://sandbox.cashfree.com/verification/upi/penny-drop \
  --header 'Content-Type: application/json' \
  --header 'x-api-version: <x-api-version>' \
  --header 'x-client-id: <api-key>' \
  --header 'x-client-secret: <api-key>' \
  --data '
{
  "verification_id": "test_verification_id",
  "vpa": "success@upi",
  "user_consent": {
    "obtained": true,
    "type": "EXPLICIT",
    "timestamp": "2025-10-27T09:24:36Z",
    "purpose": "Testing the entire flow for penny drop verification"
  },
  "name": "John Doe"
}
'
import requests

url = "https://sandbox.cashfree.com/verification/upi/penny-drop"

payload = {
    "verification_id": "test_verification_id",
    "vpa": "success@upi",
    "user_consent": {
        "obtained": True,
        "type": "EXPLICIT",
        "timestamp": "2025-10-27T09:24:36Z",
        "purpose": "Testing the entire flow for penny drop verification"
    },
    "name": "John Doe"
}
headers = {
    "x-api-version": "<x-api-version>",
    "x-client-id": "<api-key>",
    "x-client-secret": "<api-key>",
    "Content-Type": "application/json"
}

response = requests.post(url, json=payload, headers=headers)

print(response.text)
const options = {
  method: 'POST',
  headers: {
    'x-api-version': '<x-api-version>',
    'x-client-id': '<api-key>',
    'x-client-secret': '<api-key>',
    'Content-Type': 'application/json'
  },
  body: JSON.stringify({
    verification_id: 'test_verification_id',
    vpa: 'success@upi',
    user_consent: {
      obtained: true,
      type: 'EXPLICIT',
      timestamp: '2025-10-27T09:24:36Z',
      purpose: 'Testing the entire flow for penny drop verification'
    },
    name: 'John Doe'
  })
};

fetch('https://sandbox.cashfree.com/verification/upi/penny-drop', options)
  .then(res => res.json())
  .then(res => console.log(res))
  .catch(err => console.error(err));
<?php

$curl = curl_init();

curl_setopt_array($curl, [
  CURLOPT_URL => "https://sandbox.cashfree.com/verification/upi/penny-drop",
  CURLOPT_RETURNTRANSFER => true,
  CURLOPT_ENCODING => "",
  CURLOPT_MAXREDIRS => 10,
  CURLOPT_TIMEOUT => 30,
  CURLOPT_HTTP_VERSION => CURL_HTTP_VERSION_1_1,
  CURLOPT_CUSTOMREQUEST => "POST",
  CURLOPT_POSTFIELDS => json_encode([
    'verification_id' => 'test_verification_id',
    'vpa' => 'success@upi',
    'user_consent' => [
        'obtained' => true,
        'type' => 'EXPLICIT',
        'timestamp' => '2025-10-27T09:24:36Z',
        'purpose' => 'Testing the entire flow for penny drop verification'
    ],
    'name' => 'John Doe'
  ]),
  CURLOPT_HTTPHEADER => [
    "Content-Type: application/json",
    "x-api-version: <x-api-version>",
    "x-client-id: <api-key>",
    "x-client-secret: <api-key>"
  ],
]);

$response = curl_exec($curl);
$err = curl_error($curl);

curl_close($curl);

if ($err) {
  echo "cURL Error #:" . $err;
} else {
  echo $response;
}
package main

import (
	"fmt"
	"strings"
	"net/http"
	"io"
)

func main() {

	url := "https://sandbox.cashfree.com/verification/upi/penny-drop"

	payload := strings.NewReader("{\n  \"verification_id\": \"test_verification_id\",\n  \"vpa\": \"success@upi\",\n  \"user_consent\": {\n    \"obtained\": true,\n    \"type\": \"EXPLICIT\",\n    \"timestamp\": \"2025-10-27T09:24:36Z\",\n    \"purpose\": \"Testing the entire flow for penny drop verification\"\n  },\n  \"name\": \"John Doe\"\n}")

	req, _ := http.NewRequest("POST", url, payload)

	req.Header.Add("x-api-version", "<x-api-version>")
	req.Header.Add("x-client-id", "<api-key>")
	req.Header.Add("x-client-secret", "<api-key>")
	req.Header.Add("Content-Type", "application/json")

	res, _ := http.DefaultClient.Do(req)

	defer res.Body.Close()
	body, _ := io.ReadAll(res.Body)

	fmt.Println(string(body))

}
HttpResponse<String> response = Unirest.post("https://sandbox.cashfree.com/verification/upi/penny-drop")
  .header("x-api-version", "<x-api-version>")
  .header("x-client-id", "<api-key>")
  .header("x-client-secret", "<api-key>")
  .header("Content-Type", "application/json")
  .body("{\n  \"verification_id\": \"test_verification_id\",\n  \"vpa\": \"success@upi\",\n  \"user_consent\": {\n    \"obtained\": true,\n    \"type\": \"EXPLICIT\",\n    \"timestamp\": \"2025-10-27T09:24:36Z\",\n    \"purpose\": \"Testing the entire flow for penny drop verification\"\n  },\n  \"name\": \"John Doe\"\n}")
  .asString();
require 'uri'
require 'net/http'

url = URI("https://sandbox.cashfree.com/verification/upi/penny-drop")

http = Net::HTTP.new(url.host, url.port)
http.use_ssl = true

request = Net::HTTP::Post.new(url)
request["x-api-version"] = '<x-api-version>'
request["x-client-id"] = '<api-key>'
request["x-client-secret"] = '<api-key>'
request["Content-Type"] = 'application/json'
request.body = "{\n  \"verification_id\": \"test_verification_id\",\n  \"vpa\": \"success@upi\",\n  \"user_consent\": {\n    \"obtained\": true,\n    \"type\": \"EXPLICIT\",\n    \"timestamp\": \"2025-10-27T09:24:36Z\",\n    \"purpose\": \"Testing the entire flow for penny drop verification\"\n  },\n  \"name\": \"John Doe\"\n}"

response = http.request(request)
puts response.read_body
{
  "verification_id": "test_verification_id",
  "reference_id": 12345,
  "status": "VALID",
  "ifsc": "ICIC0006567",
  "vpa": "success@upi",
  "name_at_bank": "JOHN DOE",
  "utr": "123456789012",
  "bank_account": "1234567890",
  "name_match_score": "95",
  "name_match_result": "MATCH",
  "ifsc_details": {
    "bank": "ICICI Bank",
    "neft": "Live",
    "imps": "Live",
    "rtgs": "Live",
    "upi": "Live",
    "address": "GROUND FLOOR, 123, ABC CIRCLE, XYZ MAIN ROAD, BANGALORE - 560098",
    "city": "BANGALORE",
    "state": "KARNATAKA",
    "branch": "BANGALORE - RAJA RAJESHWARI NAGAR BRANCH",
    "category": "SUB_MEMBER",
    "swift_code": "ABCDINBBDCL",
    "micr": 560751026,
    "nbin": 1234
  }
}

Authorizations

ā€‹
x-client-id
string
header
required

Your unique client identifier issued by Cashfree. You can find this in your Merchant Dashboard.

ā€‹
x-client-secret
string
header
required

The secret key associated with your client ID. Use this to authenticate your API requests. You can find this in your Merchant Dashboard.

Headers

ā€‹
x-cf-signature
string

Send the signature if two-factor authentication is selected as Public Key. More details.

ā€‹
x-api-version
string
default:2024-12-01
required

API version to be used. Format is in YYYY-MM-DD.

Example:

"2024-12-01"

Body

application/json

Find the request parameters to create a UPI penny drop request.

ā€‹
verification_id
string
required

It is the unique ID you create to identify the verification request. The maximum character limit is 50. Only alphaumeric, period (.), hyphen (-), and underscore ( _ ) are allowed.

Example:

"test_verification_id"

ā€‹
vpa
string
required

It is the valid UPI VPA information. Only alphanumeric, period (.), hyphen (-), underscore ( _ ), and at the rate of (@) are accepted.

Example:

"success@upi"

ā€‹
user_consent
object
required

Consent details to be used for verification.

ā€‹
name
string

It is the name of the account holder.

Example:

"John Doe"

Response

Success response for UPI Penny Drop verification.

ā€‹
verification_id
string

It is the unique ID you create to identify the verification request. The maximum character limit is 50. Only alphanumeric, period (.), hyphen (-), and underscore ( _ ) are allowed.

Example:

"test_verification_id"

ā€‹
reference_id
integer

It displays the unique ID created by Cashfree Payments for reference purposes. format: int64

Example:

12345

ā€‹
status
string

It displays the status of the UPI penny drop verification.

Example:

"SUCCESS"

ā€‹
ifsc
string | null

It displays the IFSC information associated with the VPA.

Example:

"ICIC0006567"

ā€‹
vpa
string

It is the valid UPI VPA information. Only alphanumeric, period (.), hyphen (-), underscore ( _ ), and at the rate of (@) are accepted.

Example:

"success@upi"

ā€‹
name_at_bank
string | null

It displays the name of the account holder as registered in the bank records.

Example:

"JOHN DOE"

ā€‹
utr
string | null

It displays the Unique Transaction Reference (UTR) number for the penny drop transaction.

Example:

"123456789012"

ā€‹
bank_account
string | null

It displays the bank account number associated with the VPA.

Example:

"1234567890"

ā€‹
name_match_score
string | null

It displays the name match score when name verification is performed.

Example:

"95"

ā€‹
name_match_result
string | null

It displays the result of name matching verification.

Example:

"MATCH"

ā€‹
ifsc_details
object

It displays the details corresponding to the IFSC information.