14-TX Verification Failed (With Memo/Tag)

• Post-Transaction Approval - Transaction Verification Failed on a memo-required network.
• GTR will send a callback request (callbackType=9) with an address, a non-empty tag (memo), and an incorrect txId that should NOT be found in your system.
• Your server should return a failed verification response with the appropriate error code.
• This test targets networks whose deposits are only uniquely identified when both address and memo/tag are combined — for example HBAR, XLM, or XRP.

---

GTR Request (GTR → VASP)

• Method: POST
• Your Callback Endpoint: https://[YOUR_CALLBACK_URL]
• Authentication:
  • mTLS (Mutual Transport Layer Security) - GTR will authenticate using client certificates
• Header:
  • Content-Type: application/json
• Body:

{
    "requestId": "test-[RANDOM_ID]",
    "invokeVaspCode": "[YOUR_VASP_CODE]",
    "originatorVasp": "[TESTER_VASP_CODE]",
    "beneficiaryVasp": "[YOUR_VASP_CODE]",
    "callbackType": 9,
    "callbackData": {
        "requestId": "test-[RANDOM_ID]",
        "ticker": "--YOU SHOULD NOT REFER TO THIS TICKER--",
        "address": "[TEST_ADDRESS]",
        "tag": "[ADDRESS_TAG_MUST_BE_NON_EMPTY]",
        "txId": "[TX_ID]-should-be-incorrect-tx-id",
        "network": "[MEMO_REQUIRED_NETWORK_SYMBOL]",
        "initiatorVasp": "[TESTER_VASP_CODE]"
    }
}

curl -v --location --request POST 'https://[YOUR_CALLBACK_URL]' \
    -k \
    --header 'Content-Type: application/json' \
    --data-raw '{
        "requestId": "test-abc123def456",
        "invokeVaspCode": "[YOUR_VASP_CODE]",
        "originatorVasp": "[TESTER_VASP_CODE]",
        "beneficiaryVasp": "[YOUR_VASP_CODE]",
        "callbackType": 9,
        "callbackData": {
            "requestId": "test-abc123def456",
            "ticker": "--YOU SHOULD NOT REFER TO THIS TICKER--",
            "address": "[TEST_ADDRESS]",
            "tag": "[ADDRESS_TAG_MUST_BE_NON_EMPTY]",
            "txId": "[TX_ID]-should-be-incorrect-tx-id",
            "network": "[MEMO_REQUIRED_NETWORK_SYMBOL]",
            "initiatorVasp": "[TESTER_VASP_CODE]"
        }
    }'

Hint:

• callbackType: 9 indicates transaction verification for Post-Transaction
• tag MUST NOT be null or empty in this test case — the tag is a valid non-empty value; only txId is intentionally incorrect
• Pick a network that requires a memo/tag on deposits — e.g. HBAR (memo), XLM (memo), XRP (destination tag)
• The txId in this test is intentionally incorrect and should NOT be found — verification must fail even though address + tag may map to a valid deposit account
• Do NOT use the ticker field to search for users
• Your server should respond within 30 seconds

Materials:

• Receiver Callback API 2: TX Verification
• Authentication & mTLS Setup
• Callback Server Setup Guide
• Python Callback Server Example
• Golang Callback Server Example
• List of Networks
• Post-Transaction Travel Rule Overview

---

Expected Response (VASP → GTR)

When the transaction ID is not found in your system, you should return:

• HTTP Status Code: 200
• verifyStatus: 200007 (TXID Not Found)

{
    "verifyStatus": 200007,
    "verifyMessage": "TX ID Not Found"
}

---

Test Validation

Success Criteria:

• ✅ Your callback server responds within 30 seconds
• ✅ HTTP status code 200 returned
• ✅ verifyStatus: 200007 indicates "TXID Not Found"
• ✅ Lookup considers txId, address, and tag — a valid (address, tag) combined with a wrong txId must still fail
• ✅ Test data uses a memo-required network (HBAR / XLM / XRP / etc.) with a non-empty tag

Common Issues:

• ⚠️ Ignoring tag: On memo-required networks, matching without the tag can incorrectly resolve to a shared deposit account
• ⚠️ Null / empty tag: This test intentionally exercises a non-empty tag — treating it as absent is a bug
• ⚠️ Wrong Error Code: Must return verifyStatus: 200007 for TXID not found
• ⚠️ HTTP Status Confusion: Return HTTP 200 even for verification failures
• ⚠️ Ticker Reference: Do NOT use the ticker field to search for users