04-Address Verification Success

• Pre-Transaction Approval - Address Verification Success.
• GTR will send a callback request (callbackType=6) to verify if a specific beneficiary address belongs to your system.
• Your server should confirm address ownership and return a successful verification response.

---

GTR Request (GTR → VASP)

• Method: POST
• Your Callback Endpoint: https://[YOUR_CALLBACK_URL]
• Authentication:
  • mTLS (Mutual Transport Layer Security) - GTR will authenticate using client certificates
• Header:
  • Content-Type: application/json
• Body:

{
    "requestId": "test-[RANDOM_ID]",
    "invokeVaspCode": "[YOUR_VASP_CODE]",
    "originatorVasp": "[TESTER_VASP_CODE]",
    "beneficiaryVasp": "[YOUR_VASP_CODE]",
    "callbackType": 6,
    "callbackData": {
        "requestId": "test-[RANDOM_ID]",
        "originatorVasp": "[TESTER_VASP_CODE]",
        "originatorVaspName": "[TESTER_VASP_NAME]",
        "ticker": "--YOU SHOULD NOT REFER THIS TICKER TO SEARCH YOUR USER--",
        "address": "[TEST_ADDRESS]",
        "tag": "[ADDRESS_TAG]",
        "network": "[NETWORK_SYMBOL]",
        "initiatorVasp": "[TESTER_VASP_CODE]"
    }
}

curl -v --location --request POST 'https://[YOUR_CALLBACK_URL]' \
    -k \
    --header 'Content-Type: application/json' \
    --data-raw '{
        "requestId": "test-abc123def456",
        "invokeVaspCode": "[YOUR_VASP_CODE]",
        "originatorVasp": "[TESTER_VASP_CODE]",
        "beneficiaryVasp": "[YOUR_VASP_CODE]",
        "callbackType": 6,
        "callbackData": {
            "requestId": "test-abc123def456",
            "originatorVasp": "[TESTER_VASP_CODE]",
            "originatorVaspName": "[TESTER_VASP_NAME]",
            "ticker": "--YOU SHOULD NOT REFER THIS TICKER TO SEARCH YOUR USER--",
            "address": "[TEST_ADDRESS]",
            "tag": "[ADDRESS_TAG]",
            "network": "[NETWORK_SYMBOL]",
            "initiatorVasp": "[TESTER_VASP_CODE]"
        }
    }'

Hint:

• callbackType: 6 indicates address verification for Pre-Transaction
• Do NOT use the ticker field to search for users
• Focus on address and tag for accurate user identification
• Your server should respond within 30 seconds

Materials:

• Receiver Callback API 1: Address Verification
• Authentication & mTLS Setup
• Callback Server Setup Guide
• Python Callback Server Example
• Golang Callback Server Example
• List of Networks
• Pre-Transaction Travel Rule Overview

---

Expected Response (VASP → GTR)

When the address is found in your system, you should return:

• HTTP Status Code: 200
• verifyStatus: 100000 (success)

{
    "verifyStatus": 100000,
    "verifyMessage": "Address verification passed"
}

---

Test Validation

Success Criteria:

• ✅ Your callback server responds within 30 seconds
• ✅ HTTP status code 200 returned
• ✅ verifyStatus: 100000 indicates successful verification
• ✅ Address lookup confirms ownership

Common Issues:

• ⚠️ Wrong Status Code: Return HTTP 200 even for failed verification (use verifyStatus instead)
• ⚠️ Ticker Reference: Do NOT use the ticker field to search for users
• ⚠️ Missing Address: Check both address and tag fields for complete matching