Generates a one-time passcode (OTP) and sends it via SMS to the user's registered
phone number. The user then enters this code in the next step.
Rate limiting: This endpoint can only be called once every 30 seconds per user.
If called too soon, the API returns 429 with a Retry-After header and a
remainingSeconds field in the error meta.
Authentication: Requires the temporary access token from step 3.
Possible error codes:
| Code | Status | Description |
|---|---|---|
CAN_NOT_GENERATE_PHONE_VERIFICATION_CODE | 400 | OTP generation or SMS delivery failed |
UNAUTHORIZED | 403 | Missing or invalid token |
PHONE_VERIFICATION_CODE_RATE_LIMITED | 429 | Called within the 30-second window |
| Time | Status | User Agent | |
|---|---|---|---|
Retrieving recent requests… | |||
This endpoint is shared across Individual, Business Owner, and Operator user types.
Sandbox: Finding the OTP Code
In the staging environment, SMS messages are not delivered to real phones. Instead, all notifications (including the OTP code) are visible in the sandbox notification log:
https://api-test.stage2.tappbank.com/notifications/public/v1/debug
Open that URL after calling this endpoint to retrieve the OTP code, then pass it to the Verify Phone OTP endpoint.
OTP sent successfully via SMS.