DIN to PAN Verification API

Endpoint Overview

POST /api/v1/corporate/din-to-pan

Description

The DIN to PAN Verification API enables businesses to retrieve the Permanent Account Number (PAN) associated with a Director Identification Number (DIN). This API serves as a critical tool for corporate verification, allowing organizations to validate the identity of company directors and establish connections between their DIN and PAN credentials.

This endpoint queries official government databases to fetch accurate, real-time information about directors, including their full name and associated PAN details. The verification process is instantaneous, providing businesses with immediate access to verified director information for compliance, onboarding, and due diligence purposes.

Key Benefits

Instant Verification: Real-time validation of director credentials against government databases

Enhanced Due Diligence: Streamline KYC processes by connecting DIN and PAN information seamlessly

Regulatory Compliance: Meet corporate governance and regulatory requirements efficiently

Fraud Prevention: Verify the authenticity of director information to prevent identity fraud and misrepresentation

Use Cases

Financial Services

Corporate Compliance

Professional Services

Corporate Onboarding: Banks and NBFCs can verify director identities during business account opening processes

Loan Processing: Financial institutions can validate directors' credentials for corporate lending and credit assessment

Investment Due Diligence: Verify the identity of company directors before making investment decisions

Technical Implementation

Authentication

All API requests require authentication using a JWT Bearer token. Authentication follows these steps:

Obtain API Credentials: Register with Surepass to receive your API key.

Generate JWT Token: Use your API key to generate a JWT token.

Include in Requests: Add the token to the Authorization header as Bearer TOKEN.

Different authentication tokens are used for sandbox and production environments:

Sandbox: https://sandbox.surepass.app

Production: https://kyc-api.surepass.app

Request Parameters

Request Headers

Header	Required	Description
Authorization	Yes	Bearer token for API authentication (Format: `Bearer <JWT_TOKEN>`)
Content-Type	Yes	Must be set to `application/json`

Request Body

Parameter	Type	Required	Description
id_number	string	Yes	The 8-digit Director Identification Number (DIN) to be verified. Must be a valid DIN issued by the Ministry of Corporate Affairs (MCA)

Example Request

{
    "id_number": "01234567"
}

Process Response

Response Parameters

Parameter	Type	Description
data	object	Contains the verification results and director information
data.client_id	string	Unique identifier for this verification request
data.din_number	string	The verified Director Identification Number
data.full_name	string	Full name of the director as registered with MCA
data.pan_number	string	Permanent Account Number (PAN) associated with the DIN
status_code	integer	HTTP status code of the response
success	boolean	Indicates whether the API request was successful
message	string/null	Additional information or error message (null on success)
message_code	string	Status code identifier (e.g., "success", "error")

Example Successful Response

{
    "data": {
        "client_id": "din_to_pan_lasinNwYcudverjpVkfw",
        "din_number": "08466726",
        "full_name": "RAJKUMAR RAO",
        "pan_number": "ABCPD1234F"
    },
    "status_code": 200,
    "success": true,
    "message": null,
    "message_code": "success"
}

Possible Error Responses

Authentication Error

{
    "data": null,
    "status_code": 401,
    "success": false,
    "message": "Unauthorized - Invalid or expired token",
    "message_code": "authentication_failed"
}

This error indicates that the JWT token is invalid, expired, or missing from the request headers.

Integration Best Practices

Security Recommendations

Token Management: Store JWT tokens securely using environment variables or secure key management systems. Never hardcode tokens in your application code

HTTPS Only: Always use HTTPS for API requests to ensure data encryption in transit

Token Rotation: Implement regular token rotation policies and handle token expiration gracefully

Input Validation: Validate DIN format (8 digits) on the client side before making API calls to reduce unnecessary requests

Error Handling: Implement comprehensive error handling to manage failed verifications and service disruptions

Audit Logging: Maintain logs of all verification requests for compliance and troubleshooting purposes

User Experience Guidelines

Real-time Feedback: Provide immediate visual feedback to users during the verification process with loading indicators

Clear Error Messages: Display user-friendly error messages when verification fails, avoiding technical jargon

Retry Mechanism: Implement automatic retry logic with exponential backoff for temporary failures

Data Privacy: Clearly communicate how director information will be used and stored, following data protection regulations

Progressive Disclosure: Display essential information first, with options to view detailed director information on demand

Code Samples

cURL

Python

Node.js

Related APIs

PAN Verification API - Validate PAN numbers independently and retrieve cardholder information

Corporate Identity Verification API - Comprehensive verification of company details using CIN (Corporate Identity Number)

GST Verification API - Verify GST registration details and validate business entities

Director KYC API - Complete KYC verification for company directors including address and identity proof validation

Compliance and Legal Considerations

This API accesses data from the Ministry of Corporate Affairs (MCA) and Income Tax Department databases. Organizations using this API must:

Comply with the Information Technology Act, 2000 and data protection regulations

Obtain appropriate consent from directors before verifying their credentials

Use the retrieved information only for legitimate business purposes such as KYC, due diligence, and compliance

Maintain confidentiality of director information and implement appropriate data security measures

Ensure compliance with the Companies Act, 2013 regarding the use of director information

Adhere to rate limits and fair usage policies to prevent abuse of government databases

Not use the API for unauthorized surveillance or data mining purposes

Organizations are responsible for ensuring their use of this API complies with all applicable laws and regulations.

Provide your bearer token in the

Authorization

header when making requests to protected resources.

Example:

Authorization: Bearer ********************

curl --location --request POST 'https://kyc-api.surepass.app/api/v1/corporate/din-to-pan' \ --header 'Authorization: Bearer <token>' \ --header 'Content-Type: application/json' \ --data-raw '{ "id_number": "01234567" }'

{ "data": { "client_id": "din_to_pan_lasinNwYcudverjpVkfw", "din_number": "01234567", "full_name": "RAJKUMAR RAO", "pan_number": "ABCPD1234F" }, "status_code": 200, "success": true, "message": null, "message_code": "success" }

DIN To PAN

DIN to PAN Verification API#

Description#

Use Cases#

Technical Implementation#

Request Headers#

Request Body#

Example Request#

Response Parameters#

Example Successful Response#

Possible Error Responses#

Integration Best Practices#

Code Samples#

Request

Responses