Mobile To PAN

Endpoint Overview

POST /api/v1/pan/mobile-to-pan

Description

This API retrieves Permanent Account Number (PAN) details by matching a mobile number with a person's name. It allows you to verify and fetch PAN information when you have a user's mobile number and name, providing a convenient way to retrieve PAN details without requiring the physical PAN card or number from the user.

Key Benefits

Simplifies KYC processes by retrieving PAN details using just mobile number and name

Reduces manual data entry errors in financial and regulatory compliance workflows

Enables faster customer onboarding with automated PAN verification

Helps prevent identity fraud by cross-verifying user-provided information

Use Cases

Financial Services

Insurance

Fintech

Streamline customer onboarding for banking and financial institutions

Verify customer identity during loan application processing

Automate KYC verification for investment accounts and trading platforms

Technical Implementation

Authentication

All API requests require authentication using a JWT Bearer token. Authentication follows these steps:

Obtain API Credentials: Register with Surepass to receive your API key.

Generate JWT Token: Use your API key to generate a JWT token.

Include in Requests: Add the token to the Authorization header as Bearer TOKEN.

Different authentication tokens are used for sandbox and production environments:

Sandbox: https://sandbox.surepass.io

Production: https://kyc-api.surepass.io

Request Parameters

Request Headers

Header	Required	Description
Authorization	Yes	Bearer token for authentication (JWT format)
Content-Type	Yes	Application/json

Request Body

Parameter	Type	Required	Description
name	String	Yes	Full name of the person as registered with the PAN
mobile_no	String	Yes	Mobile number registered with the PAN (10 digits)

Example Request

{
    "name": "sambhaaji",
    "mobile_no": "8888808969"
}

Process Response

Response Parameters

Parameter	Type	Description
data	Object	Container for the response data
data.client_id	String	Unique identifier for the API request
data.name	String	Name of the person associated with the PAN
data.mobile_no	String	Mobile number used for the query
data.pan_number	String	PAN card number associated with the provided mobile number
status_code	Integer	HTTP status code of the response
success	Boolean	Indicates if the request was successful
message	String	Human-readable status message
message_code	String	Machine-readable status code

Example Successful Response

{
    "data": {
        "client_id": "mobile_to_pan_PnrccpqLOtuzdvYpPlpI",
        "name": "vishal",
        "mobile_no": "8079012345",
        "pan_number": "EKRPR1234F"
    },
    "status_code": 200,
    "success": true,
    "message": "Success",
    "message_code": "success"
}

Possible Error Responses

Invalid Mobile Number

Authentication Error

{
    "status_code": 422,
    "success": false,
    "message": "Verification Failed.",
    "message_code": "verification_failed"
}

The provided PAN number does not match the required format or contains invalid characters.

Integration Best Practices

Security Recommendations

Store API keys securely and never expose them in client-side code

Implement proper error handling to avoid exposing sensitive information

Use HTTPS for all API communications

Implement rate limiting on your end to prevent abuse

Log API requests and responses for audit purposes, but mask sensitive data

User Experience Guidelines

Implement proper validation for mobile number format before making API calls

Display clear error messages to users when verification fails

Provide a fallback method for users whose PAN details cannot be retrieved automatically

Consider implementing a retry mechanism with exponential backoff for temporary failures

Cache successful responses appropriately to improve performance

Code Samples

cURL

Python

Node.js

Related APIs

PAN Verification API: Verifies PAN details against government records

PAN OCR API: Extracts information from PAN card images

PAN to Aadhaar Linking Status API: Checks if a PAN is linked to Aadhaar

Compliance and Legal Considerations

This API handles personally identifiable information (PII) and is subject to data protection regulations. Ensure you have proper consent from users before retrieving their PAN details. Usage of this API must comply with Income Tax Department regulations and data privacy laws including the Personal Data Protection Bill. Store retrieved PAN information securely and use it only for legitimate business purposes.

curl --location --request POST 'https://kyc-api.surepass.app/api/v1/pan/mobile-to-pan' \ --header 'Authorization: Bearer <TOKEN>' \ --header 'Content-Type: application/json' \ --data-raw '{ "name": "sambhaaji", "mobile_no": "8888808969" }'

{ "data": { "client_id": "mobile_to_pan_PnrccpqLOtuzdvYpPlpI", "name": "vishal", "mobile_no": "8079012345", "pan_number": "EKRPR1234F" }, "status_code": 200, "success": true, "message": "Success", "message_code": "success" }

Provide your bearer token in the

Authorization

header when making requests to protected resources.

Example:

Authorization: Bearer ********************

Mobile To PAN

Mobile To PAN#

Description#

Use Cases#

Technical Implementation#

Request Headers#

Request Body#

Example Request#

Response Parameters#

Example Successful Response#

Possible Error Responses#

Integration Best Practices#

Code Samples#

Request

Responses

Mobile To PAN

Description

Use Cases

Technical Implementation

Request Headers

Request Body

Example Request

Response Parameters

Example Successful Response

Possible Error Responses

Integration Best Practices

Code Samples