PAN

Endpoint Overview

POST /api/v1/pan/pan

Description

This API endpoint allows you to retrieve detailed information about an individual based on their Permanent Account Number (PAN). The PAN is a unique alphanumeric identifier issued by the Indian Income Tax Department. This endpoint verifies the PAN's authenticity and returns comprehensive details associated with it, enabling seamless identity verification for new clients.

Key Benefits

Instant verification of PAN details without manual intervention

Reduced onboarding time for new clients through automated KYC processes

Minimized risk of fraud through reliable government database verification

Compliance with regulatory requirements for customer identification

Use Cases

Financial Services

Fintech

Corporate

Account opening verification for banks and financial institutions

KYC compliance during customer onboarding for investment platforms

Identity verification for loan and credit card applications

Technical Implementation

Authentication

All API requests require authentication using a JWT Bearer token. Authentication follows these steps:

Obtain API Credentials: Register with Surepass to receive your API key.

Generate JWT Token: Use your API key to generate a JWT token.

Include in Requests: Add the token to the Authorization header as Bearer TOKEN.

Different authentication tokens are used for sandbox and production environments:

Sandbox: https://sandbox.surepass.io

Production: https://kyc-api.surepass.io

Request Parameters

Request Headers

Header	Required	Description
Authorization	Yes	Bearer token for authentication (JWT format)
Content-Type	Yes	Application/json

Request Body

Parameter	Type	Required	Description
id_number	String	Yes	The PAN number to verify (10 character alphanumeric identifier)

Example Request

{
  "id_number": "ABCDE1234F"
}

Process Response

Response Parameters

Parameter	Type	Description
success	Boolean	Indicates if the API request was successful
data	Object	Contains the PAN details
data.id_number	String	The PAN number that was verified
data.name	String	Full name of the PAN holder
data.father_name	String	Father's name of the PAN holder (if available)
data.dob	String	Date of birth of the PAN holder (format: DD/MM/YYYY)
data.pan_type	String	Type of PAN (Individual, Company, etc.)
data.aadhaar_seeding_status	String	Status of Aadhaar seeding with PAN
data.status	String	Status of the PAN (Active, Inactive)
data.category	String	Category of the PAN holder
data.last_updated	String	Date when the PAN details were last updated

Example Successful Response

{
  "success": true,
  "data": {
    "id_number": "ABCDE1234F",
    "name": "JOHN DOE",
    "father_name": "RICHARD DOE",
    "dob": "01/01/1980",
    "pan_type": "Individual",
    "aadhaar_seeding_status": "Y",
    "status": "ACTIVE",
    "category": "Individual",
    "last_updated": "2023-01-15T10:30:45Z"
  }
}

Possible Error Responses

Invalid PAN

Authentication Error

Service Unavailable

{
  "success": false,
  "error_code": "INVALID_PAN",
  "message": "The provided PAN number is invalid or does not exist"
}

This error occurs when the provided PAN number format is incorrect or the PAN doesn't exist in the database.

Integration Best Practices

Security Recommendations

Store API keys securely and never expose them in client-side code

Implement proper error handling to avoid exposing sensitive information

Use HTTPS for all API communications to ensure data encryption

Implement IP whitelisting for additional security if supported by your infrastructure

User Experience Guidelines

Implement client-side validation for PAN format before making API calls

Display a loading indicator during API calls to improve user experience

Provide clear error messages to users when verification fails

Cache verified PAN details (securely) to avoid unnecessary repeated API calls

Code Samples

cURL

Python

Node.js

Related APIs

PAN OCR API: Extract PAN details from PAN card images

PAN Verification with Face Match: Verify PAN details with facial recognition

Bulk PAN Verification: Verify multiple PAN numbers in a single request

Compliance and Legal Considerations

PAN data is considered sensitive personal information under various Indian data protection regulations. Ensure you have proper consent from users before verifying their PAN details. Store the retrieved information securely and in compliance with applicable data protection laws. The use of this API should align with the purpose disclosed to your users during data collection.

Provide your bearer token in the

Authorization

header when making requests to protected resources.

Example:

Authorization: Bearer ********************

curl --location --request POST 'https://kyc-api.surepass.app/api/v1/pan/pan' \ --header 'X-Customer-Id: {{customer_id}}' \ --header 'Authorization: Bearer <token>' \ --header 'Content-Type: application/json' \ --data-raw '{ "id_number": "{{pan_number}}" }'

PAN

PAN#

Description#

Use Cases#

Technical Implementation#

Request Headers#

Request Body#

Example Request#

Response Parameters#

Example Successful Response#

Possible Error Responses#

Integration Best Practices#

Code Samples#

Request

Responses

PAN