PAN Account Linkage Verification

Endpoint Overview

POST /api/v1/pan/pan-account-linkage

Description

The PAN Account Linkage API enables real-time verification of the relationship between a PAN (Permanent Account Number) and a bank account. This endpoint validates whether a given PAN is linked to a specific bank account using the account number and IFSC code, providing comprehensive account holder information upon successful verification.

This API serves as a critical component for KYC (Know Your Customer) processes, fraud prevention, and financial compliance by ensuring the authenticity of PAN-bank account relationships before processing transactions or onboarding customers.

Key Benefits

Real-time Verification: Instant validation of PAN-account linkage with live banking data

Comprehensive Details: Returns full account holder information including account type and nature

Fraud Prevention: Reduces financial fraud by verifying legitimate PAN-account associations

Compliance Ready: Supports regulatory compliance requirements for financial institutions

Use Cases

Banking & Finance

Fintech & Digital Payments

E-commerce & Marketplaces

Account Opening: Verify customer PAN matches their bank account during onboarding

Loan Processing: Validate borrower's PAN-account linkage for loan disbursement

Payment Gateway: Ensure merchant PAN is linked to settlement account

Investment Platforms: Verify investor PAN-bank account relationship for fund transfers

Supported Banks

The PAN Account Linkage API supports verification across 60+ major banks in India, including:

Major Public Banks

Leading Private Banks

International & Others

SBIN - State Bank of India

CBIN - Central Bank of India

PUNB - Punjab National Bank

CNRB - Canara Bank

BKID - Bank of India

BARB - Bank of Baroda

UBIN - Union Bank of India

UCBA - UCO Bank

For complete list of 60+ supported banks, refer to the bank codes table in the technical specifications.

Technical Implementation

Authentication

All API requests require authentication using a JWT Bearer token. Authentication follows these steps:

Obtain API Credentials: Register with Surepass to receive your API key.

Generate JWT Token: Use your API key to generate a JWT token for the respective environment.

Include in Requests: Add the token to the Authorization header as Bearer TOKEN.

Environment URLs:

Sandbox: https://sandbox.surepass.app

Production: https://kyc-api.surepass.app

Different authentication tokens are required for sandbox and production environments.

Request Parameters

Request Headers

Header	Required	Description
`Authorization`	Yes	Bearer JWT token for API authentication
`Content-Type`	Yes	Must be set to `application/json`

Request Body

Parameter	Type	Required	Description	Validation
`pan`	string	Yes	10-character PAN number	Must match PAN format (5 letters + 4 digits + 1 letter)
`account`	string	Yes	Bank account number	Numeric string, length varies by bank
`ifsc`	string	Yes	11-character IFSC code	Must be valid IFSC format and from supported banks

Example Request

{
    "pan": "BQHPD5202R",
    "account": "925060049678785",
    "ifsc": "UBIN0569780"
}

Process Response

Response Parameters

Parameter	Type	Description
`data`	object	Container for response data
`data.client_id`	string	Unique identifier for the verification request
`data.pan`	string	Verified PAN number
`data.account`	string	Verified account number
`data.ifsc`	string	Verified IFSC code
`data.linked`	boolean	Whether PAN is linked to the account
`data.full_name`	string	Full name of the account holder
`data.account_type`	string	Type of account (savings, current, etc.)
`data.account_nature`	string	Nature of account (single, joint)
`data.account_holder`	string	Account holder status (primary, secondary)
`status_code`	integer	HTTP status code
`success`	boolean	Whether the request was successful
`message`	string/null	Additional message if any
`message_code`	string	Status message code

Example Successful Response

{
    "data": {
        "client_id": "pan_account_linkage_WKVfwjqyocdmQZmOLfEz",
        "pan": "BQHPD5202R",
        "account": "925060049678785",
        "ifsc": "UBIN0569780",
        "linked": true,
        "full_name": "MUNNA SINGH",
        "account_type": "savings",
        "account_nature": "single",
        "account_holder": "primary"
    },
    "status_code": 200,
    "success": true,
    "message": null,
    "message_code": "success"
}

Possible Error Responses

Invalid PAN Format

Account Not Linked

Unsupported Bank

Authentication Error

{
    "data": null,
    "status_code": 400,
    "success": false,
    "message": "Invalid PAN format",
    "message_code": "invalid_pan_format"
}

Returned when PAN doesn't match the required format (AAAAA9999A)

Integration Best Practices

Security Recommendations

Token Management: Store JWT tokens securely and implement automatic refresh mechanisms

Data Encryption: Encrypt sensitive PAN and account data in transit and at rest

Rate Limiting: Implement client-side rate limiting to avoid API quota exhaustion

Input Validation: Validate PAN and IFSC formats before making API calls

Error Handling: Implement comprehensive error handling for all possible response scenarios

User Experience Guidelines

Progressive Disclosure: Request PAN verification only when necessary in the user flow

Clear Messaging: Provide clear error messages when verification fails

Loading States: Show appropriate loading indicators during verification process

Retry Logic: Implement intelligent retry mechanisms for temporary failures

Privacy Notice: Inform users about data usage and verification purposes

Code Samples

cURL

Python

Node.js

Complete Bank Support List

Bank Code	Bank Name
SBIN	State Bank of India
HDFC	HDFC Bank Limited
UTIB	Axis Bank Limited
ICIC	ICICI Bank Limited
UBIN	Union Bank of India
KKBK	Kotak Mahindra Bank Limited
BARB	Bank of Baroda
HSBC	HSBC Bank of India
PUNB	Punjab National Bank
SIBL	Social Islami Bank Limited
KVBL	Karur Vysya Bank
KARB	Karnataka Bank Limited
IDFB	IDFC Bank Limited
YESB	Yes Bank Limited
DBSS	DBS Bank India Limited
SCBL	Standard Chartered Bank India
INDB	IndusInd Bank Limited
CIUB	City Union Bank Limited
IBKL	IDBI Bank Limited
UJVN	Ujivan Small Finance Bank
CBIN	Central Bank of India
FDRL	Federal Bank
JSFB	Jana Small Finance Bank
RMGB	Rajasthan Marudhara Gramin Bank
TMBL	Tamilnad Mercantile Bank Limited
RATN	RBL Bank Limited
PSIB	Punjab & Sind Bank
UCBA	UCO Bank
SURY	Suryoday Small Finance Bank
PYTM	Paytm Payments Bank Limited
UTKS	SVC Co-operative Bank Limited
SVCB	SVC Co-operative Bank
SRCB	Saraswat Co-operative Bank Limited
TJSB	TJSB Sahakari Bank Limited
PJSB	Pune Janata Sahakari Bank
JAKA	Jammu & Kashmir Bank Limited
CNRB	Canara Bank
BKID	Bank of India
BMCB	Bhavnagar Mahila Co-operative Bank Ltd.
RNSB	Rajkot Nagarik Sahakari Bank Ltd.
APMC	A.P. Mahesh Cooperative Urban Bank
SUNB	Surat Nagarik Sahakari Bank Ltd.
JIOP	Jio Payments Bank Ltd.
CRGB	Chhattisgarh Rajya Gramin Bank
GSCB	Gujarat State Co-operative Bank Ltd
CSBK	Catholic Syrian Bank
JPCB	Jalgaon People Co-operative Bank Ltd
NTBL	The Nainital Bank Limited
JSBP	Jaata Sahakari Bank Pune Ltd
SGBA	Saurashta Gramin Bank Ltd
ASBL	Apna Sahakari Bank Ltd
AMCB	Ahmednagar Merchants Co-operative Bank Ltd
AJHC	Ambarnath Jai-Hind Co-operative Bank Ltd
LAVB	Lakshmi Vilas Bank
CORP	Corporation Bank
DEOB	Deogiri Nagari Sahakari Bank Ltd
SUTB	Sutex Bank
JJSB	Jalgoan Janata Sahakari Bank
SPCB	Surat People's Cooperative Bank Ltd

Related APIs

PAN Verification API - Validate PAN number and retrieve basic holder information
Bank Account Verification API - Verify bank account details and holder name
IFSC Code Lookup API - Get complete bank branch information using IFSC code
GST-PAN Linkage API - Verify if PAN is linked to GST registration
Advanced PAN Details API - Retrieve comprehensive PAN holder information

Compliance and Legal Considerations

This API processes sensitive financial data and PAN information. Ensure compliance with:

RBI Guidelines: Follow Reserve Bank of India regulations for financial data handling

Data Privacy: Implement appropriate data protection measures as per applicable laws

PAN Verification Rules: Use PAN data only for legitimate business purposes and KYC compliance

Audit Trails: Maintain proper logs of PAN verification requests for compliance reporting

Consent Management: Obtain explicit user consent before processing PAN and account information

Provide your bearer token in the

Authorization

header when making requests to protected resources.

Example:

Authorization: Bearer ********************

curl --location --request POST 'https://kyc-api.surepass.app/api/v1/pan/pan-account-linkage' \ --header 'Authorization: Bearer <token>' \ --header 'Content-Type: application/json' \ --data-raw '{ "pan": "NHPQS8768L", "account": "5749218609", "ifsc": "KKBK00013459" }'

{ "data": { "client_id": "pan_account_linkage_WKVfwjqyocdmQZmOLfEz", "pan": "BQHPD5202R", "account": "925060049678785", "ifsc": "UBIN0569780", "linked": true, "full_name": "MUNNA SINGH", "account_type": "savings", "account_nature": "single", "account_holder": "primary" }, "status_code": 200, "success": true, "message": null, "message_code": "success" }

PAN Account Linkage

PAN Account Linkage Verification#

Description#

Use Cases#

Supported Banks#

Technical Implementation#

Request Headers#

Request Body#

Example Request#

Response Parameters#

Example Successful Response#

Possible Error Responses#

Integration Best Practices#

Code Samples#

Complete Bank Support List#

Request

Responses