PAN KRA Verification

Endpoint Overview

POST /api/v1/pan/pan-kra

Description

The PAN KRA Verification API enables the verification of an individual or entity's Permanent Account Number (PAN) through the Know Your Customer Registration Agency (KRA) system. This API validates the authenticity of a PAN card by cross-referencing it with official KRA databases, providing a reliable method to confirm the legitimacy of PAN details as part of KYC processes.

Key Benefits

Instant verification of PAN card details through official KRA databases

Reduces fraud risk by confirming PAN authenticity before onboarding clients

Streamlines KYC compliance processes with reliable verification results

Provides verification agency details for enhanced audit trails

Use Cases

Financial Services

Insurance

Fintech

Verify customer PAN details during account opening processes

Validate PAN information for loan or credit card applications

Confirm PAN authenticity for investment account creation

Technical Implementation

Authentication

All API requests require authentication using a JWT Bearer token. Authentication follows these steps:

Obtain API Credentials: Register with Surepass to receive your API key.

Generate JWT Token: Use your API key to generate a JWT token.

Include in Requests: Add the token to the Authorization header as Bearer TOKEN.

Different authentication tokens are used for sandbox and production environments:

Sandbox: https://sandbox.surepass.io

Production: https://kyc-api.surepass.io

Request Parameters

Request Headers

Header	Required	Description
Authorization	Yes	Bearer token for authentication (JWT format)
Content-Type	Yes	Application/json

Request Body

Parameter	Type	Required	Description
id_number	String	Yes	PAN Card number to be verified (e.g., "EKRPR1234F")

Example Request

{
    "id_number": "EKRPR1234F"
}

Process Response

Response Parameters

Parameter	Type	Description
data	Object	Contains the verification results
data.client_id	String	Unique identifier for the verification request
data.pan_number	String	PAN number that was verified
data.pan_kra_status	String	Status of PAN verification through KRA ("True" or "False")
data.kra_status	Boolean	Overall KRA verification status (true or false)
data.pan_kra_agency	String	Name of the KRA agency that performed the verification
status_code	Integer	HTTP status code of the response
success	Boolean	Indicates if the API call was successful
message	String or null	Additional information about the response (if any)
message_code	String	Code indicating the result of the operation

Example Successful Response

{
    "data": {
        "client_id": "pan_kra_woohvQslKabOwwtforyg",
        "pan_number": "EKRPR1234F",
        "pan_kra_status": "True",
        "kra_status": true,
        "pan_kra_agency": "CVL KRA"
    },
    "status_code": 200,
    "success": true,
    "message": null,
    "message_code": "success"
}

Possible Error Responses

Invalid PAN

Authentication Error

{
    "data": null,
    "status_code": 422,
    "message": "Invalid PAN",
    "success": false,
    "message_code": null
}

The provided PAN number does not match the required format or contains invalid characters.

Integration Best Practices

Security Recommendations

Store JWT tokens securely and never expose them in client-side code

Implement proper error handling to avoid exposing sensitive information

Use HTTPS for all API communications to ensure data encryption in transit

Implement token refresh mechanisms to handle token expiration gracefully

User Experience Guidelines

Provide clear feedback to users when verification is in progress

Display appropriate error messages when verification fails

Implement retry mechanisms with exponential backoff for temporary failures

Cache verification results (where appropriate) to avoid unnecessary API calls

Code Samples

cURL

Python

Node.js

Related APIs

PAN Verification API: Verifies PAN details against government databases

PAN OCR API: Extracts information from PAN card images

KYC Document Verification API: Comprehensive verification of KYC documents

Compliance and Legal Considerations

PAN verification is subject to regulatory requirements under Indian KYC norms. Ensure you have proper consent from users before verifying their PAN details. The information obtained through this API should be used only for legitimate KYC purposes and stored securely in compliance with data protection regulations.

Provide your bearer token in the

Authorization

header when making requests to protected resources.

Example:

Authorization: Bearer ********************

curl --location --request POST 'https://kyc-api.surepass.app/api/v1/pan/pan-kra' \ --header 'Authorization: Bearer <token>' \ --header 'Content-Type: application/json' \ --data-raw '{ "id_number": "EKRPR1234F" }'

{ "data": { "client_id": "pan_kra_woohvQslKabOwwtforyg", "pan_number": "EKRPR1234F", "pan_kra_status": "True", "kra_status": true, "pan_kra_agency": "CVL KRA" }, "status_code": 200, "success": true, "message": null, "message_code": "success" }

PAN KRA

PAN KRA Verification#

Description#

Use Cases#

Technical Implementation#

Request Headers#

Request Body#

Example Request#

Response Parameters#

Example Successful Response#

Possible Error Responses#

Integration Best Practices#

Code Samples#

Request

Responses