All Products
Search
Document Center

ID Verification:BANK_CARD_N_META

Last Updated:Sep 30, 2025

This topic describes the API operations for 2-factor, 3-factor, and 4-factor bank card verification.

API description

  • API operation: BankMetaVerifyIntl

  • Request method: POST and GET

  • Transport protocol: HTTPS

  • Description: Verifies the consistency of bank card elements. This includes:

    • 2-factor bank card verification (bank card number + name)

    • 3-factor bank card verification (bank card number + name + certificate number)

    • 4-factor bank card verification (bank card number + name + certificate number + mobile number)

  • For API-specific QPS limits, see ID Verification server-side API QPS limits.

  • Endpoints:

    Note

    An internal endpoint refers to the internal communication network between Alibaba Cloud products in the same region. If your business server is deployed in the corresponding Alibaba Cloud region, you can access the ID Verification service through an internal endpoint to ensure more secure and stable network communication.

    China (Hong Kong)

    • Public endpoint: cloudauth-intl.cn-hongkong.aliyuncs.com

    • Internal endpoint: cloudauth-intl-vpc.cn-hongkong.aliyuncs.com

Online debugging and integration

Note

Before you start debugging and integration, read the Use OpenAPI to debug and integrate server-side APIs document to understand how to call API operations on the OpenAPI platform and obtain the SDK and its code.

You can debug this API operation in OpenAPI Explorer. You can also generate sample SDK code for this API operation.

Request parameters

Name

Type

Required

Description

Example

ProductCode

String

Yes

Static field: BANK_CARD_N_META

BANK_CARD_N_META

ParamType

String

Yes

Encryption method:

  • normal: Plaintext is not encrypted.

  • md5: MD5 encryption.

Important
  • The ciphertext for all parameters must be a 32-bit lowercase MD5 string.

  • Different MD5 tools may produce different ciphertexts. If the API call works before encryption but fails after, try using a different MD5 tool.

normal

VerifyMode

String

Yes

VERIFY_BANK_CARD: Bank card authentication mode.

This mode checks if the provided bank card number matches the user's real name, certificate number, and mobile number.

VERIFY_BANK_CARD

ProductType

String

Yes

Product type to call:

  • BANK_CARD_2_META: Verifies the bank card number and name.

  • BANK_CARD_3_META: Verifies the bank card number, name, and certificate number.

  • BANK_CARD_4_META: Verifies the bank card number, name, certificate number, and mobile number.

BANK_CARD_4_META

BankCard

String

Yes

Bank card number:

  • If ParamType is set to normal, enter the plaintext of the bank card number.

  • If ParamType is set to md5, enter the plaintext of the bank card number except for the last 6 digits, followed by the ciphertext of the last 6 digits.

  • Plaintext: 12345678******

  • Ciphertext: 12345678f8ee21920e37807b43e7e912ab******

UserName

String

Yes

Name:

  • If ParamType is set to normal, enter the plaintext of the name.

  • If ParamType is set to md5, enter the ciphertext of the first character of the name, followed by the plaintext of the rest of the name.

  • Plaintext: Zhang San

  • Ciphertext: 6499fc7409049355527ef6a2ba5706b8San

IdentityType

String

No

Certificate type. If you leave this parameter empty, it defaults to ID card. For other certificate types, see the Certificate type list.

01

IdentifyNum

String

No

Certificate number:

  • If ParamType is set to normal, enter the plaintext of the certificate number.

  • If ParamType is set to md5:

    • For an ID card number, enter the plaintext of the first 6 digits, followed by the ciphertext of the date of birth, and then the plaintext of the last 4 digits.

    • For other certificate types, encrypt the last two digits using MD5.

Important

This parameter is required if ProductType is set to one of the following values:

  • BANK_CARD_3_META

  • BANK_CARD_4_META

  • Plaintext: 429001********8211

  • Ciphertext: 42900132fa7bcd874161bea8ec8fd98f******8211

Mobile

String

No

Mobile number:

  • If ParamType is set to normal, enter the plaintext of the mobile number.

  • If ParamType is set to md5, enter the ciphertext of the mobile number.

Important

This parameter is required if ProductType is set to BANK_CARD_4_META.

  • Plaintext: 186****2055

  • Ciphertext: 849169cd3b20621c1c78bd61a1******

Certificate type list

IdentityType

Certificate

01

ID card

02

Officer's certificate

03

Passport

04

Mainland Travel Permits for Hong Kong and Macao Residents

05

Mainland Travel Permit for Taiwan Residents

06

Police officer's certificate

07

Soldier's certificate

08

Foreign passport

09

Foreign Permanent Resident ID Card

10

Residence Permit for Hong Kong and Macao Residents

11

Residence Permit for Taiwan Residents

12

Travel permit

13

Exit-Entry Permit

Response parameters

Name

Type

Description

Example

RequestId

String

The request ID.

130A2C10-B9EE-4D84-88E3-5384FF******

Code

String

Response code.

Success

Message

String

A detailed description of the response code.

success

ResultObject

BizCode

String

Verification result:

  • 1: Consistent (billed)

  • 2: Inconsistent (billed)

  • 3: No record found (not billed)

1

SubCode

String

Verification details:

  • 101: Verification passed.

  • 201: Inconsistent authentication information. The cardholder information is incorrect.

  • 202: Inconsistent authentication information. Authenticated payment is not enabled for the bank card.

  • 203: Inconsistent authentication information. The bank card has expired.

  • 204: Inconsistent authentication information. The bank card is restricted.

  • 205: Inconsistent authentication information. This card has been confiscated.

  • 206: Inconsistent authentication information. The bank card is invalid.

  • 207: Inconsistent authentication information. This card has no corresponding issuing bank.

  • 208: Inconsistent authentication information. The card is not initialized or is dormant.

  • 209: Inconsistent authentication information. This card is a fraudulent card or has been retained.

  • 210: Inconsistent authentication information. This card has been reported as lost.

  • 211: Inconsistent authentication information. The number of incorrect password attempts has exceeded the limit.

  • 212: Inconsistent authentication information. The issuing bank does not support this transaction.

  • 213: Inconsistent authentication information. The card status is abnormal or the card is invalid.

  • 214: Inconsistent authentication information. No mobile number is reserved.

  • 215: Inconsistent authentication information. The entered password, expiration date, or CVN2 is incorrect.

  • 216: Inconsistent authentication information. Other card exceptions.

  • 301: Verification failed. The bank card does not support this service.

  • 302: Verification failed. The verification failed or was rejected by the bank. Contact the issuing bank.

  • 303: Verification failed. The bank card does not currently support mobile number verification.

  • 304: Verification failed. The bank card number is incorrect.

  • 305: Verification failed. Other reasons.

  • 306: Verification failed. The number of verification attempts has exceeded the limit.

101

Response codes

HTTP status code

Code

Message description

200

Success

The request was successful.

400

MissingParameter

A required parameter is missing.

InvalidParameter

The parameter is invalid.

403

Forbidden.RAMUserAccessDenied

The Resource Access Management (RAM) user does not have the AliyunAntCloudAuthFullAccess permission. For more information, see Grant a RAM user permissions to access a service.

Forbidden.AccountAccessDenied

Ensure that you have enabled ID verification and that your account has no overdue payments.

Throttling.Api

The API call is blocked by throttling.

500

InternalError

An internal error occurred. Contact technical support.