Validate withdrawal
Quote the payable amount without paying. No Idempotency-Key.
Body: code (4–32 chars), pin (4–8 digits).
200: withdrawalId, payable, amount, currency, expiresAt, status.
Failure: 404 or 422 withdrawal-not-payable (bad/expired/already paid).
Authentication (AND, not OR)
Required together: Partner-Id + Bearer client_secret + Timestamp + Signature. See Authentication.
401 unauthorized · 422 hmac-invalid · 422 hmac-skew · 403 country-mismatch.
Headers
X-Lucky-Tom-Partner-Id
Public partner id. Required (AND). Not a secret.
X-Lucky-Tom-Timestamp
Unix ms. Pre-request Script overwrites on Send.
X-Lucky-Tom-Signature
HMAC-SHA256 hex. Pre-request Script overwrites on Send.
Request
This endpoint expects an object.
pin
code
Errors
401
Unauthorized Error
422
Unprocessable Entity Error