Transfer points

Transfer Reward Points

This endpoint allows a business customer to transfer reward points directly to another Netevia customer. The operation requires a one-time security code (OTP) to authorize the transfer, ensuring that point gifting or sharing is protected against unauthorized use. Points are deducted from the sender's reward balance and credited to the recipient immediately upon success.

Endpoint

POST /api/UsersReward/Transfer

Authentication

Bearer token required. Obtain via:

POST https://api.banking.netevia.dev/api/auth/v2

Include in header: Authorization: Bearer {token}
Token lifetime: 10 minutes. Refresh via POST /api/auth/refresh.

When to use

Use this endpoint when a business customer wants to share or gift accumulated reward points with another Netevia customer. This is useful for reward-sharing programs, employee incentives, or promotional gifting workflows where a business distributes earned points to partners or clients. A valid OTP must be obtained and supplied before calling this endpoint to satisfy the secure operation requirement.

Request Body

{
  "toProfileId": 48291,
  "points": 500,
  "oneTimeCode": "847201",
  "secureOperationType": "ShortMessageCode"
}

Response

200 OK

A 200 response indicates the reward points were successfully transferred to the specified recipient. The response body for a successful transfer is empty (no JSON payload is returned).

{}

Error Codes

Common Mistakes

• Providing a points value below the minimum of 100 — the API will reject any transfer request for fewer than 100 points.
• Submitting an expired or already-used oneTimeCode — OTPs are single-use and time-limited; always generate a fresh code immediately before calling this endpoint.
• Using an incorrect secureOperationType that does not match how the OTP was generated — ensure the enum value aligns with your OTP delivery method (e.g., ShortMessageCode for SMS-based codes).
• Attempting to transfer points as a personal customer — reward transfers are available to business customers only.

Related Endpoints

• GET /api/UsersReward — Retrieve the authenticated customer's current reward points balance
• POST /api/UsersReward/Redeem — Redeem reward points to a financial account
• POST /api/auth/v2 — Obtain a Bearer token for authentication
• POST /api/auth/refresh — Refresh an existing Bearer token

Example

curl -X POST https://api.banking.netevia.dev/api/UsersReward/Transfer \
  -H "Authorization: Bearer YOUR_TOKEN" \
  -H "Content-Type: application/json" \
  -d '{
    "toProfileId": 48291,
    "points": 500,
    "oneTimeCode": "847201",
    "secureOperationType": "ShortMessageCode"
  }'