Email OTP
The Email OTP challenge method represents the possession factor in SCA. When enabled, cardholders receive a 6-digit one-time passcode via email that they must enter to authenticate.
Possession Factor
Proves the cardholder has access to their registered email.
Customizable Templates
Fully branded email templates with your logo and styling.
Delegate Options
Optionally delegate sending and verification to your own systems.
Configuration
Basic Settings
| Field | Description |
|---|---|
| Name | User-friendly identifier |
| Alias | Unique identifier (alphanumeric, dashes, underscores). Cannot be changed after creation. |
| Description | Optional details about the method |
Attempt & Retry Settings
| Field | Default | Description |
|---|---|---|
| Retries | 3 | Max times cardholder can request a new OTP |
| Attempts | 3 | Max incorrect entries before failure |
| TTL | 300s | Time limit to complete challenge (5 minutes) |
Authentication Method
| Field | Description |
|---|---|
| Default Value | (05) OTP Other - reported to payment schemes |
| Matchers | Override auth method value based on Protocol Version |
Email Settings
| Field | Description |
|---|---|
| From Email Address | Default: [email protected]. Custom addresses require setup. |
| Email Template | Fully customizable template with your branding and logo |
Custom Sender Address: To use a custom email address (e.g.,[email protected]), Apata needs to addCNAMEDNS records for your domain. Open a support ticket to start the setup process.
Delegate Options
| Option | Description |
|---|---|
| Delegate Send | Apata sends OTP to your Webhook; you deliver to cardholder |
| Delegate Verify | Apata sends entered OTP to your webhook for verification |
| Delegate Cancel | Receive notification when cardholder cancels challenge |
Delegate options require a Webhook to be configured first.
Benefits of delegation:
- No need to share cardholder email addresses with Apata
- Use your existing email infrastructure
- Full control over OTP delivery and verification
Additional Options
| Option | Description |
|---|---|
| Show Info Screen When Missing Details | Display informational screen if email address is missing |
| Challenge Interface | Select or customise the UI via Challenge Interface Builder |
When multiple email addresses are associated with a card, Apata sends the OTP to all registered addresses to maximise delivery success.
Email Template Customization
Apata provides a highly customizable email template:
- Add your organisation's logo
- Match your brand colors and styling
- Customise all text content
- Support multiple Locales
The email includes:
- Transaction details (amount, merchant)
- 6-digit OTP code
- Expiration information
- Your branding elements
API References
| Webhook | Description |
|---|---|
| Delegate Send | Receive OTP for delivery |
| Delegate Verify | Verify cardholder-entered OTP |
| Delegate Cancel | Cardholder cancelled notification |
Related Topics
- Challenge Profile – Combine Email OTP with other methods
- Challenge Interface – Customise the OTP entry screen
- Webhook – Configure delegate endpoints
- SCA – Strong Customer Authentication requirements
Updated 24 days ago