# Approve or reject incoming wire transfers

Endpoint: POST /bank_transfers_in/authorisation_request
Version: 3.63.5
Security: webhooks_key

## Header parameters:

  - `request-ref` (string)
    A unique call reference included in every call, that enables the receiver to avoid duplicate handling of a webhook request (e.g. webhook was resent).

  - `published-timestamp` (integer, required)
    The timestamp, expressed in Epoch timestamp using millisecond precision, when this event was published.

  - `signature-v2` (string, required)
    The signature to verify the authenticity of this request.  This is the base64 hash (HmacSHA256) of the call-ref + payload + published-timestamp using your API key.

  - `signature` (string, required)
    The signature to verify the authenticity of this request.  This is the base64 hash (HmacSHA256) of the published-timestamp using your API key.

## Request fields (application/json):

  - `id` (string, required)
    The unique identifier of the bank transfer

  - `source` (object, required)

  - `source.instrument` (object, required)

  - `source.instrument.type` (string, required)
    Enum: "linked_accounts", "unknown_sender_accounts"

  - `source.instrument.reference` (string)
    This is an external reference (if available), input by the sender when creating the payment, and intended for the recipient.

  - `destination` (object, required)

  - `destination.owner` (object, required)

  - `amount` (object, required)
    The object representing a monetary amount in a particular currency.

  - `amount.currency` (string, required)
    The currency expressed in ISO-4217 code. Example: GBP, EUR, USD.

  - `amount.amount` (integer, required)
    The monetary amount, scaled to the lowest denomination of the currency.

Example, an amount of 1000 for a EUR currency is actually 1000 Euro cents or EUR 10.00.

  - `timestamp` (integer, required)
    The timestamp of the transaction, using epoch timestamp with millisecond precision.

## Response 200 fields (application/json):

  - `result` (string)
    Enum: "APPROVED", "DENIED"

## Response 404 fields (application/json):

  - `code` (string)

  - `message` (string)

## Response default fields (application/json):

  - `code` (string)

  - `message` (string)