Skip to main content
PEP accounts require two-factor verification via OTP before any access is granted. All access attempts are logged for audit compliance.

​
What is PEP?

Politically Exposed Persons (PEP) are individuals who hold prominent public positions or have close associations with such persons. Their accounts require enhanced due diligence and access controls.

OTP Verification

6-digit code sent to staff phone

Audit Trail

Every access logged with IP & timestamp

Time-Limited

Access expires after session ends

​
Endpoints

Request Access

POST /api/v1/pep/request-accessGenerate OTP and send to authorized staff

Verify Access

POST /api/v1/pep/verify-accessVerify OTP and grant temporary access

​
Access Flow

1

Initiate Request

Staff member with pep_access_authorized: true requests access to a PEP subscriber
2

OTP Generated

System generates 6-digit OTP and sends via SMS to staff’s registered phone
3

OTP Expires

OTP is valid for 5 minutes only
4

Verification

Staff enters OTP to verify identity
5

Access Granted

Temporary access granted with full audit logging

​
Security Features

Only users with pep_access_authorized: true in their profile can even request access to PEP accounts. This is set by system administrators.
Every access attempt logs:
  • Client IP address
  • User agent string
  • Request timestamp
  • Staff user ID
  • Subscriber ID accessed
PEP access is granted per-session only. When the staff member logs out or their session expires, new OTP verification is required.
Failed OTP attempts are tracked. After 3 failed attempts, the staff member is temporarily locked out.

​
Request Example

curl -X POST https://olive-gateway-a6ba.onrender.com/api/v1/pep/request-access \
  -H "Authorization: Bearer $JWT_TOKEN" \
  -H "Content-Type: application/json" \
  -d '{"subscriber_id": "sub_pep_12345"}'
Response:
{
  "success": true,
  "message": "OTP sent successfully",
  "expiry_time": "2025-01-15T10:35:00Z"
}

​
Error Codes

CodeErrorDescription
401UNAUTHORIZEDUser not authenticated
403PEP_ACCESS_DENIEDUser not authorized for PEP access
400INVALID_OTPOTP incorrect or expired
404SUBSCRIBER_NOT_FOUNDPEP subscriber does not exist
429TOO_MANY_ATTEMPTSToo many failed OTP attempts