Solutions · Banking & finance

Alerts and one-time codes, on the app your customers already open.

Send verification codes and account alerts as approved WhatsApp templates from your own systems, capture leads from ads, and answer customers from an inbox with roles.

Start free See pricing

The developer API comes with Professional (5 API keys), Enterprise (25) and Unlimited (no limit).

Fig. 1 — A one-time code, a payment alert and a reply that goes to a person. Example conversation.

The developer API comes with Professional (5 API keys), Enterprise (25) and Unlimited (no limit).

01What you can set up

Codes, alerts, leads and answers.

For lenders, brokers, insurers and fintechs. Each item is a feature in Pinnaki today.

One-time passcodes API from Professional: Authentication templates carry the code your system generates. Send them through the developer API, one request per code.Read the API guide
Account and payment alerts: Utility templates for payments due, payments received and account updates, sent from your systems or scheduled to a list. Razorpay payment events can trigger a template too.
Lead capture: Click-to-WhatsApp ad links open a chat with your number. Leads from Meta lead ads arrive as contacts, with their form answers saved on the contact.Lead generation
An inbox with roles From Basic: Customer replies land in a shared inbox. Everyone you invite is an admin, a manager or an agent, and chats are assigned to a named person.Team inbox

02Controls you get

Limits you set before anything is sent.

The settings a risk or security team usually asks about, as they exist in the product.

Controls for API keys, contacts and sends
Control	What it does
Hashed API keys	A key is shown once when it is created and stored hashed; it can be given an expiry date.
Signed requests	An HMAC-SHA256 signature over the timestamp and the body, accepted for five minutes, with replay protection.
IP allowlist	A key only works from the IP addresses you list.
Allowed templates	A key can only send the templates you name.
Rate limit	Requests per second, per key (10 unless you change it).
Retries without duplicates	An Idempotency-Key header makes a repeated request return the first result instead of sending twice.
Opt-out keywords	Contacts who send your opt-out keyword, or stop marketing messages in WhatsApp, are left out of later campaigns.
Roles	Admins, managers and agents; plan, billing and API settings are not open to agents.

03Before you start

Your obligations stay yours.

Pinnaki sends and receives the messages. What you may send, and to whom, is set by your regulator and your own policies.

04Questions

Questions, answered.

What finance teams ask before they connect a number.

Can we send one-time passcodes on WhatsApp?

Yes. Create an Authentication template and send each code from your own system through the developer API, which comes with Professional. Meta prices authentication messages in their own category, and some countries use an Authentication-international rate.

How is the API protected?

Each request carries a Bearer API key, which Pinnaki stores hashed and shows to you only once. You can also require a signature on every request, limit a key to listed IP addresses and templates, cap its rate and set an expiry date.

Do you keep a log of what we send?

You choose, per API key, whether request logs are stored, and a single request can ask not to be logged. Campaign reports list every skipped number with its reason.

Start on the Free plan.

Start on Free with one number, then move to Professional when you are ready to send codes and alerts from your own systems.

Start free Talk to us

Professional: ₹3,499 a month + GST, 14-day trial.