Invalid Request Errors

• The API endpoint was called using a public_key for authentication rather than a client_id and secret.

This account does not support ACH debit. Please retry with a different account.

• While in the Instant Match, Automated Micro-deposit, or Same-Day Micro-deposit Link flows, the user provided an account number whose last four digits did not match the account mask of their bank account.
• If the user entered the correct account number, Plaid may have been unable to retrieve an account mask.
• If the user entered the correct account number, the account may be a non-debitable account or a non-supported account type. Common examples of non-debitable depository accounts include savings accounts at Chime or at Navy Federal Credit Union (NFCU).

If the account number was correct and the account was a debitable supported type, please contact Plaid Support.

• The JSON request body was malformed.
• The request content-type was not of type application/json. The Plaid API only accepts JSON text as the MIME media type, with UTF-8 encoding, conforming to RFC 4627.

1content-type: 'application/json'

• One or more of the configuration objects provided to /link/token/create does not match the request schema for that endpoint.

• One or more fields in the request body were invalid, malformed, or used a wrong type. The error_message field will specify the erroneous field and how to resolve the error.
• Personally identifiable information (PII), such as an email address or phone number, was provided for a field where PII is not allowed, such as user.client_user_id.
• An unsupported country code was used in Production. Consult the API Reference for the endpoint being used for a list of valid country codes.
• An request parameter that is optional in the API schema was not provided in a context where it is required. For example, /accounts/balance/get was called without specifying options.min_last_updated_datetime on a Capital One (ins_128026) Item with non-depository accounts.
• The value used in the field is not valid for business logic reasons. For example, /signal/decision/report or /signal/return/report endpoints were called with a client_transaction_id for which /signal/evaluate was never called, or /transfer/create was called using an authorization_id whose decision value is declined.
• A request to /link/token/create was sent specifying an OAuth redirect URI that was not added to the allowed redirect URIs list in the Dashboard.

• The request was missing a header, typically the Content-Type header.

• The request body is missing one or more required fields. The error_message field will list the missing field(s).

• The endpoint you requested has been discontinued and no longer exists in the Plaid API.

• The endpoint you requested does not exist in the Plaid API.

• The requested endpoint is only available in the Sandbox API Environment.

• The request body included one or more extraneous fields. The error_message field will list the unrecognized field(s).