APIZONE user guide

Overview & quick start

APIZONE is a prepaid, pay-per-use platform for identity and document verification in India — PAN, Aadhaar linkages, GST, bank/IFSC, vehicle RC & DL, and more. You hold a wallet balance and spend a small fee only when a lookup succeeds. There are three ways to use it:

• Dashboard — point-and-click, results rendered as clean tables and PDFs.
• REST API — token-authenticated JSON, same pricing and history.
• Telegram bot (@Apizonebot2027bot) — run checks, top-up reminders, codes and support from chat.

Get going in three steps:

1. Create a free account (name, phone, e-mail, username).
2. Add wallet balance — pay by UPI/bank transfer and submit the reference; an admin approves it.
3. Run a verification — pick a service, enter the identifier, confirm. Failed lookups cost nothing.

Creating your account

Open the sign-up page and fill in every field marked with a red asterisk:

• Full name — as you'd like it on invoices.
• Username — 3–30 letters, digits or underscores; used to sign in and must be unique.
• Phone and e-mail — both are used to sign in and to recover the account.
• Password — use the eye icon to check what you typed.
• Tick “I agree to the Terms & Privacy Policy” to continue.

After signing up you'll get a one-time code by e-mail — enter it to activate the account. Didn't get it? Check spam, or use the resend link on the verification screen.

Signing in

On the sign-in page the single “Phone, e-mail or username” box accepts any of the three. Options:

• Remember this device for 30 days — keeps you signed in and skips two-factor on that browser.
• Sign in with a passkey — if you've added one, log in with just your fingerprint / face / device PIN, no password. Your saved passkey also offers itself in the browser's autofill.
• Forgot password — resets by e-mail code; a verified backup e-mail works too.

Securing your account

All of this lives on Profile & security.

Two-factor authentication (2FA)

• E-mail OTP — a code at every sign-in. Opt in per account.
• Authenticator app (TOTP) — scan the QR with Google Authenticator / Authy. You get 8 one-time recovery codes — save them somewhere safe.
• Passkeys — device biometrics or a hardware key. Phishing-resistant; add more than one (laptop + phone). Also usable for passwordless login.
• Verification method — choose which of the above is asked for when you make a sensitive change (“step-up”): changing your e-mail, removing a backup address, or deleting the account.

Backup e-mail

Add and verify a second address. It can receive security alerts and reset your password if you lose access to the primary one. You can promote it to primary later.

Devices & sessions

Profile shows every browser signed in — with device, location and last-seen time — and every “remembered” device. Revoke any one, or all of them, instantly. You're e-mailed whenever a new device signs in.

Your wallet & recharging

Payments are handled offline by the operator (no card gateway needed):

1. Open Wallet. It shows the operator's UPI ID / bank details and a live UPI QR that fills in the amount as you type it.
2. Pay that amount, then submit the form: amount, method, the UTR / reference number, and a screenshot or receipt (required).
3. Your request sits as pending until an admin verifies it, then the balance is credited atomically and you're notified.

• Invoice — every approved recharge has a printable invoice (company name, GSTIN, PAN from settings). Browser → Print → Save as PDF.
• Low-balance alerts — an in-app (and optional e-mail) warning when you drop below the threshold, with a one-tap recharge link.
• Runway — the dashboard estimates how many days your balance lasts at your recent spend rate.

Running a verification

From the dashboard or Services, open a service:

1. Fill the field(s) — inputs auto-format (PAN upper-cases, Aadhaar digits only) and validate before submitting.
2. Some services let you pick a card design / language for the generated PDF.
3. Submit. The exact fee is shown; it's debited only if the upstream returns a successful result. Not-found and error responses are free.
4. Duplicate-request and per-service rate limits protect you from accidental double spend.

Every request, response and balance change is stored and re-viewable — nothing is thrown away.

All 18 services

18 services are live. Price is per successful call and is set by the operator, so treat the figures below as current-at-page-load.

PAN Services

GST Services

Banking

Vehicle

Documents

Utility

Bulk verification

Bulk verification runs one single-field service (PAN, GSTIN, IFSC, Aadhaar-to-PAN, …) across a whole list:

• Paste or upload the identifiers, pick the service, run.
• Each row bills and appears in your history exactly like a single check; failed rows are free.
• Capped per run (operator-set), stops automatically if the balance runs out, and de-duplicates your input.
• Download all results as a CSV.

Reading & re-viewing results

Results never appear as raw JSON in the dashboard:

• A tidy, per-service summary card, plus a collapsible “All returned fields” tree.
• PDF services (RC, DL, ration, farmer) show the document inline with a download button.
• History lists every transaction; open one to see the full stored request and response again. Export the lot to CSV from the history page.

REST API

Find your token on Profile (regenerate it there if it leaks). Full reference: API documentation.

curl -X POST https://apizone.zestcommerce.in/api/v1/verify/pan-details \
  -H "Authorization: Bearer <your_token>" \
  -H "Content-Type: application/json" \
  -d '{"panno":"ABCDE1234F"}'

• Same wallet, same pricing, same history and rate limits as the dashboard.
• Check status codes: 402 top-up needed · 422 bad input / unverifiable · 429 rate limited (respect Retry-After).
• Endpoints for ping, balance, service list, verify/{service} and transaction/{id}.

Webhooks

On Webhooks, add an HTTPS endpoint to receive a signed callback on transaction.success, transaction.failed and recharge.approved.

• Every delivery carries X-APZ-Signature: sha256=hmac(body, your_secret) — verify it and reject anything that doesn't match.
• 4-second timeout, one retry, auto-pause after repeated failures (you're notified). Send a test delivery and read the delivery log any time.

Telegram bot

Link your account to @Apizonebot2027bot and run the platform from Telegram.

1. Profile → Telegram → Generate a link code (valid 15 minutes).
2. Send /link YOURCODE to the bot. You'll get a confirmation and a security e-mail.

Then:

• /menu, /help — everything at a glance; the “/” button lists common commands.
• Verify from chat — /pan ABCDE1234F, /gst …, /ifsc …, /rc … … The bot shows the fee and your balance-after, then charges only on your confirm.
• /balance, /wallet, /history, /txn 123, /spend, /recharge.
• Login codes — turn on “Telegram OTP” in /settings to also receive sign-in codes in chat; /otp requests one.
• Recharge approvals, ticket replies and security alerts are pushed to you (/mute to stop).
• /ticket subject opens a support ticket; /cancel aborts any step.

Notifications

The bell in the header is your notification centre — recharge decisions, support replies, security events and low balance. In-app alerts are always on; e-mail for low balance and Telegram delivery are opt-in from Profile.

Appearance & accessibility

The palette icon in the header opens the appearance panel:

• Theme — System / Light / Dark, plus 48 accent colours and a range of background moods and subtle gradient scenes.
• Accessibility — larger text (up to A+++), higher contrast, reduced motion, always-underlined links, and a more legible or monospace font.
• Choices are saved on your device and applied before the page paints. “Reset appearance” restores defaults.

Profile & your data

• Profile photo — upload / replace / remove a JPG, PNG or WEBP (auto-cropped to a square).
• Details — update your name, username, phone and e-mail (e-mail changes are step-up verified and confirmed on the new address).
• Export — download your full transaction history as CSV.
• Delete your account — either verify and delete immediately (with a zero balance or a forfeit acknowledgement), or send a request for an administrator to action. Personal data is anonymised; financial records are kept only as long as the law requires.

Getting help

Open a ticket from Contact & support or, once linked, with /ticket in the bot. Track replies under My tickets and in your notifications and by e-mail.

More reading: the blog has in-depth guides on PAN/GST/Aadhaar/vehicle checks and compliance, and site-wide search covers services, guides and docs.

FAQ