curl --request DELETE \
--url https://api-sandbox.endl.io/api/v0/customer/{userId} \
--header 'API-KEY: <api-key>' \
--header 'Api-Version: <api-version>'import requests
url = "https://api-sandbox.endl.io/api/v0/customer/{userId}"
headers = {
"Api-Version": "<api-version>",
"API-KEY": "<api-key>"
}
response = requests.delete(url, headers=headers)
print(response.text)const options = {
method: 'DELETE',
headers: {'Api-Version': '<api-version>', 'API-KEY': '<api-key>'}
};
fetch('https://api-sandbox.endl.io/api/v0/customer/{userId}', options)
.then(res => res.json())
.then(res => console.log(res))
.catch(err => console.error(err));<?php
$curl = curl_init();
curl_setopt_array($curl, [
CURLOPT_URL => "https://api-sandbox.endl.io/api/v0/customer/{userId}",
CURLOPT_RETURNTRANSFER => true,
CURLOPT_ENCODING => "",
CURLOPT_MAXREDIRS => 10,
CURLOPT_TIMEOUT => 30,
CURLOPT_HTTP_VERSION => CURL_HTTP_VERSION_1_1,
CURLOPT_CUSTOMREQUEST => "DELETE",
CURLOPT_HTTPHEADER => [
"API-KEY: <api-key>",
"Api-Version: <api-version>"
],
]);
$response = curl_exec($curl);
$err = curl_error($curl);
curl_close($curl);
if ($err) {
echo "cURL Error #:" . $err;
} else {
echo $response;
}package main
import (
"fmt"
"net/http"
"io"
)
func main() {
url := "https://api-sandbox.endl.io/api/v0/customer/{userId}"
req, _ := http.NewRequest("DELETE", url, nil)
req.Header.Add("Api-Version", "<api-version>")
req.Header.Add("API-KEY", "<api-key>")
res, _ := http.DefaultClient.Do(req)
defer res.Body.Close()
body, _ := io.ReadAll(res.Body)
fmt.Println(string(body))
}HttpResponse<String> response = Unirest.delete("https://api-sandbox.endl.io/api/v0/customer/{userId}")
.header("Api-Version", "<api-version>")
.header("API-KEY", "<api-key>")
.asString();require 'uri'
require 'net/http'
url = URI("https://api-sandbox.endl.io/api/v0/customer/{userId}")
http = Net::HTTP.new(url.host, url.port)
http.use_ssl = true
request = Net::HTTP::Delete.new(url)
request["Api-Version"] = '<api-version>'
request["API-KEY"] = '<api-key>'
response = http.request(request)
puts response.read_body{
"userId": "cus_PWEhqXkPKpWXiFd96jGq",
"userType": "INDIVIDUAL",
"status": "PENDING",
"email": "jane.doe@example.com",
"firstName": "Jane",
"lastName": "Doe",
"country": "ARE",
"dateOfBirth": "1990-01-01",
"phone": "+971500000000",
"addressLine1": "Office 1201, Marina Plaza",
"city": "Dubai",
"state": "Dubai",
"createdOn": "2026-10-20T08:12:44.123456Z",
"updatedOn": "2026-10-22T09:15:30.123456Z"
}{
"code": 401,
"message": "Invalid API key",
"status": "ERROR",
"data": null,
"errors": [
{
"code": "ERRCORE_1004",
"message": "Invalid API key",
"field": null
}
]
}{
"code": 400,
"message": "<string>",
"status": "ERROR",
"data": null,
"errors": [
{
"code": "<string>",
"message": "<string>",
"field": "<string>"
}
]
}{
"code": 404,
"message": "User with ID 'cus_PWEhqXkPKpWXiFd96jGq' not found",
"status": "ERROR",
"data": null,
"errors": [
{
"code": "ERRREF_1001",
"message": "User with ID 'cus_PWEhqXkPKpWXiFd96jGq' not found",
"field": "userId"
}
]
}{
"code": 409,
"message": "Customer holds a balance",
"status": "ERROR",
"data": null,
"errors": [
{
"code": "ERRCUS_1606",
"message": "Cannot delete a customer that holds a balance",
"field": null
}
]
}Delete customer
Soft-delete a customer. The email is released for reuse and a later GET returns 404.
Returns the deleted customer’s profile as it was just before deletion (the same fields as a List customers item). The original email is returned. active and deleted are no longer part of any response.
A customer holding a balance cannot be deleted: 409 ERRCUS_1606.
curl --request DELETE \
--url https://api-sandbox.endl.io/api/v0/customer/{userId} \
--header 'API-KEY: <api-key>' \
--header 'Api-Version: <api-version>'import requests
url = "https://api-sandbox.endl.io/api/v0/customer/{userId}"
headers = {
"Api-Version": "<api-version>",
"API-KEY": "<api-key>"
}
response = requests.delete(url, headers=headers)
print(response.text)const options = {
method: 'DELETE',
headers: {'Api-Version': '<api-version>', 'API-KEY': '<api-key>'}
};
fetch('https://api-sandbox.endl.io/api/v0/customer/{userId}', options)
.then(res => res.json())
.then(res => console.log(res))
.catch(err => console.error(err));<?php
$curl = curl_init();
curl_setopt_array($curl, [
CURLOPT_URL => "https://api-sandbox.endl.io/api/v0/customer/{userId}",
CURLOPT_RETURNTRANSFER => true,
CURLOPT_ENCODING => "",
CURLOPT_MAXREDIRS => 10,
CURLOPT_TIMEOUT => 30,
CURLOPT_HTTP_VERSION => CURL_HTTP_VERSION_1_1,
CURLOPT_CUSTOMREQUEST => "DELETE",
CURLOPT_HTTPHEADER => [
"API-KEY: <api-key>",
"Api-Version: <api-version>"
],
]);
$response = curl_exec($curl);
$err = curl_error($curl);
curl_close($curl);
if ($err) {
echo "cURL Error #:" . $err;
} else {
echo $response;
}package main
import (
"fmt"
"net/http"
"io"
)
func main() {
url := "https://api-sandbox.endl.io/api/v0/customer/{userId}"
req, _ := http.NewRequest("DELETE", url, nil)
req.Header.Add("Api-Version", "<api-version>")
req.Header.Add("API-KEY", "<api-key>")
res, _ := http.DefaultClient.Do(req)
defer res.Body.Close()
body, _ := io.ReadAll(res.Body)
fmt.Println(string(body))
}HttpResponse<String> response = Unirest.delete("https://api-sandbox.endl.io/api/v0/customer/{userId}")
.header("Api-Version", "<api-version>")
.header("API-KEY", "<api-key>")
.asString();require 'uri'
require 'net/http'
url = URI("https://api-sandbox.endl.io/api/v0/customer/{userId}")
http = Net::HTTP.new(url.host, url.port)
http.use_ssl = true
request = Net::HTTP::Delete.new(url)
request["Api-Version"] = '<api-version>'
request["API-KEY"] = '<api-key>'
response = http.request(request)
puts response.read_body{
"userId": "cus_PWEhqXkPKpWXiFd96jGq",
"userType": "INDIVIDUAL",
"status": "PENDING",
"email": "jane.doe@example.com",
"firstName": "Jane",
"lastName": "Doe",
"country": "ARE",
"dateOfBirth": "1990-01-01",
"phone": "+971500000000",
"addressLine1": "Office 1201, Marina Plaza",
"city": "Dubai",
"state": "Dubai",
"createdOn": "2026-10-20T08:12:44.123456Z",
"updatedOn": "2026-10-22T09:15:30.123456Z"
}{
"code": 401,
"message": "Invalid API key",
"status": "ERROR",
"data": null,
"errors": [
{
"code": "ERRCORE_1004",
"message": "Invalid API key",
"field": null
}
]
}{
"code": 400,
"message": "<string>",
"status": "ERROR",
"data": null,
"errors": [
{
"code": "<string>",
"message": "<string>",
"field": "<string>"
}
]
}{
"code": 404,
"message": "User with ID 'cus_PWEhqXkPKpWXiFd96jGq' not found",
"status": "ERROR",
"data": null,
"errors": [
{
"code": "ERRREF_1001",
"message": "User with ID 'cus_PWEhqXkPKpWXiFd96jGq' not found",
"field": "userId"
}
]
}{
"code": 409,
"message": "Customer holds a balance",
"status": "ERROR",
"data": null,
"errors": [
{
"code": "ERRCUS_1606",
"message": "Cannot delete a customer that holds a balance",
"field": null
}
]
}Authorizations
Your partner API key. The key must carry the customers permission.
Headers
The API version this request targets. Required on every /api/v0/* call. Format YYYY-MM.<release>; 2026-09.1 is the latest. The version that served the request is echoed back on the response. Missing, malformed or unsupported values are rejected with 400.
^\d{4}-\d{2}\.\d+$Path Parameters
The customer reference id returned by create — a cus_-prefixed string, not a UUID.
Response
The deleted customer's profile, as it was just before deletion.
The customer profile without documents, questionnaire, customFields, companyApplicantId, beneficiaries or the company-profile fields. Call Get customer for those.
Endl's customer reference id — a cus_-prefixed string, not a UUID. This is what create returns and what goes in every /api/v0/customer/{userId} URL.
"cus_PWEhqXkPKpWXiFd96jGq"
INDIVIDUAL or BUSINESS.
INDIVIDUAL, BUSINESS Current verification status. Beyond the original eight, it can be VERIFICATION_IN_PROGRESS, ON_HOLD, AWAITING_UBO_DETAILS, VERIFICATION_PAUSED or DELETED — see the verification lifecycle. Treat unknown values as in progress. The list status filter accepts only the original eight.
NOT_INITIATED, INITIATED, SUBMITTED, IN_REVIEW, PENDING, COMPLETED, REJECTED, RESUBMISSION_REQUIRED, ON_HOLD, VERIFICATION_IN_PROGRESS, VERIFICATION_PAUSED, AWAITING_UBO_DETAILS, DELETED Contact email. Immutable after creation.
The customer's given name.
The customer's family name.
ISO 3166-1 alpha-3, returned in the case it was sent (e.g. are).
Date of birth, returned as YYYY-MM-DD.
Contact phone in E.164 format — a leading + then 8–15 digits, e.g. +971500000000. An invalid phone is a 400: phone must be a valid phone number in E.164 format (e.g. +971500000000).
^\+[1-9]\d{7,14}$"+971500000000"
Street address.
Second address line.
City.
State or province.
Postal code.
ISO 4217 code, stored and returned as sent (not validated).
When the customer was created. ISO-8601 UTC timestamp, e.g. 2026-10-22T09:15:30.123456Z. The number of fractional-second digits varies: .123456, .123, or none.
When the customer was last updated. ISO-8601 UTC timestamp, e.g. 2026-10-22T09:15:30.123456Z. The number of fractional-second digits varies: .123456, .123, or none.