Verifies a bank account (penny-drop / validation) and returns canonical fields (account_status, account_holder_name, account_number — masked to the last 4 digits, account_ifsc, failure_reason, extras).

Response contract: A successful verification returns HTTP 200 with status: "success", error_code: null, and a populated data object. A definitive no-record / invalid result ALSO returns HTTP 200 with status: "success", but carries a non-null error_code and data: null — every 2xx response is status: "success", so do NOT distinguish a full-success verdict from a no-record / invalid one by status; branch on error_code (null = full success, a non-null IDTO_2xx = no record / invalid). Only a raised error returns status: "error". Every response carries billed (whether the call was charged). All codes, messages and HTTP statuses are identical regardless of the underlying vendor. Authenticate with your X-Client-ID and X-API-KEY headers.

Codes: IDTO_202 (2xx, account invalid or does not exist — a definitive, chargeable verdict; the SAME universal no-record code used by every v2 product), IDTO_401 (invalid account number, 400), IDTO_402 (invalid IFSC, 400), IDTO_001 (missing field, 400), IDTO_009 (insufficient credits, 402), IDTO_006 (rate limited, 429), IDTO_007 (config error, 500), IDTO_008 (service busy, 503).