FX quote validity & token expiry

When you request an FX rate, Verto returns a vfxToken that locks the quoted rate for a defined window. You must submit your exchange or payout request within this window — if the token expires before the trade is executed, the quote is void and a new rate must be requested.

Default quote window

The default quote validity period is 30 seconds. This applies to all standard FX flows including Instant FX, Fund Later, and Inline FX.

If a vfxToken is submitted after the validity window has elapsed, the API will return an error and the trade will not be executed. You must request a new rate and obtain a fresh token before retrying.

Extended quote windows

For specific use cases where a longer rate window is required — such as e-commerce checkout flows, airline ticketing, or payment collection scenarios where there is a gap between the customer confirming a price and the funds being collected — an extended quote window can be arranged.

Extended windows are available as a pre-agreed commercial arrangement and are not available by default. A transparent risk premium is applied to the rate to reflect the increased market exposure over the longer window.

Token expiry error

If you attempt to use an expired vfxToken, the API will return the following error:

{
  "code": 400,
  "message": "VFX token has expired"
}

In this case, call the Get FX Rate endpoint again to obtain a fresh quote and a new vfxToken before resubmitting the trade.

Best practices

• Request the rate as close to execution as possible — minimise the gap between obtaining the quote and submitting the trade to reduce the risk of expiry
• Do not cache vfxToken values — each token is single-use and time-limited; always request a fresh rate for each trade
• Handle expiry gracefully — build retry logic into your integration that requests a new rate if a token expiry error is returned
• For checkout use cases — if your flow requires displaying a guaranteed price to a customer before payment is confirmed, discuss an extended quote window with your account manager rather than attempting to cache standard 30-second tokens