diff --git a/app/notify_client/user_api_client.py b/app/notify_client/user_api_client.py
index 4ab0305a8..b65836878 100644
--- a/app/notify_client/user_api_client.py
+++ b/app/notify_client/user_api_client.py
@@ -128,8 +128,7 @@ class UserApiClient(NotifyAdminAPIClient):
     @cache.delete('user-{user_id}')
     def complete_webauthn_login_attempt(self, user_id, is_successful):
         data = {'successful': is_successful}
-        # TODO: Change this to `/complete/webauthn-login`
-        endpoint = f'/user/{user_id}/verify/webauthn-login'
+        endpoint = f'/user/{user_id}/complete/webauthn-login'
         try:
             self.post(endpoint, data=data)
             return True, ''
diff --git a/tests/app/notify_client/test_user_client.py b/tests/app/notify_client/test_user_client.py
index 97dfce3cd..c0fc4aaaf 100644
--- a/tests/app/notify_client/test_user_client.py
+++ b/tests/app/notify_client/test_user_client.py
@@ -273,7 +273,7 @@ def test_complete_webauthn_login_attempt_returns_true_and_no_message_normally(fa
     resp = user_api_client.complete_webauthn_login_attempt(fake_uuid, is_successful=True)
 
     expected_data = {'successful': True}
-    mock_post.assert_called_once_with(f'/user/{fake_uuid}/verify/webauthn-login', data=expected_data)
+    mock_post.assert_called_once_with(f'/user/{fake_uuid}/complete/webauthn-login', data=expected_data)
     assert resp == (True, '')
 
 
@@ -293,7 +293,7 @@ def test_complete_webauthn_login_attempt_returns_false_and_message_on_403(fake_u
     resp = user_api_client.complete_webauthn_login_attempt(fake_uuid, is_successful=True)
 
     expected_data = {'successful': True}
-    mock_post.assert_called_once_with(f'/user/{fake_uuid}/verify/webauthn-login', data=expected_data)
+    mock_post.assert_called_once_with(f'/user/{fake_uuid}/complete/webauthn-login', data=expected_data)
 
     assert resp == (False, 'forbidden')