It seems our issue was that our api was blocking IP's from outside the USA. Unblocking solved the issue. Tester must have been in a blocked country.