It depends on the content-type that they're expecting. If it's application/json you can build an object like

{ success: false, error: 'That is not a valid id, you nob.'}