Mass-Delete-Action over API doesn't work because of scope

Hi all,

we're currently trying to mass delete 40000 deals from our CRM, that we have already put into a custom view. I'm not that used to the API, but I managed to authenticate by https://accounts.zoho.com/oauth/v2/token with Postman and going by the response I got the necessary scopes:

{
"access_token": "1000.x.x",
"scope": "ZohoCRM.mass_delete.DELETE ZohoCRM.modules.ALL",
"api_domain": "https://www.zohoapis.com",
"token_type": "Bearer",
"expires_in": 3600
}

I tried making a GET-Request to https://www.zohoapis.com/crm/v7/Potentials/{id} to see if the token works and everything is fine. But when I try to make a POST-Request to https://www.zohoapis.com/crm/v7/Potentials/actions/mass_delete I get the following error:

{
"code": "OAUTH_SCOPE_MISMATCH",
"details": {},
"message": "invalid oauth scope to access this URL",
"status": "error"
}

What am I missing? Thank you for your help in advance.