Once your user has passed verification, you can begin creating cards. Cards can be of two type - VIRTUAL and PHYSICAL set on the Create Card API.
For both card types, a threeDSecurePassword parameter is required - This must be collected from your user directly and is the password that is to be entered when the card is used for online transactions.
Virtual Cards
Virtual cards once created, can be used immediately for online transactions and with Apple/Google Pay if this is enabled for your program.
As noted above, all cards are enrolled in 3D Secure by default.
Physical Cards
When creating a card, specifying the type as PHYSICAL automatically creates and dispatches the card from the personalization center using the design configured for your program.
A physical card must be activated before it can be used and the last 4 digits of the card are used for this purpose and must be entered by the user into your application and then sent to the Activate Card API.
A card can be in one of the following states -
CREATED- A physical card has been createdDISPATCHED- A physical card has been manufactured and shippedACTIVE- A physical card has been activated using the last 4 digits of the cardBLOCKED- A physical card can be blocked intentionally or if it was lost/stolen/damagedCLOSED- A card that has been permanently closedEXPIRED- A card that has expired
Further, a BLOCKED card may have a blockType parameter as one of -
[
'BLOCKEDBYCARDHOLDER',
'BLOCKEDBYCARDHOLDERVIAPHONE',
'BLOCKEDBYCLIENT',
'BLOCKEDBYISSUER',
'COUNTERFEIT',
'FRAUDULENT',
'LOST',
'MAXINVALIDTRIESCVV2',
'MAXINVALIDTRIESPIN',
'NOTDELIVERED',
'STOLEN'
]
To replace a card, please order a new physical card.
️ Activating Physical CardsPlease note that a card must be in the
DISPATCHEDstate before it can be activated. Upon creation, a card is first in theCREATEDstate and various other states can be simulated using the simulator.
Creating Virtual and Physical CardsA user identity can have a maximum of 10 active cards, i.e. the sum of active physical + virtual cards per user cannot exceed 10. If you would like higher limits, please contact [email protected] with your case.

