---
title: "Create customer card"
method: POST
path: "/customers/{customer_id}/cards"
tags: ["Cards"]
---

# Create customer card

`POST /customers/{customer_id}/cards`

Store a card against a customer for use in later stored-card payments. If the customer already has an active card with the same holder name and card number, the existing card is returned with any updates from your request.

## Path parameters

- `customer_id` string, uuid, required

## Request body

- object
  - `holder_name` string, required — The name of the cardholder.
  - `scheme` 'visa' | 'mastercard' | 'amex' — The scheme the card belongs to.
  - `number` string, required — The card number.
  - `expiry_month` integer, required — The month the card expires in.
  - `expiry_year` integer, required — The year the card expires in.
  - `cvv` string — The 3 or 4-digit security code that appears on the card.
  - `scheme_reference_data` string — Scheme reference data from a prior successful transaction on the same card. Visa values are 15 digits; Mastercard values are 13 alphanumeric characters.
  - `source` 'card' | 'apple_pay' | 'google_pay' — Identifies how the card was created.

## Response `200`

OK - the customer already has a card with the same holder name and card number. The existing `card_id` is returned and any new details from your request are saved to the stored card.

- object
  - `card_id` string, uuid — Unique identifier of the existing card.

## Other responses

- `201` — Created
- `400` — Bad Request
- `401` — Unauthorized
- `403` — Forbidden - the customer does not belong to your company.

---

[API](https://skmtc.dev/acquired/apis/acquired-api.md) · [All operations](https://skmtc.dev/acquired/apis/acquired-api/llms.txt) · [OpenAPI document](https://skmtc-service-production.skmtc.workers.dev/v1/apis/acquired/acquired-api/revisions/7ae178a046f2/schema)