Accounts and Cards

Verify Card Security Code

Use the Verify Card Security Code endpoint to validate a <glossary:CVV> for the specified card that a cardholder inputs. Returns success on a match or failure if it does not match. This endpoint does not return the CVV.

post/verifyCardSecurityCode

Request

  • Base URL
    api-{corename}.{env}.gpsrv.com/intserv/4.0/ (relative, and the document’s source URL is not known)
  • URL
    api-{corename}.{env}.gpsrv.com/intserv/4.0/verifyCardSecurityCode
  • Auth
    none declared

Request body application/x-www-form-urlencoded

apiLoginstring required

Web service username, as provided by SoFi Tech Solutions. Pattern: Max 50 characters Example: "AbC123-9999"

apiTransKeystring required

Web service password, as provided by SoFi Tech Solutions. Pattern: Max 15 characters Example: "4sb62fh6w4h7w34g"

transactionIdstring required

Supply a globally unique ID to identify this endpoint request ("transaction"). Might be used for <a href="ref:idempotency#endpoints-that-use-transactionid-for-idempotency" target="_blank">idempotency</a>.. A UUID is preferred. Pattern: Maximum 60 characters Example: "9845dk-39fdk3fj3-4483483478"

cardNumberstring required

<glossary:PAN> of the card. Pattern: 16 digits Example: "1435074103447228"

cardSecurityCodestring required

The <glossary:CVV> value provided by the cardholder. This value is compared to the CVV in the system. Pattern: 3 digits Example: "123"

cardExpiryDatestring nullable

The expiry date provided by the cardholder. This value is compared to the expiry date in the system. Pattern: YYYY-MM Example: "2019-01"

Example request

{
  "apiLogin": "AbC123-9999",
  "apiTransKey": "4sb62fh6w4h7w34g",
  "transactionId": "123e4567-e89b-12d3-a456-426614174000",
  "cardNumber": "1435074103447228",
  "cardSecurityCode": "123",
  "cardExpiryDate": "2019-01"
}

Response

status_codeinteger nullable required

The response status code. May return a string for some statuses.

statusstring nullable required

The condition of a process or response

processing_timenumber float nullable required

The time elapsed in processing the transaction

system_timestampstring date-time nullable required

A system generated timestamp

rtokenstring nullable required

A system-generated ID used for tracking

errorsstring[]

A list of errors generated while the request was processed

response_dataobject required

A structure for the response data. This endpoint does not return response data, so it will always be empty.

Changes

No recorded changes to this operation across all 2 revisions of this API.