PApayu-com
Card

Retrieve Card Data

Card Data API allows you to retrieve the characteristics of a payment card (for example issuer, card country, card type and other attributes derived from payment organizations' BIN tables) before an actual order is created, without charging the card.

Note: the request must contain either token or the card object — never both in the same request.

post/api/v2_1/cards/lookup

Request

Headers

Content-Typestring required

Content type

Authorizationstring required

Auth token

Request body

OR

Example request

{
  "token": "TOKD_1LPMUT4FPPSS9k46204E39L5S0k"
}

Response

Card identified. Card characteristics returned in the response body.

maskedNumberstring

Masked card number (for example 536447******6443).

Note: For network-tokenized cards (Visa/Mastercard), only the last 4 digits may be visible.

expirationMonthinteger

Card expiration month.

expirationYearinteger

Card expiration year.

scheme'MC' | 'VS'

Payment organization (card scheme):

  • MC (Mastercard/Maestro)
  • VS (Visa)
descriptionstring

Card product description from the BIN table (for example World Debit Mastercard Card, Visa Infinite).

typestring

Card product type code from the payment organization's BIN table (for example MDH, I, I1).

For details, refer to official Visa or Mastercard documentation.

countryCodestring

Card country code, ISO 3166-1 alpha-2 (for example PL, RO).

classification'DEBIT' | 'PREPAID' | 'CREDIT' | 'CHARGE'

Card classification.

profile'BUSINESS' | 'CONSUMER' | 'BOTH'

Card profile.

uniqueReferencestring

Unique immutable identifier of the physical card number (PAN). The same PAN always yields the same value, regardless of the token used. Useful for detecting the same card saved on multiple accounts.

Maximum length is 256 characters.

Note: For network-tokenized cards (Visa/Mastercard), PayU may not always know the real PAN due to instrument nature (for example Apple Pay or network token has been updated by Issuer and pushed to PayU with new data for lost card scenario) or token lifecycle updates. In such cases, PayU cannot guarantee full immutability of unique reference.

Example response

{
  "maskedNumber": "536447******6443",
  "expirationMonth": 8,
  "expirationYear": 2029,
  "scheme": "MC",
  "description": "World Debit Mastercard Card",
  "type": "MDH",
  "countryCode": "RO",
  "classification": "DEBIT",
  "profile": "CONSUMER",
  "uniqueReference": "b75ddfb250cd8d9a647fa787718ec67f3f984d54bb51432373427c0e874f68c42438945f330bd6be07f3b41fde422fb548ccbe23c9cb51d0c1792ec7004ed23e",
  "issuer": {
    "name": "SUPER BANK LIMITED",
    "region": "EUROPE",
    "countryCode": "RO"
  },
  "installmentOptions": {
    "numbers": [
      1,
      6,
      12,
      20,
      21,
      22,
      23,
      24
    ],
    "provider": "SUPERBANK",
    "settings": {
      "minAmount": 60000
    }
  }
}

Changes

No recorded changes to this operation across all 1 revision of this API.