Skip to main content
POST
Activates a physical card. The card status must be ToActivate; after successful activation, it becomes Activated. The cvv must be encrypted with AES/ECB/PKCS5Padding + Base64 before being passed in. Transmitting plaintext CVV in the request body is strictly prohibited.
  • Plaintext CVV must be 3 digits only.
  • card_last_no must match the last four digits of the card number recorded on the platform.
  • cardholder_no must belong to the cardholder associated with this card.
  • For encryption algorithm details, see the “Code Utilities” section.

Request Headers

string
required
apiKey (merchant credential, bound to IP whitelist)
string
required
Unix timestamp in milliseconds. The deviation from the server time must be within 60 seconds, and future timestamps are not accepted.
string
required
Login token (required for all interfaces except Get Token).
string
default:"application/json"
Fixed to application/json

Request Body

string
required
Cardholder order number.
string
required
Card order number.
string
required
Encrypted CVV (Base64 ciphertext).
string
required
Last four digits of card number.

Response Parameters

number
Response status code. 0 indicates success.
string
Response message.
object
Response data.