Skip to main content
POST
Sets the physical card PIN. Only physical cards (Physical) are supported, and the card status must be normal (Activated). The pin must be encrypted with AES/ECB/PKCS5Padding + Base64 before being passed in.
  • Only physical cards are supported; calling this endpoint for a virtual card returns 4017.
  • The plaintext PIN must be exactly 6 digits, and must not contain three or more identical or sequential digits (for example, 111111 or 123456); otherwise 4016 is returned.
  • The card status must be Activated; otherwise 4005 is returned.
  • See the “Code Utilities” section for encryption algorithm details.

​
Request Headers

​
string
required
apiKey (merchant credential, bound to IP whitelist)
​
string
required
Unix timestamp in milliseconds. The deviation from the server time must be within 60 seconds, and future timestamps are not accepted.
​
string
required
Login token (required for all interfaces except Get Token).
​
string
default:"application/json"
Fixed to application/json

​
Request Body

​
string
required
Card order number.
​
string
required
Cardholder order number.
​
string
required
Encrypted PIN (Base64 ciphertext).

​
Response Parameters

​
number
Response status code. 0 indicates success.
​
string
Response message.
​
object
Response data.