Management of the card_id & dpan_id Relationship

Virtual & Physical Card Renewal

The Renew Card API is to be used to issue a renewal card in advance of the existing Virtual / Physical card expiring. The PAN and PIN (Physical cards) will remain the same; a new Expiry and CVV2 will be generated.

Your Customer can continue to use their existing card and device(s) that have been Tokenized whilst the Renewal card is on its way to the Customer for activation and use.

Following activation of the Renewal card, the existing Virtual / Physical status will be set to Expired by CLOWD9 with all future authorization requests being declined. CLOWD9 will automatically update the new information for the same PAN with the Networks and Wallet providers.

Virtual & Card Replacement

Compromised Virtual / Physical Card

Where an existing Virtual / Physical card has been compromised (fraudulent activity), lost or stolen, the Set Card Status is to be used to update the card_id to the relevant, irreversible status.

Following a successful status change, the Replace Card API is to be used to issue a new Virtual / Physical card. Your Customer will be able to continue to use their device(s) whilst the new card is awaiting activation. Once the new card_id is activated, CLOWD9 will automatically update the new PAN with the Networks and Wallet providers.

Compromised Device

Where the device(s) have been compromised, lost or stolen, the Set DPAN Status is to be used to update the dpan_id's to the relevant, irreversible status. Any transaction attempts following the status change will not be permitted by CLOWD9.

Following the issuance and activation of the new Virtual / Physical card, your Customer will be required to undertake the Tokenization process as they did previously.

Note:

  • Where both the card and device have been compromised, all issued card_id(s) and dpan_id(s) require action
  • Your Customer may still be required to update their device wallet with the new card information following the Renewal or Replacement activity.

Card and Device Closure

During the Customer lifecycle, they may wish to terminate their agreement with you and as a result any Cards issued are to be closed permanently. At the same time, all DPANs that been issued are to be closed as well.

To do this, CLOWD9 recommend the following actions are taken:

Using this API you can set the card_id(s) created for the Customer to destroyed. This is a permanent status and will ensure no further transactions are permitted.

Set DPAN Status

Using this API you can set the dpan_id(s) associated with the card_id(s) to destroyed. This is a permanent status and will ensure no further transactions are permitted.