UK Gateway

Cards are objects that store the cardholder credentials. Cards can be created through the API, Inject and Checkout integration methods. Once the card has been created the _id of that object can be used throughout the payment process to initiate transactions and query transactions made with that _id, to name a few.

Read more about tokenization here.

CVV

When tokenizing a card the CVV can be added. The CVV is stored along with the card for a maximum of 24 hours, or if the card is used to initiate a transaction. Depending on what comes first the CVV is discarded to comply with PCI rules.

To add the CVV to the card it is advised to update the token through the update card API. It is required to submit the organisation ID along with at least one field of the card that should be updated:

{
"cvv": "string",
  "organisation": "string"
}

After the card has been updated the ID can be reused for initiating a transaction.

CVV Result

Upon processing a transaction with a given card, a CVV result might be provided in the response, indicating the outcome of CVV validation. The support for this depends on the capabilities of the Acquiring connection which is handling the transaction.