Card Enrolment
Card Link allows Apata to fetch card details from the issuer's system in real time when a transaction is received, rather than requiring cards to be pre-enrolled. When a transaction arrives, Apata calls the issuer's Card Link endpoint with the PAN and the issuer responds with the card details needed to process authentication.
Card Link Types
The standard integration type. The issuer implements the Card Link endpoint according to the Apata API specification.
Extends STANDARD_V1 to allow the issuer to include risk engine results directly in the card details response.
A bespoke integration built by Apata. Read-only in the Portal; managed by the Apata Customer Success team.
The standard type for all issuers that do not require a custom integration. The issuer implements the Card Link endpoint according to the Apata API specification and returns card details in the standard format.
PAN Formatting
The PAN is sent as received from the payment scheme, with no transformation applied.
Storage Modes
Permanently stores card details. Card Link is not called again for future transactions.
Stores card details for the current transaction only. Card Link is called on every transaction.
Stores card details temporarily with a 90-day backup. Falls back to backup if Card Link fails.
Apata enrolls the card details permanently, in the same way as the CreateCard endpoint. Future transactions use the stored details and Card Link is not called again. To update the card, the issuer must use the UpdateCard endpoint.
Card Link Responses
Successful Response
The issuer must return at minimum:
| Field | Description |
|---|---|
financialInstitutionId | Identifies which Financial Institution the card belongs to. Required because multiple Financial Institutions can share the same BIN. |
externalId | An external reference meaningful to the issuer, used for filtering and querying. |
language | The preferred language for any cardholder-facing interfaces or messages. |
Optional fields include phone numbers and email addresses for OTP delivery, a cardProgramId to dynamically assign the card to a specific Card Program, a challengeProfileId to override the profile inferred from the Card Program, and KBA questions and answers if the KBA challenge method is in use.
Unsuccessful Response
| Code | Meaning |
|---|---|
| CARD_NOT_ENROLLED | The card exists but is not enrolled in the 3DS service. |
| CARD_DOES_NOT_EXIST | No card with the specified PAN exists. |
| CARD_DISABLED | The card is currently disabled. |
When returning CARD_NOT_ENROLLED, Mastercard may invoke a stand-in service which can incur charges for the issuer. If the card does not exist at all, return CARD_DOES_NOT_EXIST instead.
Enabling Card Link
Card Link can be enabled at the Organisation level, applying to all transactions across the organisation, or at the BIN and Card Range level for more targeted activation. The configuration is the same in both cases - only the point at which it is applied differs.
Updated about 1 month ago