---
title: "Reveal the data of a payment instrument"
method: POST
path: "/paymentInstruments/reveal"
tags: ["Payment instruments"]
---

# Reveal the data of a payment instrument

`POST /paymentInstruments/reveal`

Returns the encrypted data of a specified payment instrument. These data include:

- The primary account number (PAN)
- The card verification code (CVC)
- The expiry date

You can decrypt the data to reveal it in your user interface.

To make this request, your API credential must have the following role:
* Bank Issuing PAN Reveal Webservice role

## Request body

- PaymentInstrumentRevealRequest
  - `encryptedKey` string, required — The symmetric session key that you encrypted with the [public key](https://docs.adyen.com/api-explorer/balanceplatform/2/get/publicKey) that you received from Adyen.
  - `paymentInstrumentId` string, required — The unique identifier of the payment instrument, which is the card for which you are managing the PIN.

## Response `200`

OK - the request has succeeded.

- PaymentInstrumentRevealResponse
  - `encryptedData` string, required — The data encrypted using the `encryptedKey`.

## Other responses

- `400` — Bad Request - a problem reading or understanding the request.
- `401` — Unauthorized - authentication required.
- `403` — Forbidden - insufficient permissions to process the request.
- `422` — Unprocessable Entity - a request validation error.
- `500` — Internal Server Error - the server could not process the request.

---

[API](https://skmtc.net/adyen/apis/balanceplatformservice.md) · [All operations](https://skmtc.net/adyen/apis/balanceplatformservice/llms.txt) · [OpenAPI document](https://skmtc-service-staging.skmtc.workers.dev/v1/apis/adyen/balanceplatformservice/revisions/8761ac1a9aab/schema)