---
title: "Change a card PIN"
method: POST
path: "/pins/change"
tags: ["Manage card PIN"]
---

# Change a card PIN

`POST /pins/change`

Changes the personal identification number (PIN) of a specified card.

To make this request, your API credential must have the following role:
* Bank Issuing PIN Change Webservice role

## Request body

- PinChangeRequest
  - `encryptedKey` string, required — The symmetric session key that you encrypted with the [public key](https://docs.adyen.com/api-explorer/balanceplatform/2/get/publicKey) that you received from Adyen.
  - `encryptedPinBlock` string, required — The encrypted [PIN block](https://www.pcisecuritystandards.org/glossary/pin-block).
  - `paymentInstrumentId` string, required — The unique identifier of the payment instrument, which is the card for which you are managing the PIN.
  - `token` string, required — The 16-digit token that you used to generate the `encryptedPinBlock`.

## Response `200`

OK - the request has succeeded.

- PinChangeResponse
  - `status` 'completed' | 'pending' | 'unavailable', required — The status of the request for PIN change. Possible values: **completed**, **pending**, **unavailable**.

## Other responses

- `401` — Unauthorized - authentication required.
- `403` — Forbidden - insufficient permissions to process the request.
- `422` — Unprocessable Entity - a request validation error.
- `500` — Internal Server Error - the server could not process the request.

---

[API](https://skmtc.net/adyen/apis/balanceplatformservice.md) · [All operations](https://skmtc.net/adyen/apis/balanceplatformservice/llms.txt) · [OpenAPI document](https://skmtc-service-staging.skmtc.workers.dev/v1/apis/adyen/balanceplatformservice/revisions/8761ac1a9aab/schema)