---
title: "Create a card"
method: POST
path: "/secure_cards"
---

# Create a card

`POST /secure_cards`

Securely register a card with dLocal and receive a `card_id` to use for future payments.

## Request body

- object
  - `country` string — Payment processing country code. ISO 3166-1 alpha-2 code.
  - `card` object, required — The Card Object
    - `holder_name` string, required — Cardholder's full name.
    - `expiration_month` integer, required — Two digit number representing the card's expiration month.
    - `expiration_year` integer, required — Four digit number representing the card's expiration year.
    - `number` string, required — The card number, as a string without any separators.
    - `cvv` string, required — Credit card verification value.
    - `encrypted_data` string — JWE ​encrypted params.
    - `token` string — Temporary credit card token securely created using Smart Fields.
    - `cvv_token` string — Temporary CVV token securely created using the CVV-only Smart Field.
  - `payer` object, required — The Payer Object
    - `name` string — User's full name.</br></br>Length: 100.</br>India-compliant length: 3 to 50 (e.g., Gaurav Kumar).
    - `email` string — User’s email address.</br></br>Length: 100.</br>India-compliant length: 64 max for the username (e.g., in `gaurav.kumar@example.com`, "gaurav.kumar" must not exceed 64 characters).
    - `birth_date` string — User’s birthdate (DD-MM-YYYY). Mandatory for cross-border payment processing in India as per PACB regulations.</br></br>Length: 10.
    - `phone` string — User’s phone. Mandatory for Wallets and cross-border (PACB) transactions in India. Also required for fraud prevention. </br></br>Length: 20.</br>India-compliant length: 15 max (e.g., +919123456780).
    - `document` string — User’s personal identification number. Mandatory for cross-border (PACB) transactions in India.</br></br>To see the document code list per country, go to the [Country Reference page](https://docs.dlocal.com/reference/country-reference).</br></br>Length: 30.
    - `document2` string — Additional personal identification.</br></br>To see the document code list per country, go to the [Country Reference page](https://docs.dlocal.com/reference/country-reference).
    - `address` object — User’s address. Required in India for cross-border (PACB) transactions for fraud prevention, and in South Africa for fraud prevention.
      - `state` string — User's address state. Required in India for cross-border (PACB) transactions and in South Africa. </br></br>Length: 10.</br>India-compliant length: 10 max (e.g., Karnataka).
      - `city` string — User’s address city. Required in India for cross-border (PACB) transactions and in South Africa. </br></br>Length: 100.</br>India-compliant length: 3 to 50 (e.g., Bengaluru).
      - `zip_code` string — User’s address ZIP Code. Required in India for cross-border (PACB) transactions and in South Africa.</br></br>Length: 10.</br>Must be exactly 6 numeric digits for India (e.g., 560032).
      - `street` string — User’s address street. Required in India for cross-border (PACB) transactions and in South Africa.</br></br>Length: 100.</br>India-compliant length: 4 to 100 (e.g., Mantri apartment Koramangala).
      - `number` string — User’s address number. Required in India for cross-border (PACB) transactions and in South Africa.</br></br>Length: 20.</br>India-compliant length: 20 (e.g., 35).
    - `ip` string — User's IP address. Required for fraud prevention. </br></br>Length: 39.
    - `device_id` string — User's unique device identifier. Required for fraud prevention.</br></br>Length: 25.

## Response `200`

200

- object
  - `holder_name` string
  - `expiration_month` integer
  - `expiration_year` integer
  - `brand` string
  - `last4` string
  - `card_id` string
  - `country` string

## Other responses

- `400` — 400

---

[API](https://skmtc.net/dlocal/apis/payins.md) · [All operations](https://skmtc.net/dlocal/apis/payins/llms.txt) · [OpenAPI document](https://skmtc-service-staging.skmtc.workers.dev/v1/apis/dlocal/payins/versions/d87e090020f9/schema)
