Sign in

v66

latestOpenAPI 3.1.0Apache 2.0raw.githubusercontent.com2026-08-042174421.1 MB
Account

Update account

Update account configuration such as state or spend limits. Can only be run on accounts that are part of the program managed by this API key. Accounts that are in the PAUSED state will not be able to transact or create new cards.

patch/v1/accounts/{account_token}

Path parameters

account_tokenstring uuid required

Globally unique identifier for account.

Request body

daily_spend_limitinteger

Amount (in cents) for the account's daily spend limit (e.g. 100000 would be a $1,000 limit). By default the daily spend limit is set to $1,250.

lifetime_spend_limitinteger

Amount (in cents) for the account's lifetime spend limit (e.g. 100000 would be a $1,000 limit). Once this limit is reached, no transactions will be accepted on any card created for this account until the limit is updated. Note that a spend limit of 0 is effectively no limit, and should only be used to reset or remove a prior limit. Only a limit of 1 or above will result in declined transactions due to checks against the account limit. This behavior differs from the daily spend limit and the monthly spend limit.

monthly_spend_limitinteger

Amount (in cents) for the account's monthly spend limit (e.g. 100000 would be a $1,000 limit). By default the monthly spend limit is set to $5,000.

state'ACTIVE' | 'PAUSED' | 'CLOSED'

Account states.

substatus'FRAUD_IDENTIFIED' | 'SUSPICIOUS_ACTIVITY' | 'RISK_VIOLATION' | 'END_USER_REQUEST' | 'ISSUER_REQUEST' | 'NOT_ACTIVE' | 'INTERNAL_REVIEW' | 'OTHER' nullable

Account state substatus values:

  • FRAUD_IDENTIFIED - The account has been recognized as being created or used with stolen or fabricated identity information, encompassing both true identity theft and synthetic identities.
  • SUSPICIOUS_ACTIVITY - The account has exhibited suspicious behavior, such as unauthorized access or fraudulent transactions, necessitating further investigation.
  • RISK_VIOLATION - The account has been involved in deliberate misuse by the legitimate account holder. Examples include disputing valid transactions without cause, falsely claiming non-receipt of goods, or engaging in intentional bust-out schemes to exploit account services.
  • END_USER_REQUEST - The account holder has voluntarily requested the closure of the account for personal reasons. This encompasses situations such as bankruptcy, other financial considerations, or the account holder's death.
  • ISSUER_REQUEST - The issuer has initiated the closure of the account due to business strategy, risk management, inactivity, product changes, regulatory concerns, or violations of terms and conditions.
  • NOT_ACTIVE - The account has not had any transactions or payment activity within a specified period. This status applies to accounts that are paused or closed due to inactivity.
  • INTERNAL_REVIEW - The account is temporarily paused pending further internal review. In future implementations, this status may prevent clients from activating the account via APIs until the review is completed.
  • OTHER - The reason for the account's current status does not fall into any of the above categories. A comment should be provided to specify the particular reason.
commentstring

Additional context or information related to the account.

Response

OK

auth_rule_tokensstring[]

List of identifiers for the Auth Rule(s) that are applied on the account. This field is deprecated and will no longer be populated in the account_holder object. The key will be removed from the schema in a future release. Use the /auth_rules endpoints to fetch Auth Rule information instead.

cardholder_currencystring

3-character alphabetic ISO 4217 code for the currency of the cardholder.

state'ACTIVE' | 'PAUSED' | 'CLOSED' required

Account state:

  • ACTIVE - Account is able to transact and create new cards.
  • PAUSED - Account will not be able to transact or create new cards. It can be set back to ACTIVE.
  • CLOSED - Account will not be able to transact or create new cards. CLOSED accounts are unable to be transitioned to ACTIVE or PAUSED states. Accounts can be manually set to CLOSED, or this can be done by Lithic due to failure to pass KYB/KYC or for risk/compliance reasons. Please contact support.lithic.com if you believe this was done by mistake.
substatus'FRAUD_IDENTIFIED' | 'SUSPICIOUS_ACTIVITY' | 'RISK_VIOLATION' | 'END_USER_REQUEST' | 'ISSUER_REQUEST' | 'NOT_ACTIVE' | 'INTERNAL_REVIEW' | 'OTHER' nullable

Account state substatus values:

  • FRAUD_IDENTIFIED - The account has been recognized as being created or used with stolen or fabricated identity information, encompassing both true identity theft and synthetic identities.
  • SUSPICIOUS_ACTIVITY - The account has exhibited suspicious behavior, such as unauthorized access or fraudulent transactions, necessitating further investigation.
  • RISK_VIOLATION - The account has been involved in deliberate misuse by the legitimate account holder. Examples include disputing valid transactions without cause, falsely claiming non-receipt of goods, or engaging in intentional bust-out schemes to exploit account services.
  • END_USER_REQUEST - The account holder has voluntarily requested the closure of the account for personal reasons. This encompasses situations such as bankruptcy, other financial considerations, or the account holder's death.
  • ISSUER_REQUEST - The issuer has initiated the closure of the account due to business strategy, risk management, inactivity, product changes, regulatory concerns, or violations of terms and conditions.
  • NOT_ACTIVE - The account has not had any transactions or payment activity within a specified period. This status applies to accounts that are paused or closed due to inactivity.
  • INTERNAL_REVIEW - The account is temporarily paused pending further internal review. In future implementations, this status may prevent clients from activating the account via APIs until the review is completed.
  • OTHER - The reason for the account's current status does not fall into any of the above categories. A comment should be provided to specify the particular reason.
commentstring

Additional context or information related to the account.

tokenstring uuid required

Globally unique identifier for the account. This is the same as the account_token returned by the enroll endpoint. If using this parameter, do not include pagination.

createdstring date-time nullable required

Timestamp of when the account was created.

Example response

{
  "account_holder": {
    "business_account_token": "e87db14a-4abf-4901-adad-5d5c9f46aff2",
    "email": "jack@lithic.com",
    "phone_number": "+15555555555",
    "token": "95e5f1b7-cfd5-4520-aa3c-2451bab8608d"
  },
  "cardholder_currency": "USD",
  "spend_limit": {
    "daily": 10000,
    "lifetime": 100000,
    "monthly": 40000
  },
  "token": "b68b7424-aa69-4cbc-a946-30d90181b621",
  "verification_address": {
    "address1": "124 Old Forest Way",
    "address2": "Apt 21",
    "city": "Seattle",
    "country": "USA",
    "postal_code": "98109",
    "state": "WA"
  }
}