v1

latestOpenAPI 3.0.22026-07-26123510445.2 KB

Card Add-ons

Enroll Card in Network Protection

<a href="/card-issuance/v1.6/guide/card-products" style={{display:'inline-block',padding:'2px 10px',borderRadius:'9999px',fontSize:'12px',fontWeight:600,lineHeight:'18px',background:'#EEF2FF',color:'#4338CA',border:'1px solid #C7D2FE',textDecoration:'none'}}>Business Visa only</a>

Enrolls a card in ASAF (Account & Cardholder Fraud Solution) Network Protection.

Use this endpoint to register a lost, stolen, expired, or closed card with the Visa network so that future authorization attempts on it are declined network-wide. The enrollment request is asynchronous — the response confirms the request was accepted, and the final outcome is delivered via the card.risk_control.network_protection.enrolled webhook.

post/v1/issuing/cards/{id}/risk

Path parameters

idstring uuid required

Example:b3d9d2d5-4c12-4946-a09d-953e82sed2b0

Universally unique identifier (UUID v4) of a resource.

Headers

x-on-behalf-ofstring

Specifies the sub-account on whose behalf the request is made. This should be set to the account_id, which can be retrieved via the List Connected Accounts API. If omitted or empty, the request is executed using the master account. More information at Connected Accounts.

x-idempotency-keystring uuid

A unique identifier (UUID) used to maintain operation idempotency, ensuring that repeated executions of the same operation do not result in unintended effects or duplication. It helps preserve data consistency in the face of network errors, retries, or failures.

Request body

risk_control'network_protection' required

Risk control type. Must be network_protection for ASAF enrollment.

action_code'04' | '41' | '43' | '46' | '54' required

ASAF action code indicating the reason the card is enrolled in Network Protection.

04 — Pickup card
41 — Lost card, pickup
43 — Stolen card, pickup
46 — Closed account
54 — Expired card

Example request

{
  "risk_control": "network_protection",
  "action_code": "41"
}

Response

Enrollment request accepted.

card_idstring uuid

Unique identifier of the card.

card_numberstring

Masked card number.

cardholder_idstring uuid

Unique identifier of the cardholder.

card_schemestring

Card network.

enabledboolean

Whether Network Protection is currently active on the card. The field reflects the state after the request is processed by the network — it may not flip immediately, as enrollment and removal are asynchronous.

status'NOT_ENROLLED' | 'ENROLL_PENDING' | 'ENROLL_FAILED' | 'ENROLLED' | 'REMOVAL_PENDING'

Lifecycle status of an ASAF Network Protection enrollment.

action_code'04' | '41' | '43' | '46' | '54'

ASAF action code indicating the reason the card is enrolled in Network Protection.

04 — Pickup card
41 — Lost card, pickup
43 — Stolen card, pickup
46 — Closed account
54 — Expired card

definitionstring

Human-readable description of action_code.

update_timestring date-time nullable

Time at which the enrollment or removal request was last updated.

Example response

{
  "card_id": "7f6dbbd9-37b9-4f64-a021-cd4f71234567",
  "card_number": "************1234",
  "cardholder_id": "b6e6268b-7d95-4700-9b87-12e7c1234567",
  "card_scheme": "VISA",
  "status": "ENROLL_PENDING",
  "action_code": "41",
  "definition": "Lost card, pickup",
  "update_time": "2026-05-14T09:00:00Z"
}