1. Management
Vrtx Docs
  • Auth
    • Token
      POST
  • Onboarding
    • Start onboarding
      POST
    • Verify onboarding OTP
      POST
    • Resend onboarding OTP
      POST
    • Get session status
      GET
    • Initiate Nafath
      POST
    • Cancels session
      POST
    • Complete customer info
      POST
  • Webhooks
    • Process Nafath webhook
      POST
    • Process Faceki webhook
      POST
    • Process T2 webhook
      POST
  • Wallet
    • Change mobile number from profile settings
      • Change mobile number
      • Verify mobile number change OTP
      • Get mobile change status
    • Change mobile number from login screen
      • Change mobile number
      • Verify mobile number change OTP
      • Initiate Nafath
      • Get mobile number change status
  • Businesses
    • Create business
      POST
  • Transactions
    • Business Accounts
      • Get business account balance
      • Get transaction details
      • List business transactions
    • Wallet Accounts
      • Get wallet balance
      • List wallet transactions
  • Payouts
    • Create payout
    • Get payout status
    • Create bulk payout
    • Get bulk payout status
    • Get batch report
  • Cards
    • Issuance
      • Issue card
      • Get card issuance
      • Complete card issuance
      • Verify card issuance OTP
      • Convert virtual to physical
      • Verify card conversion OTP
    • Management
      • Get card
        GET
      • Change card status
        PATCH
      • Set or update card PIN
        POST
      • Verify card PIN OTP
        POST
      • Activate physical card
        POST
      • Verify activation OTP
        POST
      • Display sensitive data
        POST
      • Verify display sensitive data OTP
        POST
  • cards
    • Initiate card replacement
    • Verify OTP and complete card replacement
Open-Loop-v2Closed-loop V2Card Simulatoropen-loop-test
Open-Loop-v2Closed-loop V2Card Simulatoropen-loop-test
  1. Management

Display sensitive data

POST
/cards/{card_id}/sensitive-data
Last modified:2025-12-02 10:06:51
Initiates the process to access card sensitive data (PAN, CVV, Expiry Date).
Sends an OTP to the customer's registered mobile number and returns a session ID
for the subsequent OTP verification step.
Security:
PCI-compliant flow requiring OTP verification
Only ACTIVE cards can access sensitive data
OTP expires after 5 minutes
Error Responses:
404 CARD_NOT_FOUND - The card is invalid. Please use a valid card.
412 INVALID_CARD_STATUS - The card is INACTIVE or CANCELLED. Please use an active card.
503 SERVICE_UNAVAILABLE - The service is currently unavailable. Please try again later.

Request

Path Params

Responses

🟢200Success
application/json
Default Response
Body

đźź 400400
đźź 401401
đźź 403403
đźź 404404
đźź 405405
đźź 409409
đźź 410410
đźź 412412
đźź 422422
đźź 429429
đź”´500500
đź”´501501
đź”´503503
đź”´504504
đź”´505505
Request Request Example
Shell
JavaScript
Java
Swift
curl --location --request POST '/cards//sensitive-data'
Response Response Example
200 - Success
{
    "session_id": "a1b2c3d4-e5f6-7890-abcd-ef1234567890"
}
Modified at 2025-12-02 10:06:51
Previous
Verify activation OTP
Next
Verify display sensitive data OTP
Built with