Display sensitive data

POST

https://api.staging.vrtx.sa/cards/{card_id}/sensitive-data

Last modified:2025-12-03 10:51:05

Initiates the process to access card sensitive data (PAN, CVV, Expiry Date).
Sends an OTP to the customer's registered mobile number and returns a session ID
for the subsequent OTP verification step.

Security:

PCI-compliant flow requiring OTP verification

Only ACTIVE cards can access sensitive data

OTP expires after 5 minutes

Error Responses:

404 CARD_NOT_FOUND - The card is invalid. Please use a valid card.

412 INVALID_CARD_STATUS - The card is INACTIVE or CANCELLED. Please use an active card.

503 SERVICE_UNAVAILABLE - The service is currently unavailable. Please try again later.

Request

Path Params

Responses

🟢200OK

application/json

Default Response

Body

🟠400Bad Request

🟠401Unauthorized

🟠403Forbidden

🟠404Not Found

🟠405Method Not Allowed

🟠409Conflict

🟠410Gone

🟠412Precondition Failed

🟠422Unprocessable Entity

🟠429Too Many Requests

🔴500Internal Server Error

🔴501Not Implemented

🔴503Service Unavailable

🔴504Gateway Timeout

🔴505HTTP Version Not Supported

Request Example

Shell

JavaScript

Java

Swift

curl --location --request POST 'https://api.staging.vrtx.sa/cards//sensitive-data'

Response Example

200 - Success

{
    "session_id": "a1b2c3d4-e5f6-7890-abcd-ef1234567890"
}

Modified at 2025-12-03 10:51:05

Verify activation OTP

Verify display sensitive data OTP