# Create a card order

Creates a new card order. The program field value is retrieved from the retrieve all card programs endpoint.

{% admonition type="warning" %}
This request requires an extra field in the header, X-idempotence-uuid. This should be generated and used for any subsequent retries in the event that the initial request fails.
{% /admonition %}

When you issue a card under a business profile, the cardholder will automatically default to the business representative.

If the cardholder is not the business representative, create a cardholder personal profile and add the profileId of the cardholder profile to the cardHolderProfileId field on the card order request.

For country-specific address fields and validation rules, see the card address validation guide.

Endpoint: POST /v3/spend/profiles/{profileId}/card-orders
Security: UserToken

## Path parameters:

  - `profileId` (integer, required)
    The profile ID (personal or business).
    Example: 123456

## Header parameters:

  - `X-idempotence-uuid` (string, required)
    Idempotency key. Should be generated and used for any subsequent retries.
    Example: "054064c9-e01e-49fb-8fd9-b0990b9442f4"

## Request fields (application/json):

  - `program` (string, required)
    The name of the card program.
    Example: "VISA_DEBIT_BUSINESS_UK_1_PHYSICAL_CARDS_API"

  - `cardHolderName` (string, required)
    The cardholder's name.
    Example: "John Smith"

  - `embossedName` (string)
    The cardholder's name to print on the card (physical card only). The field length should be between 1 and 22 characters (spaces included).
    Example: "Smith John"

  - `phoneNumber` (string)
    For partners onboarded after 1/3/2025, we will use the profile phone number for any Card-related One-Time Password (OTP) requests. See [3ds](/guides/product/issue-cards/3ds).
Ensure that the phone number is valid and starts with a "+" followed by the country code.
    Example: "+441234567890"

  - `address` (object, required)
    The cardholder's billing address or delivery address. Fields vary by country. See the [card address validation guide](/guides/developer/api-guides/card-address-validation).

  - `address.firstLine` (string)
    Example: "56 Shoreditch High St"

  - `address.secondLine` (string,null)
    Example: "The Tea Bldg"

  - `address.thirdLine` (string,null)

  - `address.city` (string)
    Example: "London"

  - `address.postCode` (string)
    Example: "E1 6JJ"

  - `address.state` (string,null)

  - `address.country` (string)
    ISO 3166-1 alpha-2 country code.
    Example: "GB"

  - `deliveryOption` (string)
    The delivery method for the card order. The delivery method will be defined during scoping phase. Please reach out to your Implementation Manager for more information.

Only specify this field for KIOSK_COLLECTION. If not specified, the default delivery method for your region will be used.
- POSTAL_SERVICE_STANDARD - Default delivery method. Not traceable.
- POSTAL_SERVICE_WITH_TRACKING - Available in certain regions. Default in Brazil.
- KIOSK_COLLECTION - Available in select regions. See the [kiosk collection guide](/guides/product/issue-cards/card-kiosk-collection).
    Enum: "POSTAL_SERVICE_STANDARD", "POSTAL_SERVICE_WITH_TRACKING", "KIOSK_COLLECTION"

  - `lifetimeLimit` (number)
    Optionally sets a lifetime spending limit on the card. A lifetime limit of 0 means that a card cannot be used until the lifetime limit is updated.
    Example: 100

  - `cardHolderProfileId` (integer)
    The cardholder profile for this card. This is used for business profiles.
    Example: 654321

  - `replacementDetails` (object)
    The replacement details for this card.

  - `replacementDetails.cardToken` (string)
    Token of the card to replace.
    Example: "4a75fdb7-5791-49ac-832c-81c4347e4df0"

  - `replacementDetails.reason` (string)
    Reason for replacing the card:
- CARD_DAMAGED
- CARD_EXPIRING
    Enum: "CARD_DAMAGED", "CARD_EXPIRING"

## Response 200 fields (application/json):

  - `id` (integer)
    ID of the card order.
    Example: 142

  - `profileId` (integer)
    Profile ID.
    Example: 123456

  - `clientId` (string)
    Client ID.
    Example: "your-client-id"

  - `cardProgram` (object)
    The card program associated with this card order. A Card Program is what Wise refers to all the cards that you will be issuing with us, grouped by product type and by issuing country.

  - `cardProgram.name` (string)
    The name of the card program.
    Example: "VISA_DEBIT_BUSINESS_UK_1_PHYSICAL_CARDS_API"

  - `cardProgram.scheme` (string)
    The network of the card program:
- MASTERCARD
- VISA
    Enum: "MASTERCARD", "VISA"

  - `cardProgram.defaultCurrency` (string)
    The default currency assigned to the card program.
    Example: "GBP"

  - `cardProgram.cardType` (string)
    The type of the card:
- VIRTUAL_NON_UPGRADEABLE
- PHYSICAL
    Enum: "VIRTUAL_NON_UPGRADEABLE", "PHYSICAL"

  - `address` (object)
    Address set during card order. Fields vary by country. See the [card address validation guide](/guides/developer/api-guides/card-address-validation) for country-specific fields and validation rules.

  - `address.firstLine` (string)
    Card holder's address.
    Example: "56 Shoreditch High St"

  - `address.secondLine` (string,null)
    Card holder's address.
    Example: "The Tea Bldg"

  - `address.thirdLine` (string,null)
    Card holder's address.

  - `address.city` (string)
    Card holder's city.
    Example: "London"

  - `address.postCode` (string)
    Card holder's postal code.
    Example: "E1 6JJ"

  - `address.state` (string,null)
    Card holder's state.

  - `address.country` (string)
    Card holder's country (ISO 3166-1 alpha-2).
    Example: "GB"

  - `cardToken` (string,null)
    Token of the card associated with card order. Nullable.
    Example: "4dc0be88-903f-49e4-8237-735f1139e3dd"

  - `replacesCard` (string,null)
    A string for replacement card. Not supported at the moment.

  - `creationTime` (string)
    Time when the card order is created.
    Example: "2023-07-31T01:43:24.596321434Z"

  - `modificationTime` (string)
    Time when the card order was last modified.
    Example: "2023-07-31T01:43:24.596321825Z"

  - `status` (string)
    Status of the card order. See [card order status flow](/api-reference/card-order#card-order-status-flow) for details.
    Enum: "PLACED", "REQUIREMENTS_FULFILLED", "CARD_DETAILS_CREATED", "PRODUCED", "COMPLETED", "CANCELLED", "RETURNED"

  - `cardHolderName` (string)
    Name of the card holder.
    Example: "John Smith"

  - `phoneNumber` (string)
    Phone number associated with the card order.
    Example: "+441234567890"

  - `lifetimeLimit` (number,null)
    Maximum amount of spending on the card once issued. Nullable.
    Example: 100

  - `deliveryEstimate` (string)
    The estimated time when the card will be delivered. There are few scenarios to be mindful of:

1. For virtual card the delivery estimate will be close to the creationTime, as it does not require delivery.
2. For physical card in PLACED status, the delivery estimate is calculated assuming that the order requirements will be fulfilled today (refreshed daily).
3. For physical card after PLACED status, we provide a best effort estimation, and it should not be used as delivery timing as we will have separate delivery tracking (subject to region availability) for physical card that is coming soon.
    Example: "2023-10-30T07:11:00.848681Z"

  - `deliveryDetails` (object)
    Delivery details of a physical card order. For virtual cards, this value is null.

  - `deliveryDetails.deliveryOption` (string)
    The delivery option used on the card order.
    Enum: "POSTAL_SERVICE_STANDARD", "POSTAL_SERVICE_WITH_TRACKING", "KIOSK_COLLECTION"

  - `deliveryDetails.deliveryVendor` (string,null)
    The name of the delivery vendor.
    Example: "DHL"

  - `deliveryDetails.trackingUrl` (string,null)
    The URL to track the card delivery.
    Example: "https://www.dhl.com/gb-en/home/tracking/tracking-express.html?submit=1&tracking-id=1999473803"

  - `deliveryDetails.trackingNumber` (string,null)
    The tracking number of the card delivery.
    Example: "1999473803"