Fetches the card's PIN.
Requires an encrypted JWE payload for security. See the sensitive card details guide for implementation details.
This endpoint is SCA protected when applicable. If your profile is registered within the UK and/or EEA, SCA most likely applies. For more information, see implementing SCA.
Security
UserToken
Optional UUID for correlating requests across systems. If provided, Wise echoes it back in the response. Maximum 36 characters. Learn more.
Example:f47ac10b-58cc-4372-a567-0e02b2c3d479
- Production Environmenthttps://twcard.wise.com/twcard-data/v1/sensitive-card-data/pin
- Sandbox Environmenthttps://twcard.wise-sandbox.com/twcard-data/v1/sensitive-card-data/pin
curl -i -X POST \
https://twcard.wise.com/twcard-data/v1/sensitive-card-data/pin \
-H 'Authorization: Bearer <YOUR_JWT_HERE>' \
-H 'Content-Type: application/json' \
-H 'X-External-Correlation-Id: f47ac10b-58cc-4372-a567-0e02b2c3d479' \
-H 'x-tw-twcard-card-token: ca0c8154-1e14-4464-a1ce-dcea7dc3de52' \
-d '{
"keyVersion": 1,
"encryptedPayload": "<your JWE>"
}'Card PIN retrieved successfully.
Headers
Echoed back when X-External-Correlation-Id was included in the request. Learn more.
Example:"f47ac10b-58cc-4372-a567-0e02b2c3d479"
Response
{ "nonce": "33d51227-9ad6-4624-b4b7-7853b56076dd", "pin": "1234" }