Fetches the card's PIN.
Requires an encrypted JWE payload for security. See the sensitive card details guide for implementation details.
SCA protected endpoint
This endpoint is SCA protected. SCA requirements apply to profiles registered outside of the following regions: US, AU, NZ, SG, CA, MY.
Review the Strong Customer Authentication guide for more details.
Security
UserToken
Optional UUID for correlating requests across systems. If provided, Wise echoes it back in the response. Maximum 36 characters. Learn more.
Example:f47ac10b-58cc-4372-a567-0e02b2c3d479
- Production Environmenthttps://twcard.wise.com/twcard-data/v1/sensitive-card-data/pin
- Sandbox Environmenthttps://twcard.wise-sandbox.com/twcard-data/v1/sensitive-card-data/pin
curl -i -X POST \
https://twcard.wise.com/twcard-data/v1/sensitive-card-data/pin \
-H 'Authorization: Bearer <YOUR_JWT_HERE>' \
-H 'Content-Type: application/json' \
-H 'X-External-Correlation-Id: f47ac10b-58cc-4372-a567-0e02b2c3d479' \
-H 'x-tw-twcard-card-token: ca0c8154-1e14-4464-a1ce-dcea7dc3de52' \
-d '{
"keyVersion": 1,
"encryptedPayload": "<your JWE>"
}'Card PIN retrieved successfully.
Headers
Echoed back when X-External-Correlation-Id was included in the request. Learn more.
Example:"f47ac10b-58cc-4372-a567-0e02b2c3d479"
Response
{ "nonce": "33d51227-9ad6-4624-b4b7-7853b56076dd", "pin": "1234" }