Setup for Instant Issue

This guide describes developer implementation for instant-issue cards. For general information, see Instant-issue cards in the Choose a Card Strategy guide.

Initial setup

Follow these steps to set up, create, and distribute instant-issue cards.

Step 1: Create the instant-issue product

Set these parameters on the instant-issue product.

ParameterDescription
CASPOSets a default PIN when creating an account. Can be set to No PIN, last four of mobile or home phone, or last four of PRN. The PIN is set at the time of the Create Account call.
CBAD1Required. Specifies how to include the name and address for shipping instant-issue cards. Set to SADDR.
EMBFLSet only for Latin American products where a PIN-block is required. Do not set for other instant-issue products.
IIEXRequired. The number of years or days that the instant-issue card is valid. Numbers 1–5 are years and numbers 6 and higher are days.
IIPERComma-separated product IDs of personalized cards that the instant-issue card can upgrade to. Cannot be set for gift cards.
IITYPRequired. Specifies an internal process to use for this instant-issue product. Set to PRN.
TEMPCCancels the instant-issue card when the personalized card is activated. IIPER must be set also. Do not set for gift cards.

Step 2: Set up the location

Ordering instant-issue cards requires that you have at least one location set up. If you already have a location 0 (root), skip this step. If you don't have any locations, call Create Location with these parameters:

ParameterValue
nameYour organization name
Address parametersHeadquarters address and phone
parentLocationblank
parentLocationTypeblank
providerSpecifiedIdblank
statusActive
store_typeCorporate

Step 3: Create bulk order

Instead of embossing cards on-demand as you would with personalized cards, instant-issue cards are embossed in bulk.

Call Create Bulk Card Order with these parameters:

ParameterDescription
prodIdProduct ID of the instant-issue card
numberOfCardsNumber of cards to ship to the location. Max: 9999. If you need to send more than 9999 cards to the same location, make additional endpoint calls.
embossWithOptional. String to print on the card, such as Preferred Customer.
shipToNameIn-care-of name for the address where the bulk card order is to be shipped.
shipToAddressStreet address where the order is to be shipped. Include suite numbers on this line.
shipToCityCity where the order is to be shipped.
shipToStateOrProvinceState or province where the order is to be shipped.
shipToPostalCodePostal code where the order is to be shipped.
locationPass 0.
locationTypePass 0.

🚧

Warning

The endpoint returns an order_id that you must capture and record at this time. Galileo does not provide a way to retrieve order IDs, and you must use these IDs to get the card identifiers and perform other tasks.

The bulk card order is sent to the embosser in the daily emboss file, and the cards are embossed and shipped to the location specified. The SHIP: card_shipped event is not sent out for bulk card orders.

Step 4: Get the card identifiers

To get a list of PRNs and card IDs for all of the cards in a batch, call Get Bulk Card Order with these parameters:

  • orderId — The order ID (order_id) as returned by the Create Bulk Card Order endpoint.
  • returnAllCards — Pass 1 to get a list of PRNs and PANs. The expiry dates will not be available right after creating the order, because they are generated asynchronously by a back-end process. Ask Galileo how often that process runs in your core to know when the expiry dates will be generated.

Alternatively, you can call Verify Instant-Issue Card for a single card. For example, if you have the card in hand you can pass the PAN in accountNo to retrieve the PRN as well as other information such as the batch ID, case ID, and bundle ID for the card.

Step 5: Enroll customer and issue card

Perform this step only for prepaid reloadable cards. Do not perform this step for gift cards.

At the store, you have an interface for customer enrollment and card issuing.

📘

Note

In some cases you must perform KYC/CIP on the customer prior to issuing a prepaid reloadable card. The requirement depends on the amount on the card and other factors. Consult with your bank for your specific use case. Also see the Customer ID Verification (KYC/CIP) guide.

  1. In your enrollment interface, input the customer's name, address, and other information.
  2. If you are required to perform CIP, input a government ID such as the SSN or whatever your bank requires.
    • If you are performing your own CIP, submit the information to your service and wait for the response.
    • If Galileo is performing CIP, go to the next step.
  3. Call Create Account with these parameters:
  4. Galileo creates a customer record and associates the PRN of the card with it.
  5. The cardholder activates the card and sets a PIN. See Activating a Card and PIN-Set Procedures for more information.

Step 6: Switch to a personal product

This step is optional for prepaid reloadable cards. Do not perform this step for gift cards.

If you would like to upgrade an instant-issue customer to a personalized card, you must perform a product switch. How you perform the product switch depends on how the BINs are set up for the instant-issue and the personalized products. If the two products have the same BIN (same first six digits) follow the instructions below. If they have different BINs, follow the instructions in Switching Products with Different BINs.

  1. Follow the steps in Use case 4: Product switch with new PAN and expiry of the Switching Products guide.
  2. A new card is issued and sent in the mail. When the new card is activated, the instant-issue card is deactivated, as long as TEMPC is set. See Activating a Card for more information.
  3. Because the card has a new PAN, a new PIN must be set. See PIN-Set Procedures for more information.

Adding an instant-issue card to an existing user

The most common use case for adding an instant-issue card to an existing user is to provide a temporary physical card when a card has been lost, stolen or damaged, while waiting for the replacement or reissued card to be embossed and mailed.

Perform these steps when a cardholder comes to your place of business to report a lost, stolen, or damaged card.

  1. Initiate the process to replace the card:
  2. Call Add Card with these parameters:
    • accountNo: PRN of old card
    • newAccountNo: PRN of instant-issue card
    • prodId: Product ID of instant-issue card
  3. The instant-issue card is activated by the endpoint call.
  4. The endpoint returns the card_id of the instant-issue card. The PRN is the same as the lost, stolen, or damaged card.

Fraud mitigation

All cards are vulnerable to BIN attacks, wherein fraudsters obtain your BIN and then use software to guess the rest of the digits, as well as the expiry date and CVV. When they make a successful transaction for a tiny amount, they then use the successful combination to make as many purchases as possible before you detect the fraud.

If you become aware of an attack on your BIN, you can use Modify Status to cancel the compromised accounts. However, you cannot use Modify Status on your unissued cards, because their accounts don't exist on the Galileo system yet. You have these options to cancel the unissued cards:

  • Provide a list of affected PANs to Galileo, and Galileo will cancel them.
  • Cancel the affected cards by changing their status in the CST.