This guide describes developer implementation for instant-issue cards. For general information, see Instant-issue cards in the Choose a Card Strategy guide.
Follow these steps to set up, create, and distribute instant-issue cards.
Set these parameters on the instant-issue product.
|Sets a default PIN when creating an account. Can be set to No PIN, last four of mobile or home phone, or last four of PRN. The PIN is set at the time of the Create Account call.
|Required. Specifies how to include the name and address for shipping instant-issue cards. Set to
|Set only for Latin American products where a PIN-block is required. Do not set for other instant-issue products.
|Required. The number of years or days that the instant-issue card is valid. Numbers 1–5 are years and numbers 6 and higher are days.
|Comma-separated product IDs of personalized cards that the instant-issue card can upgrade to. Cannot be set for gift cards.
|Required. Specifies an internal process to use for this instant-issue product. Set to
|Cancels the instant-issue card when the personalized card is activated. IIPER must be set also. Do not set for gift cards.
Ordering instant-issue cards requires that you have at least one location set up. If you already have a location 0 (root), skip this step. If you don't have any locations, call Create Location with these parameters:
|Your organization name
|Headquarters address and phone
Instead of embossing cards on-demand as you would with personalized cards, instant-issue cards are embossed in bulk.
Call Create Bulk Card Order with these parameters:
|Product ID of the instant-issue card
|Number of cards to ship to the location. Max: 9999. If you need to send more than 9999 cards to the same location, make additional endpoint calls.
|Optional. String to print on the card, such as
|In-care-of name for the address where the bulk card order is to be shipped.
|Street address where the order is to be shipped. Include suite numbers on this line.
|City where the order is to be shipped.
|State or province where the order is to be shipped.
|Postal code where the order is to be shipped.
The endpoint returns an
order_idthat you must capture and record at this time. Galileo does not provide a way to retrieve order IDs, and you must use these IDs to get the card identifiers and perform other tasks.
The bulk card order is sent to the embosser in the daily emboss file, and the cards are embossed and shipped to the location specified. The
SHIP: card_shipped event is not sent out for bulk card orders.
To get a list of PRNs and card IDs for all of the cards in a batch, call Get Bulk Card Order with these parameters:
orderId— The order ID (
order_id) as returned by the Create Bulk Card Order endpoint.
1to get a list of PRNs and PANs. The expiry dates will not be available right after creating the order, because they are generated asynchronously by a back-end process. Ask Galileo how often that process runs in your core to know when the expiry dates will be generated.
Alternatively, you can call Verify Instant-Issue Card for a single card. For example, if you have the card in hand you can pass the PAN in
accountNo to retrieve the PRN as well as other information such as the batch ID, case ID, and bundle ID for the card.
Perform this step only for prepaid reloadable cards. Do not perform this step for gift cards.
At the store, you have an interface for customer enrollment and card issuing.
In some cases you must perform KYC/CIP on the customer prior to issuing a prepaid reloadable card. The requirement depends on the amount on the card and other factors. Consult with your bank for your specific use case. Also see the Customer ID Verification (KYC/CIP) guide.
- In your enrollment interface, input the customer's name, address, and other information.
- If you are required to perform CIP, input a government ID such as the SSN or whatever your bank requires.
- If you are performing your own CIP, submit the information to your service and wait for the response.
- If Galileo is performing CIP, go to the next step.
- Call Create Account with these parameters:
- Galileo creates a customer record and associates the PRN of the card with it.
- The cardholder activates the card and sets a PIN. See Activating a Card and PIN-Set Procedures for more information.
This step is optional for prepaid reloadable cards. Do not perform this step for gift cards.
If you would like to upgrade an instant-issue customer to a personalized card, you must perform a product switch. How you perform the product switch depends on how the BINs are set up for the instant-issue and the personalized products. If the two products have the same BIN (same first six digits) follow the instructions below. If they have different BINs, follow the instructions in Switching Products with Different BINs.
- Follow the steps in Use case 4: Product switch with new PAN and expiry of the Switching Products guide.
- A new card is issued and sent in the mail. When the new card is activated, the instant-issue card is deactivated, as long as TEMPC is set. See Activating a Card for more information.
- Because the card has a new PAN, a new PIN must be set. See PIN-Set Procedures for more information.
The most common use case for adding an instant-issue card to an existing user is to provide a temporary physical card when a card has been lost, stolen or damaged, while waiting for the replacement or reissued card to be embossed and mailed.
Perform these steps when a cardholder comes to your place of business to report a lost, stolen, or damaged card.
- Initiate the process to replace the card:
- For lost or stolen cards follow the steps in the Lost, Stolen, or Damaged Cards guide.
- For damaged cards follow the steps in Use case 1: Reissue card with same PAN and new expiry of Reissuing Cards.
- Call Add Card with these parameters:
accountNo:PRN of old card
newAccountNo:PRN of instant-issue card
prodId:Product ID of instant-issue card
- The instant-issue card is activated by the endpoint call.
- The endpoint returns the
card_idof the instant-issue card. The PRN is the same as the lost, stolen, or damaged card.
All cards are vulnerable to BIN attacks, wherein fraudsters obtain your BIN and then use software to guess the rest of the digits, as well as the expiry date and CVV. When they make a successful transaction for a tiny amount, they then use the successful combination to make as many purchases as possible before you detect the fraud.
If you become aware of an attack on your BIN, you can use Modify Status to cancel the compromised accounts. However, you cannot use Modify Status on your unissued cards, because their accounts don't exist on the Galileo system yet. You have these options to cancel the unissued cards:
- Provide a list of affected PANs to Galileo, and Galileo will cancel them.
- Cancel the affected cards by changing their status in the CST.
Updated 9 months ago