GET
/
v3
/
wallets
/
{cardId}
/
secure-data
Get Secure Data
curl --request GET \
  --url https://sandbox-api.cardcash.com/v3/v3/wallets/{cardId}/secure-data \
  --header 'Authorization: Bearer <token>'

​
Overview

Returns the unmasked card number, PIN, and barcode string for a wallet card. This is the endpoint you use to actually retrieve the gift card credentials for use.
Cards are accessible for 24 hours after purchase. Retrieve secure data promptly after order fulfillment.

​
Request

​
Path Parameters

ParameterTypeRequiredDescription
cardIdintegerYesWallet card ID
curl https://sandbox-api.cardcash.com/v3/wallets/789/secure-data \
  -H "x-cc-app: YOUR_APP_ID" \
  -H "Authorization: Bearer YOUR_TOKEN"

​
Response (Success)

{
  "number": "6006491234567890",
  "pin": "1234",
  "barcode": "6006491234567890"
}

​
Response Fields

FieldTypeDescription
numberstringFull gift card number
pinstringCard PIN (may be empty if card type has no PIN)
barcodestringFull barcode string (prefix + card number)

​
Response (Verification Required)

If the viewing limit has been exceeded and verification is pending: 
{
  "error": true,
  "message": "OVER_THE_LIMIT",
  "remainingSubmitAttempts": 4,
  "remainingSendAttempts": 4
}
Status: 400 When you receive this response, card data is unavailable. Cards are accessible for 24 hours after purchase — retrieve secure data promptly after fulfillment.

​
Notes

  • The barcode string is typically the merchant prefix + card number
  • Some cards may have an empty PIN — this is normal for certain merchants
  • Cards are accessible for 24 hours after purchase. Access secure data promptly after order fulfillment.
  • A small number of new cards may be delivered as redemption URLs instead of card number and PIN. Contact your account manager for details on which merchants use this format.