Query Card Sensitive Info

Retrieve a card's sensitive information (full card number, CVV, expiry date). Handle the response in a PCI-compliant manner. Security Call this endpoint only from a protected server over TLS and restrict access to authorized personnel and services. Never log, cache, persist, send to analytics, or expose PAN or CVV to client applications. Your integration is responsible for meeting all applicable PCI DSS requirements.
Request Parameters
idstring
required
Unique card identifier. Max 64 characters.
Response Parameters
resultResult
See Result.
idstring
Unique card identifier. Max 64 characters.
accountIdstring
User account ID. Max 64 characters.
cardNumberstring
Full card number. Max 19 characters.
cvvstring
CVV security code. Max 4 characters.
expiryDatestring
Card expiry date. Format MM/YY.
Error Codes
resultCoderesultStatusresultMessageTroubleshooting
SUCCESSSSuccess.Query succeeded.
PARAM_ILLEGALFIllegal parameters exist.Verify request fields against this reference.
PARTNER_INFO_NOT_EXISTFBusiness partner info does not exist.Contact WorldFirst support to verify partner onboarding.
PARTNER_STATUS_INVALIDFBusiness partner status is invalid.Contact WorldFirst support to confirm partner status.
AUTHORIZATION_NOT_EXISTFThe authorization does not exist.Verify the `account-id` / `access-token` authorization.
ASSET_NOT_EXITFAsset does not exist.Verify the `id` is correct.
RISK_REJECTFRequest rejected due to risk concerns.Contact WorldFirst support to review the risk decision.
ASSET_CARD_DECRYPT_ERRORFCard number decryption error.Retry later; contact WorldFirst support if it persists.
USER_NOT_EXISTFThe user does not exist.Retry with correct user information.
USER_NO_PERMISSIONFUser does not have permission.Retry with a user that has permission for this card.
CARD_NOT_FOUNDFCard not found.Verify the `id` is correct.
CARD_STATUS_INVALIDFCard status is invalid.Sensitive info is only available for eligible card statuses.
PROCESS_FAILFA general business failure occurred. Do not retry.Do not retry. Contact WorldFirst support.
UNKNOWN_EXCEPTIONUAn unknown exception occurred.Server error. Retry later; contact WorldFirst support if it persists.
Definition
POST /api/open/v1/issuing/cards/querySensitiveInfo
Request
{
"id": "2026062229027200120603300003203"
}
Response
{
"result": {
  "resultCode": "SUCCESS",
  "resultMessage": "success",
  "resultStatus": "S"
},
"id": "2026062229027200120603300003203",
"accountId": "2120120018****",
"cardNumber": "5262********9419",
"cvv": "***",
"expiryDate": "06/31"
}