POST
/
checkout
/
{reference}
/
card-payment

Charge Card

To charge a customer’s card directly, use the /checkout/{reference}/card-payment endpoint.
Replace {reference} with the transaction reference obtained from the initialization step.

Example Request

cURL

curl --location 'https://corebanking-staging.boldmfb.com/api/checkout/{reference}/card-payment' \
--header 'x-api-key: YOUR_API_KEY' \
--header 'x-api-secret: YOUR_API_SECRET' \
--header 'Content-Type: application/json' \
--data '{
  "cardNumber": "5555555555554446",
  "expiryDate": "32/34",
  "cvv": "3232",
  "pin": "5555"
}'

Note:

  • Replace the card details with real customer data in production.
  • The reference in the URL should be the one returned from the transaction initialization.

Request Body

FieldTypeDescription
cardNumberstringCard number
expiryDatestringCard expiry date (MM/YY)
cvvstringCard CVV
pinstringCard PIN

Response

A successful response will confirm the card payment status.

{
  "status": true,
  "statusCode": 200,
  "data": {
    "reference": "60AE7FD3E1AABE994678",
    "message": "Card charged successfully"
  }
}

Test Cards

For testing different verification scenarios, you can use these test card numbers:

Test CardNumberPurpose
None5061181664314440No additional verification required
PIN5061181664314441Requires PIN verification
OTP5061181664314442Requires OTP verification
AVS5061181664314443Requires Address Verification
3DS5061181664314444Requires 3D Secure verification
Birthday5061181664314445Requires birthday verification
Phone Number5061181664314446Requires phone number verification

Test Verification Values

  • PIN: Use 5555 for PIN verification tests
  • OTP: Use 555555 for OTP verification tests

Each test card simulates a different verification flow, allowing you to test your integration thoroughly.

Authorizations

x-api-key
string
headerrequired
x-api-secret
string
headerrequired

Path Parameters

reference
string
required

Transaction reference from initialization

Body

application/json
cardNumber
string
required
expiryDate
string
required
cvv
string
required
pin
string
required

Response

200 - application/json
status
boolean
statusCode
integer
data
object