Instant issuing
As a customer, I want to issue card without plastic, to be used immediately
As a customer, I want to issue card without plastic, to be used immediately
Change my embossing name
Activate my card
Change my geo-blockings
Deliver card using express priority
Change the delivery method of my card
Initial card creation:
For the next cards:
My card delivered to a temporary address
Card renewal with the same card number (card not working)
I want to turn internet usage on/off
Turn contactless on / Off
Choose a PIN for a new Card
Get PIN digitally
Change PIN delivery method
Initial card creation:
For the next cards:
Block by card, as I have lost it
Unblock my card, as I reported it lost but now I have found it
I want to terminate my card
New validity period (card renewal with same card number)
Block all gambling/online gambling with my card
Change all addresses for my family
Transfer funds from my Credit card account to Bank Account
Order debit card
Issue card without plastic, to be used immediately
Add new cards to existing accounts
As a Customer, I want to
As a Customer, I want to
As a Customer, I want to
As a Customer, I want to
As a Customer, I want to
As a Customer, I want to
As a Customer, I want to
As a Bank employee, I want to
Buy now, pay later is a payment method that allows consumers to buy a product immediately and pay later. This payment method is gaining popularity around the world, especially among younger consumers.
Buy Now Pay Later works like this: Consumers make purchases online or in-store, then select the Buy Now Pay Later payment method. The consumer can then select a later payment date that is convenient to him. Depending on the terms of the contract, fees or interest may apply to this payment method.
Buy now, pay later offers consumers several benefits, including the ability to defer payments to a later date, which can help during temporary financial hardship. Additionally, consumers can better manage their budgets by spreading payments over multiple months.
Card Control enables the cardholder to manage his card in real-time. Cards can be managed via the banking app or online banking through our APIs
The cardholder knows best his habits and preferences for card usage. Card Control allows him/her to customize a card in different aspects. Some examples: set card limits on different channels – in-store/online/contactless payments, cash withdrawals at ATM. As well it is possible to block chosen payment channels or certain merchant categories (e.g., casinos, liquor store, etc.). Geographical reach can also be controlled: countries can be blocked or enabled for card payments. All the mentioned features can be set for a specific period of time. Altogether, a variety of features and its combination provide a detailed customization.
Thanks to a comprehensive customization, Card Control becomes a first step towards risk mitigation. Through spending limit management, country and merchant category blocks, spend notifications, etc. the cardholder gets alert about fraudulent activities and can prevent it. Next to this, extensive card self-management options lead to fewer disputes and a lower number of calls to the customer care center.
Card Control allows the cardholder to personalize his card overriding the issuer specific standard settings. The customization is achieved by updating and overriding cards authorization restrictions and velocity limits.
Each authorization restriction override is based on an existing authorization restriction. First step is to retrieve the authorizationRestrictionReference through the list of existing authorization restriction by calling the API List of authorization restriction for account. Second step is to modify the authorization restriction using the API Create authorization restriction override. The override created could be then updated using the appropriate API.
Similar process applies to velocity limits. A default velocity limit could be overwritten by Velocity limit overrides API that allows to modify number and amount of authorizations allowed for a specific time period. The override created could be then updated and deleted using the appropriate API.
The WL FS merchant contract API enables retrieval and updating at site & terminal level. Access to contract data is restricted to your acquirer and own merchant contract identifiers. For third parties, contract updating is limited depending on the generic user role (e.g. PSP, PayFac, Merchant) limitations agreed with the acquiring bank.
Version note:
Please be aware that these API interfaces may be changed and improved (e.g. addition of fields).
The "Try out" feature does not work at this time because the sandbox is being improved to support new functionality.
Accounts are used to process operations, manage a balance in a dedicated currency, control the credit risk, perform transaction charging, calculate interest (credit or debit), generate an invoice (statement), process payments.
Three types of account working modes are being supported; Pay Later, Pay Now, Pay Before.
The below diagram presents different use cases covered by the API in the account domain.
for iDEAL 2.0
The notification APIs described in this chapter needs to be implemented on the Initiating Party side, if the Initiating Party decides to use them. The Open Banking Service will post notifications to these endpoints. For the iDEAL product the post status notification is part of the product, a value-added service is not required (because the notification is part of the iDEAL scheme and the Open Banking Service doesn't have to-do additional polling).
Endpoint: POST /status
This API will notify the initiating party about the status of the payment. More details about the fields can be found in the API reference.
Legend
| |
Request (click to enlarge) | Response |
![]() | ![]() |
Request (Signature-related fields "Digest" and "Signature" are conditionally present):
Address: https://checkout.company.com/transaction/webhook/91FA6EEC30844FAAB5/v3/notification/status
HttpMethod: POST
Headers: {Authorization=Bearer 123456789, X-Request-ID=c1452392-6c3f-4365-93f8-40558f61ac36, MessageCreateDateTime=2023-03-15T11:51:24.185+01:00, Digest=SHA-256=0hq1mKzxB1yyc6+hut2bEX7ps+nWyWb2pgQb6AhfhfM=, Signature=keyId="3EBEF6033C00730D9C6DA05165A3CAA1F31036FB",algorithm="rsa-sha256",headers="messagecreatedatetime x-request-id digest",signature="uYgovoK+ibAE7+MzJEKrApDUAgWfUv7RQK22zAxWHCdKCuG4d0HgqpDSqcGlKmP2IMFsC787zDU3oqKeeIIVXR72uZBiOnm0/84UL9e7LVDHDLQsRbfDnmvgX/4xQvdwROmyqh8kkcXTf/48zY0wo2n9iDspCbgTn1DEqAqtAlwunIpea8eYA3FQc+pV2px77wVP7l+9mTxexzLSmum61wWbqE4ESJn0K37gXY54229ZtCnNSlu9rsvjQ5xmDf1e6MvMLBOblXHIReN2t8IH85VGK7mpi8T7JeKb8rIG8qDbQ5TD3BmIS1+RspI95FldLCKLH91/KNrxsgPsrC2QgQ==", Content-Type=application/json}
Payload: {
"PaymentProductUsed" : "IDEAL",
"CommonPaymentData" : {
"GuaranteedAmount" : "10.00",
"PaymentStatus" : "SettlementCompleted",
"PaymentId" : "19928",
"AspspPaymentId" : "0001070883053837",
"AspspId" : "10002",
"DebtorInformation" : {
"Name" : "Edsger Wybe Dijkstra - Callback",
"Agent" : "ABNANL2AXXX",
"Account" : {
"SchemeName" : "IBAN",
"Identification" : "NL44RABO0123456789",
"Currency" : "EUR"
},
"UseWaitingScreen" : false
}
Response:
ResponseCode: 204
Request (Signature-related fields "Digest" and "Signature" are conditionally present):
Address: https://checkout.company.com/transaction/webhook/91FA6EEC30844FAAB5/v3/notification/status
HttpMethod: POST
Content-Type: application/json
Headers: {Authorization=Bearer 123456789, X-Request-ID=c1452392-6c3f-4365-93f8-40558f61ac36, MessageCreateDateTime=2023-03-15T11:51:24.185+01:00, Digest=SHA-256=0hq1mKzxB1yyc6+hut2bEX7ps+nWyWb2pgQb6AhfhfM=, Signature=keyId="3EBEF6033C00730D9C6DA05165A3CAA1F31036FB",algorithm="rsa-sha256",headers="messagecreatedatetime x-request-id digest",signature="uYgovoK+ibAE7+MzJEKrApDUAgWfUv7RQK22zAxWHCdKCuG4d0HgqpDSqcGlKmP2IMFsC787zDU3oqKeeIIVXR72uZBiOnm0/84UL9e7LVDHDLQsRbfDnmvgX/4xQvdwROmyqh8kkcXTf/48zY0wo2n9iDspCbgTn1DEqAqtAlwunIpea8eYA3FQc+pV2px77wVP7l+9mTxexzLSmum61wWbqE4ESJn0K37gXY54229ZtCnNSlu9rsvjQ5xmDf1e6MvMLBOblXHIReN2t8IH85VGK7mpi8T7JeKb8rIG8qDbQ5TD3BmIS1+RspI95FldLCKLH91/KNrxsgPsrC2QgQ==", Content-Type=application/json}
Payload: {
"PaymentProductUsed" : "IDEAL",
"CommonPaymentData" : {
"GuaranteedAmount" : "10.00",
"PaymentStatus" : "SettlementCompleted",
"PaymentId" : "19928",
"AspspPaymentId" : "0001070883053837",
"AspspId" : "RABONL2UXXX",
"DebtorInformation" : {
"Name" : "Edsger Wybe Dijkstra - Callback",
"Agent" : "ABNANL2AXXX",
"Account" : {
"SchemeName" : "IBAN",
"Identification" : "NL44RABO0123456789",
"Currency" : "EUR"
},
"ContactDetails" : {
"FirstName" : "Edsger",
"LastName" : "Dijkstra",
"PhoneNumber" : "+31612345678",
"Email" : "edsger@domain.nl"
},
"ShippingAddress" : {
"FirstName" : "Edsger",
"LastName" : "Dijkstra",
"PostCode" : "52066",
"Country" : "NL"
},
"BillingAddress" : {
"FirstName" : "Edsger",
"LastName" : "Dijkstra",
"PostCode" : "52066",
"Country" : "NL"
}
}
},
"UseWaitingScreen" : false
}
Response:
ResponseCode: 204
Endpoint: POST /debtorToken
This API will provide a debtor token update to the Initiating party. More details about the fields can be found in the API reference.
Legend
| |
Request | Response |
![]() | ![]() |
Request (Signature-related fields "Digest" and "Signature" are conditionally present):
Address: https://checkout.company.com/transaction/webhook/91FA6EEC30844FAAB5/v3/notification/status
HttpMethod: POST
Content-Type: application/json
Headers: {Authorization=Bearer 123456789, X-Request-ID=c1452392-6c3f-4365-93f8-40558f61ac36, MessageCreateDateTime=2023-03-15T11:51:24.185+01:00, Digest=SHA-256=0hq1mKzxB1yyc6+hut2bEX7ps+nWyWb2pgQb6AhfhfM=, Signature=keyId="3EBEF6033C00730D9C6DA05165A3CAA1F31036FB",algorithm="rsa-sha256",headers="messagecreatedatetime x-request-id digest",signature="uYgovoK+ibAE7+MzJEKrApDUAgWfUv7RQK22zAxWHCdKCuG4d0HgqpDSqcGlKmP2IMFsC787zDU3oqKeeIIVXR72uZBiOnm0/84UL9e7LVDHDLQsRbfDnmvgX/4xQvdwROmyqh8kkcXTf/48zY0wo2n9iDspCbgTn1DEqAqtAlwunIpea8eYA3FQc+pV2px77wVP7l+9mTxexzLSmum61wWbqE4ESJn0K37gXY54229ZtCnNSlu9rsvjQ5xmDf1e6MvMLBOblXHIReN2t8IH85VGK7mpi8T7JeKb8rIG8qDbQ5TD3BmIS1+RspI95FldLCKLH91/KNrxsgPsrC2QgQ==", Content-Type=application/json}
Payload: {
"PsuId": "TestOSZ",
"PaymentId": "12345",
"DebtorToken": "absjrfergd"
}
Response:
ResponseCode: 204
Our issuing solution is composed of several applications that pushes different types of events into one information repository.
Each Application can notify events toward this repository.
Event stores contains comments or business events that can be generated by the different applications (CMS, authorization server, customer service GUI,..) part of our solution.
This API enables the list of events associated to a business reference type and a business reference value, for given period of time, to be retrieved.
A business reference type corresponds to a business domain like a CONTRACT, CARD, ACCOUNT whereas a business reference value can be typically a card, account, card contract reference.
The same event can be retrieved for different business reference types and business reference values. Event can be uniquely identified by its correlationId.
Currently, this API is mainly used to get the comments linked to a business reference value (e.g., a given card identifier).
API links
TThis API enables to retrieve the list of events associated to provided set of business reference types and a business reference values for given period of time.
A business reference types correspond to a business domain like a CONTRACT, CARD, ACCOUNT whereas a business reference values list for each provided type can be typically a card, account, card contract reference.
The same event can be retrieved for different business reference types and business reference values. Event can be uniquely identified by its correlationId.
Currently, this API is mainly used to get the comments linked to a business reference value (e.g., a given card identifier).
API links