> ## Documentation Index
> Fetch the complete documentation index at: https://developers.uqpay.com/llms.txt
> Use this file to discover all available pages before exploring further.
# Enroll Card in Network Protection
> Business Visa only
Enrolls a card in ASAF (Account & Cardholder Fraud Solution) Network Protection.
Use this endpoint to register a lost, stolen, expired, or closed card with the Visa network so that future authorization attempts on it are declined network-wide. The enrollment request is asynchronous — the response confirms the request was accepted, and the final outcome is delivered via the `card.risk_control.network_protection.enrolled` webhook.
## OpenAPI
````yaml /card-issuance/v1.6/issuing.yaml post /v1/issuing/cards/{id}/risk
openapi: 3.0.2
info:
title: Issuing API
version: 0.0.1
description: >
UQPAY Issuing API allows you to issue virtual cards, manage cardholders, and
monitor card transactions.
## What you can do
- Create and manage virtual cards (issue, activate, freeze, cancel)
- Onboard and verify cardholders with KYC
- Set spending limits and card controls
- Recharge and withdraw card balances
- Query card transactions and account balances
- Transfer funds between issuing accounts
- Generate and download reports
## Authentication
All requests require a valid auth token obtained via the [Access
Token](/account-center/v1.6/api-reference/access-token) endpoint. Include
the token in the `x-auth-token` header.
## Idempotency
POST requests support the `x-idempotency-key` header to safely retry without
creating duplicate resources.
contact:
name: UQPAY Support Team
url: https://www.uqpay.com/support
email: support@uqpay.com
license:
name: Proprietary
url: https://www.uqpay.com/legal/api-terms
termsOfService: https://www.uqpay.com/legal/terms
x-api-id: uqpay-issuing-api-v1.6.0
x-categories:
- Card Issuing
- Transaction Processing
x-features:
- Virtual Card Issuance
- Real-time Processing
- Webhook Notifications
- Comprehensive Reporting
- Transaction Monitoring
servers:
- url: https://api-sandbox.uqpaytech.com/api
description: Sandbox base URL.
- url: https://api.uqpay.com/api
description: Production base URL.
security: []
tags:
- name: Card Lifecycle
description: >-
Create cards and manage their full lifecycle — issue, retrieve, update,
activate, assign, and change status.
- name: Card Secure Data
description: >-
Access sensitive card data (PAN, CVV) through the PCI-compliant endpoint
or a tokenized iframe. Availability depends on your PCI status, not the
card product.
- name: Card Funding
description: Load and unload a card's stored balance for prepaid-style cards.
- name: Card PIN
description: >-
Set and manage card PINs. `reset-pin` covers physical cards;
`manage-card-pin` covers virtual cards.
- name: Card Add-ons
description: >-
Product-specific card capabilities. Each operation applies only to certain
card products — see [Card
products](/card-issuance/v1.6/guide/card-products).
- name: Card Arts
description: >-
Manage the visual designs (card arts) available to your issuing account.
Set an account-wide default, or pass `card_art_id` when issuing or
updating a card to override per card. Available on Personal Visa.
- name: Cardholders
description: >-
You can create cardholders, which are authorized representatives of your
business that can be issued cards.
- name: Transactions
description: >-
These APIs allow you to retrieve information on transactions that are made
on your user's cards.
- name: Products
description: >-
With this set of APIs, you will be able to create card orders for your
customers.
- name: Balances
description: >-
The available and pending amounts for each currency are broken down
further by payment source types. You can retrieve it to see the balance
currently on your issuing account.
- name: Transfers
description: Transfer funds between issuing accounts.
- name: Reports
description: Generate and download issuing reports.
- name: Simulator
description: Simulate card transactions on the sandbox environment.
paths:
/v1/issuing/cards/{id}/risk:
post:
tags:
- Card Add-ons
summary: Enroll Card in Network Protection
description: >
Business Visa only
Enrolls a card in ASAF (Account & Cardholder Fraud Solution) Network
Protection.
Use this endpoint to register a lost, stolen, expired, or closed card
with the Visa network so that future authorization attempts on it are
declined network-wide. The enrollment request is asynchronous — the
response confirms the request was accepted, and the final outcome is
delivered via the `card.risk_control.network_protection.enrolled`
webhook.
operationId: enroll-card-network-protection
parameters:
- $ref: '#/components/parameters/IdPath'
- $ref: '#/components/parameters/XOnBehalfOf'
- $ref: '#/components/parameters/XIdempotencyKey'
requestBody:
content:
application/json:
schema:
$ref: '#/components/schemas/EnrollNetworkProtectionRequest'
responses:
'200':
headers:
x-response-id:
$ref: '#/components/headers/XResponseId'
description: Enrollment request accepted.
content:
application/json:
schema:
$ref: '#/components/schemas/ASAFNetworkProtectionResponse'
title: EnrollNetworkProtectionResponse
security:
- XAuthToken: []
components:
parameters:
IdPath:
name: id
description: Universally unique identifier (UUID v4) of a resource.
in: path
required: true
schema:
type: string
format: uuid
example: 71fdb0fe-9682-457a-9361-e8868694f12f
XOnBehalfOf:
in: header
name: x-on-behalf-of
schema:
type: string
required: false
description: >
Specifies the sub-account on whose behalf the request is made. This
should be set to the `account_id`, which can be retrieved via the [List
Connected
Accounts](/account-center/v1.6/api-reference/list-connected-accounts)
endpoint. If omitted or empty, the request is executed using the master
account.
More information at [Connected
Accounts](/account-center/v1.6/guide/connected-accounts).
example: 18523f72-f4de-4f9c-bb8e-ec7d1c4f32be
XIdempotencyKey:
in: header
name: x-idempotency-key
schema:
type: string
format: uuid
required: true
description: >-
A unique identifier (UUID) used to maintain operation idempotency,
ensuring that repeated executions of the same operation do not result in
unintended effects or duplication. It helps preserve data consistency in
the face of network errors, retries, or failures.
example: 18523f72-f4de-4f9c-bb8e-ec7d1c4f32be
schemas:
EnrollNetworkProtectionRequest:
type: object
required:
- risk_control
- action_code
properties:
risk_control:
type: string
enum:
- network_protection
description: Risk control type. Must be `network_protection` for ASAF enrollment.
example: network_protection
action_code:
$ref: '#/components/schemas/NetworkProtectionActionCode'
ASAFNetworkProtectionResponse:
type: object
description: >-
Acknowledgement returned for an ASAF Network Protection enrollment or
removal request.
properties:
card_id:
type: string
format: uuid
example: 7f6dbbd9-37b9-4f64-a021-cd4f71234567
description: Unique identifier of the card.
card_number:
type: string
example: '************1234'
description: Masked card number.
cardholder_id:
type: string
format: uuid
example: b6e6268b-7d95-4700-9b87-12e7c1234567
description: Unique identifier of the cardholder.
card_scheme:
type: string
example: VISA
description: Card network.
enabled:
type: boolean
example: false
description: >-
Whether Network Protection is currently active on the card. The
field reflects the state after the request is processed by the
network — it may not flip immediately, as enrollment and removal are
asynchronous.
status:
$ref: '#/components/schemas/NetworkProtectionStatus'
action_code:
$ref: '#/components/schemas/NetworkProtectionActionCode'
definition:
type: string
example: Lost card, pickup
description: Human-readable description of `action_code`.
update_time:
type: string
format: date-time
nullable: true
example: '2026-05-14T09:00:00Z'
description: Time at which the enrollment or removal request was last updated.
NetworkProtectionActionCode:
type: string
description: >
ASAF action code indicating the reason the card is enrolled in Network
Protection.
- `04` — Pickup card
- `41` — Lost card, pickup
- `43` — Stolen card, pickup
- `46` — Closed account
- `54` — Expired card
enum:
- '04'
- '41'
- '43'
- '46'
- '54'
example: '41'
NetworkProtectionStatus:
type: string
description: Lifecycle status of an ASAF Network Protection enrollment.
enum:
- NOT_ENROLLED
- ENROLL_PENDING
- ENROLL_FAILED
- ENROLLED
- REMOVAL_PENDING
example: ENROLL_PENDING
headers:
XResponseId:
description: >-
Universally unique identifier (UUID v4) for the response. Helpful for
identifying a request when communicating with UQPAY support.
schema:
type: string
format: uuid
example: 2adba88e-9d63-44bc-b975-9b6ae3440dde
securitySchemes:
XAuthToken:
type: apiKey
in: header
name: x-auth-token
description: The API token for login provided by UQPay.
````