Create User Card

Endpoint details

Method: POST
URL: BASE_URL/merchant/userCard/createUserCard/
Header:

Authorization: Bearer < ACCESS_TOKEN >

Request body

Fields	Type	Required	Description
userId	string	Yes	user id generated from Merchant system
cardNumber	string	yes	9860000000000000
expireDate	string	yes	YYMM
phoneNumber	string	no	+998*********
sms	dict	no

{
  "userId": "string",
  "cardNumber": "string",
  "expireDate": "string",
  "phoneNumber": "string",
}

Success response

{
  "result": {
    "cid": "78a353ww-c4ff-42ee-qq0f-2a73baa5db4f",
    "otpSentPhone": "********0000"
  },
  "error": null
}

OTP is sent by the card processing center

• The OTP code is sent by the Uzcard / Humo processing center, not by Paylov or the merchant.
• The SMS goes to the phone number linked to the card (masked in otpSentPhone).
• The SMS sender is the processing center (e.g. UZCARD or HUMO), and the message text may not contain the merchant's name. In this case, contact Paylov staff: they will assign an SMS name to the merchant, and the merchant's name will additionally appear in the OTP SMS.
• If SMS notifications are not enabled for the card, the OTP will not be delivered.

Recommendation: before asking for the code, show the user a message like: "The confirmation code will be sent by Uzcard/Humo to the phone number linked to your card: ********0000."

Error response

{
  "result": null,
  "error": {
    "code": "validation_error",
    "message": "validation_error",
    "data": {
      "cardNumber": [
        "invalid_card_number"
      ]
    }
  }
}