What are we trying to achieve?
  • Prevent individuals engaged in fraudulent activities from adding numerous cards to a single sub-account.
  • Block such individuals from using automations for card testing.
What has changed?
  1. We have implemented a restriction allowing users to add a maximum of three cards to their accounts. Should a user attempt to add a new card while an existing one is expired, the system will automatically replace the old card with the new one, provided the card fingerprint remains the same.
  2. Furthermore, users are limited to five attempts per day when using the Add Card API for sub-accounts. This limit includes both successful and failed attempts, ensuring users cannot exceed five total attempts to add a card within a 24-hour period.