Webhook event
Card Status Updated
CARD_STATUS_UPDATEDFired when a card status changes (e.g., activated, frozen, unfrozen, cancelled).
Body
application/json
idstringrequiredUnique event identifier for idempotency
typestringrequiredWebhook event type
CARD_STATUS_UPDATEDdataobjectrequiredShow child attributes
idstring<uuid>requiredUnique card identifier
accountIdstring<uuid>requiredID of the account the card belongs to
userIdstring<uuid>requiredID of the user the card belongs to
typestringrequiredCard type (VIRTUAL or PHYSICAL)
VIRTUALPHYSICALcardDesignIdstringrequiredDesign the card was issued with. For a physical card this is the design on the card record, which can differ from the one produced: the plastic is made from the design chosen on the shipment, returned as cardDesignId per card on the shipment endpoints.
statusstringrequiredCurrent card status
ACTIVEFROZENBLOCKEDEXPIREDblockReasonobject | nullrequiredBlock reason details (only present when status is BLOCKED)
Show child attributes
typestringrequiredMachine-readable code for the block reason
CLIENT_REQUESTEDSUSPECTED_FRAUD_CVVSUSPECTED_FRAUD_EXPIRYSUSPECTED_FRAUD_PINFRAUD_ALERT_CONFIRMEDOTHERmessagestringrequiredHuman-readable message for the block reason
blockLiftablebooleanrequiredWhether the current block can be lifted with the unblock endpoint. false for blocks that need First Leeward support, and for a card that holds no block.
frozenbooleanrequiredWhether the card is frozen. A block hides a freeze from status, so a card that is BLOCKED with frozen: true returns to FROZEN once the block lifts.
cardholderNamestringrequiredCardholder name displayed on card
last4stringrequiredLast 4 digits of the card number. Use reveal endpoint for full details.
3dsChallengeMethodstringrequired3DS challenge verification method
SMSWEBHOOKphysicalCardStatusstring | nullrequiredPhysical lifecycle of the card (production + shipping + activation rollup). Defaults to NOT_ORDERED for newly created physical cards. null for virtual cards, which have no physical lifecycle.
NOT_ORDEREDREQUESTEDIN_PRODUCTIONPRODUCTION_COMPLETEDIN_TRANSITOUT_FOR_DELIVERYDELIVEREDACTIVATEDCANCELEDDELIVERY_FAILEDEXCEPTIONcreatedAtstringrequiredISO 8601 timestamp of creation
updatedAtstringrequiredISO 8601 timestamp of last update
Response
200Webhook received successfully. Return any 2xx status to acknowledge.
