Log inGet started
Airwallex logo
Home
Online Payments
Treasury
Transactional FX
Payouts
Issuing
Scale
Open Banking
Developer Tools
API Reference
Home
Issuing
Overview
Issuing Use Cases
Controls
Authorisation Controls
Merchant Category Codes

Authorisation Controls

You can specify how and where the cards you issue may be used, these rules are called Authorisation Controls. Authorisation Controls are specified when a new card is requested API but can also be updated later on.

Airwallex Issuing offers the following types of Authorisation Controls:

  1. Currency based controls
  2. Merchant based controls
  3. Transaction based controls
  4. Time based controls
  5. Remote Authorisation

Sample Request

You can modify your Authorisation Controls anytime after your card is requested.

  1. allowed_currencies: If it is absent from request payload, then ALL transaction currencies will be allowed.
  2. allowed_merchant_categories: If it is absent from request payload, then ALL merchant categories will be allowed.
  3. allowed_transaction_count: Specifies whether this card is a SINGLE or MULTIPLE use card when your card is created and CANNOT be modified once requested.
  4. transaction_limits: Transaction limits for the card. Multiple transaction limits can be configured based on single currency.
  5. active_from and active_to: Specifies the activity range of the card. Authorizations before and after to the active_from/active_to timestamp respectively will be rejected
curl --request POST \
--url 'https://pci-api-demo.airwallex.com/api/v1/issuing/cards/6c2dc266-09ad-4235-b61a-767c7cd6d6ea/update' \
--header 'Content-Type: application/json' \
--header 'Authorization: Bearer eyJhbGciOiJIUzI1NiJ9.eyJzdWIiOiJ0b20iLCJyb2xlcyI6WyJ1c2VyIl0sImlhdCI6MTQ4ODQxNTI1NywiZXhwIjoxNDg4NDE1MjY3fQ.UHqau03y5kEk5lFbTp7J4a-U6LXsfxIVNEsux85hj-Q' \
--data '{ \
  "authorization_controls": { \
    "active_from": "2018-10-31T00:00:00+0800", \
    "active_to": "2018-10-31T00:00:00+0800", \
    "allowed_currencies": [ \
      "USD", \
      "AUD" \
    ], \
    "allowed_merchant_categories": [ \
      "7531", \
      "7534" \
    ], \
    "allowed_transaction_count": "SINGLE", \
    "transaction_limits": { \
      "currency": "USD", \
      "limits": [ \
        { \
          "amount": 1000, \
          "interval": "PER_TRANSACTION" \
        } \
      ] \
    } \
  }, \'

Control Management in WebApp

To modify the Authorisation Controls in WebApp, go to click "Edit card" (see Create a Card in WebApp).

Remote Authorisation Controls

We also offer an advanced authorisation controls by sending authorisation request to your endpoint and you can determine Authorised/Declined based on the authorisation itself. For more infomation please refer to Remote Authorisation Controls