Card Failed

card.failed — delivered when card issuance fails.

When it fires

The Issue Card endpoint returned status: PENDING, but the card network subsequently rejected
the request. The card will not become usable and no further events are sent for it.

To retry, issue a new card with a fresh externalId.

Payload

Envelope

Field	Type	Description
`eventId`	string	Unique per event. Deduplicate on this value
`eventType`	string	Always `card.failed`
`version`	string	Payload schema version. Additive changes do not bump it
`occurredAt`	string	When the event happened, not when it was delivered (ISO 8601)
`data`	object	The card, see below

`data`

Field	Type	Description
`cardNo`	string	PIK card number
`cardholderNo`	string	PIK cardholder number this card belongs to
`maskedCardNumber`	string	Empty when issuance failed before a card number was assigned
`expireMonthYear`	string	Empty when issuance failed
`status`	string	`FAILED` for this event
`cardLimit`	string	Cumulative spending ceiling that was requested
`availableLimit`	string	`0.00`
`currency`	string	Settlement currency
`label`	string	Your label for the card
`externalId`	string	Your own identifier
`createTimeUtc`	string	Creation time (UTC)

Example

{
  "eventId": "evt_01J9X8ZQ4T2M",
  "eventType": "card.failed",
  "version": "1.0",
  "occurredAt": "2026-08-11T10:16:44+08:00",
  "data": {
    "cardNo": "CD260811X9Y8Z7",
    "cardholderNo": "CH260811A1B2C3",
    "maskedCardNumber": "",
    "expireMonthYear": "",
    "status": "FAILED",
    "cardLimit": "500.00",
    "availableLimit": "0.00",
    "currency": "USD",
    "label": "Ads spend - Q3",
    "externalId": "card-req-4471",
    "createTimeUtc": "2026-08-11T02:16:02Z"
  }
}

Verifying the signature

Two headers accompany every delivery:

Header	Value
`x-pik-timestamp`	Unix timestamp in seconds
`x-pik-signature`	HMAC-SHA512 signature, lowercase hex

x-pik-signature = hex_lower( HMAC_SHA512( webhookSecret, rawBody + timestamp ) )

The signed content is the raw body concatenated with the timestamp, no separator.

Sign the raw bytes of the request body, before any JSON parsing.

Compare in constant time.

Reject deliveries whose x-pik-timestamp is more than 300 seconds from your clock.

Delivery

Return HTTP 200 within 5 seconds to acknowledge.

Failed deliveries are retried with exponential backoff: 10s, 1m, 5m, 30m, 2h, 6h, 24h.

Delivery is at least once — deduplicate on eventId.

Ordering is not guaranteed — use occurredAt to decide which version is newer.

See the Webhooks guide for verification code samples and recommended
handling.

Card Failed

When it fires#

Payload#

Envelope#

data#

Example#

Verifying the signature#