Token status & Account Lifecycle Management

Check the latest state of card credentials stored in the PCI Proxy vault.


By using Network Tokens, you no longer need to worry about declined authorizations due to expired or blocked card credentials.

In general, the PCI Proxy token is always up to date if a Network Token has been provisioned for the underlying card number. We automatically update the PCI Proxy or Network Token if anything changes on the underlying card number.

Call the Alias Status API to see the latest PAN expiry date or to check whether the status or the last 4 digits of the underlying PAN has changed. We also return the paymentAccountReference- a unique identifier returned directly by the card brands to detect the underlying PAN across various channels.

curl --request GET \
  --url '{alias}' \
  --header 'Authorization: Basic {basicAuth}'

will return

    "alias": "7LHXscqwAAEAAAGLgKAf-F9X1QGrAHsa",
    "fingerprint": "F-f5AcNienVUz735BKis71pD",
    "type": "CARD",
    "masked": "489537xxxxxx6386",
    "dateCreated": "2023-07-30T12:47:39Z",
    "card": {
        "panRemoved": false,
        "expiryMonth": "05",
        "expiryYear": "25",
        "cardInfo": {
            "brand": "VISA",
            "type": "debit",
            "usage": "consumer",
            "country": "US",
            "issuer": "U.S. REGION",
            "accountType": "PAN"
        "networkToken": {
            "expiryMonth": "05",
            "expiryYear": "25",
            "status": "ACTIVE",
            "paymentAccountReference": "V0010013020217426481676671969"
        "last4": "6386"
  "error": {
    "code": "ALIAS_NOT_FOUND"

If a networkToken object is present in the response, a Network Token has been successfully provisioned. If not, it means that the issuer does not yet support Network Tokens or the card is not enrolled for it. You can continue to use the PAN value mapped to the PCI Proxy token.

A Network Token can have the following pre-defined state:

ACTIVENetwork Token is activated and ready for use in downstream payment operations (e.g. authorisation, 3D-Secure attempt).
INACTIVENetwork Token has not yet been activated.
SUSPENDEDNetwork Token is suspended and can not be used for further interaction. It can be suspended by various sources such the cardholder, the card issuer or the token requestor.
DELETEDNetwork Token has been permanently deleted.