Zero Auth

ℹ️

Go to the API Reference to access the complete request and response examples..

What is Zero Auth?

Zero Auth is a Cielo tool that allows you to check if a card is valid for making a purchase before the order is completed. Zero Auth simulates an authorization without affecting the credit limit or alerting the cardholder about the test.

What is the impact on my business?

• Better conversion, since the merchant can create payments only if the card is valid;
• Avoid card validation by sending transactions with a financial amount.

How to use Zero Auth?

1. Enable Zero Auth with E-commerce Support;
2. Send the Zero Auth request to validate the card.

ℹ️

Important

If the request returns error 389 – Registration Restriction, contact the commercial manager to check if the service is correctly enabled; if it is, the response indicates that this attempt cannot be validated due to Cielo's internal criteria. We recommend trying another card to complete the validation.

Zero Auth is:

• Recommended for single and recurring transactions;
• Essential before storing cards in secure vaults (tokenize only valid cards).

What not to do?

• If transactions with an amount different from zero and less than one dollar occur, followed by voiding the transaction, the card brands will apply fees to Cielo, which will be passed on to merchants that are not compliant. For example, Mastercard is charging a fee of R$ 0.21 per transaction;
• Zero Auth transactions are also subject to the rules defined in the card brands' retry programs. Excessive attempts may result in fees. Read more at Card Brand Retry Program.

Important details

• Zero Auth does not provide the available limit for the validated card and does not display the card or cardholder characteristics, it only simulates an authorization with a zero amount;
• For better performance, it is important to provide the CVV.

ZeroAuth validates open or tokenized cards (sending the CardToken created in the API Cielo E-commerce).

Supported card brands

Zero Auth supports Visa, Master, and Elo card brands for both credit and debit cards.

If other card brands are sent, an error will be returned: "57-Invalid card brand".

⚠️

Attention:

The service is subject to commercial conditions and may incur additional costs. To activate or deactivate Zero Auth, contact the Cielo support team.

Integration

To perform a Zero Auth query, the merchant must send a POST request to the Cielo E-commerce API, simulating a transaction.

The validation of an open card requires a different technical contract from the validation of a tokenized card or e-wallet. Check the request examples for Validate card with Zero Auth.