| Environment | Method | Endpoint |
|---|---|---|
| Sandbox | post | https://apisandbox.braspag.com.br/v2/verifycard |
| Production | post | https://api.braspag.com.br/v2/verifycard |
In the request to VerifyCard, you will send the Provider along with the card data (number or card token).
In the response, the Zero Auth verification will be displayed in the Status, ProviderReturnCode, and ProviderReturnMessage properties. The return of the BIN Query (card characteristics) will be in the properties of the BinData node.
Card brands available per acquirer in Zero Auth:
- Cielo: Visa, Master, Elo and Dinners*;
- Getnet: Visa, Master, Elo and Amex;
- Rede: Visa, Master and Elo.
*Available starting October 2026.
Zero Auth StatusThe result of the card validation will be displayed in the Status field; check the possible values:
“0” - Zero Auth query failed
“1” - Zero Auth query successful
“99” - Query successful, but the card status is inconclusive
For more details about the return codes, refer to the VerifyCard in Sandbox.
For the Rede2 provider, the response will return theBrandTransactionId, which is the identifier of recurring transactions with the flags at the Rede acquirer.
ImportantIf the API returns error 389 – Registration Restriction, contact the commercial manager to check if the service is correctly enabled; if it is, the response indicates that this attempt cannot be validated due to Cielo's internal criteria. We recommend trying another card to complete the validation.
Tokenized Visa Card Verification TransactionsStarting on 04/17/2026, it will be required to send the cryptogram in card verification transactions using tokenization with the Visa card brand:
- Send the DPAN (token) in the
Card.CardNumberfield;- Send the cryptogram in the
Card.SecurityCodefield.Exclusive for the Cielo acquirer.
TLID Mastercard
The Transaction Link Identifier (TLID), sent and returned in the TransactionLinkId field, is a unique identifier generated by the Mastercard card brand during a CIT, used to link related MITs. The TLID applies to the VerifyCard response (response only) and to credit, debit, and recurring transactions.
For Mastercard, send IssuerTransactionId and TransactionLinkId together in MITs: both parameters are mandatory.
| Phase | Description |
|---|---|
| Phase 1 | Current. The TransactionLinkId field is available in the responses of VerifyCard by card number, credit card payment creation, debit card payment creation, and in the query by PaymentId. |
| Phase 2 | Required inclusion of the TransactionLinkId in the request (MIT) starting Oct 23, 2026. |
Scheduled recurrence: in subsequent transactions, the
IssuerTransactionIdandTransactionLinkIdfields are sent automatically.
The TransactionLinkId sent in the request must have exactly 22 characters (A-Z, a-z, 0-9, hyphen, and underscore). If the value is outside this format, Cielo ignores it without returning an error. When Cielo sends the TLID to the card brand, the response also includes SentTransactionLinkId, with the value that was sent. The VerifyCard request does not accept the field.
See more details in Brand identifiers for Cielo acquirer.