Zero Auth

ℹ️
For clients using the API Cielo E-commerce solution.

What is Zero Auth?

Zero Auth is a Cielo tool that allows you to check if a card is valid for a purchase before the order is completed. Zero Auth simulates an authorization without affecting the credit limit or notifying the cardholder about the test.

What is the impact on my business?

Better conversion, since the merchant can create payments only if the card is valid;
Avoid card validation by sending transactions with a financial amount.

How to use Zero Auth?

Enable Zero Auth with E-commerce Support;
Send the Zero Auth request to validate the card.

Zero Auth is:

Recommended for one-time and recurring transactions;
Essential before storing cards in secure vaults (tokenize only valid cards).

What not to do?

When transactions with an amount different from zero and less than one dollar occur, followed by voiding the transaction, card brands will apply fees to Cielo, which will be passed on to merchants that are not compliant. For example, Mastercard is charging a fee of R$0.21 per transaction;
Zero Auth transactions are also subject to the rules defined in the card brands’ retry programs. Excessive attempts may result in fees. Read more at Card Brands Retry Program.

Important details

Zero Auth does not provide the available limit for the validated card and does not show card or cardholder details. It only simulates an authorization with a zero amount.
For better performance, it is important to provide the CVV.

Zero Auth validates open or tokenized cards (sending the CardToken created in the API Cielo E-commerce).

Supported card brands

Zero Auth supports Visa, Master, and Elo for both credit and debit cards.

If other card brands are sent, an error will occur with the message "57 - Invalid card brand".

🚧
Warning:
To enable Zero Auth, contact the Cielo support team.

Integration

To perform a Zero Auth query, the merchant must send a POST request to the API Cielo E-commerce, simulating a transaction.

Validating an open card requires a different technical contract than validating a tokenized card or an e-wallet. Check the request examples for validating card with Zero Auth.