Unblock a card PIN

curl --request POST \
  --url https://api.lightspark.com/grid/2025-10-13/cards/{id}/pin/unblock \
  --header 'Authorization: Basic <encoded-value>'

const options = {method: 'POST', headers: {Authorization: 'Basic <encoded-value>'}};

fetch('https://api.lightspark.com/grid/2025-10-13/cards/{id}/pin/unblock', options)
  .then(res => res.json())
  .then(res => console.log(res))
  .catch(err => console.error(err));

val client = OkHttpClient()

val request = Request.Builder()
  .url("https://api.lightspark.com/grid/2025-10-13/cards/{id}/pin/unblock")
  .post(null)
  .addHeader("Authorization", "Basic <encoded-value>")
  .build()

val response = client.newCall(request).execute()

{
  "code": "UNAUTHORIZED",
  "reason": "<string>",
  "details": {}
}

{
  "code": "FORBIDDEN",
  "reason": "<string>",
  "details": {}
}

{
  "code": "TRANSACTION_NOT_FOUND",
  "reason": "<string>",
  "details": {}
}

{
  "code": "TRANSACTION_NOT_PENDING_PLATFORM_APPROVAL",
  "reason": "<string>",
  "details": {}
}

{
  "code": "GRID_SWITCH_ERROR",
  "reason": "<string>",
  "details": {}
}

{
  "code": "UNRECOGNIZED_MANDATORY_PAYEE_DATA_KEY",
  "reason": "<string>",
  "details": {}
}

Cards

Unblock a card PIN

Clear a BLOCKED PIN, restoring the cardholder’s existing PIN without changing it. A PIN blocks after three consecutive incorrect entries; until it is cleared, PIN-verified transactions decline.

Unblocking is idempotent and safe to call on a card whose pinStatus is already OK. It has no effect on a card with no PIN set, which returns 409 — set a PIN with POST /cards/{id}/set-pin instead.

Each card permits one unblock attempt per rolling seven days. Further attempts return 409 PIN_CHANGE_REQUIRED with details.pinUnblockAvailableAt. Change the PIN through either PIN-entry flow to recover sooner; changing the PIN does not reset the unblock allowance.

Only request an unblock after authenticating the cardholder and receiving their explicit request. Do not automatically unblock after a declined transaction.

Grid supports online PINs only. Offline PIN cards are not supported. Read GET /cards/{id} to check pinStatus.

Every call is audit-logged with the requesting actor.

POST

cards

{id}

unblock

Unblock a card PIN

curl --request POST \
  --url https://api.lightspark.com/grid/2025-10-13/cards/{id}/pin/unblock \
  --header 'Authorization: Basic <encoded-value>'

const options = {method: 'POST', headers: {Authorization: 'Basic <encoded-value>'}};

fetch('https://api.lightspark.com/grid/2025-10-13/cards/{id}/pin/unblock', options)
  .then(res => res.json())
  .then(res => console.log(res))
  .catch(err => console.error(err));

val client = OkHttpClient()

val request = Request.Builder()
  .url("https://api.lightspark.com/grid/2025-10-13/cards/{id}/pin/unblock")
  .post(null)
  .addHeader("Authorization", "Basic <encoded-value>")
  .build()

val response = client.newCall(request).execute()

{
  "code": "UNAUTHORIZED",
  "reason": "<string>",
  "details": {}
}

{
  "code": "FORBIDDEN",
  "reason": "<string>",
  "details": {}
}

{
  "code": "TRANSACTION_NOT_FOUND",
  "reason": "<string>",
  "details": {}
}

{
  "code": "TRANSACTION_NOT_PENDING_PLATFORM_APPROVAL",
  "reason": "<string>",
  "details": {}
}

{
  "code": "GRID_SWITCH_ERROR",
  "reason": "<string>",
  "details": {}
}

{
  "code": "UNRECOGNIZED_MANDATORY_PAYEE_DATA_KEY",
  "reason": "<string>",
  "details": {}
}

Authorizations

Authorization

string

header

required

API token authentication using format <api token id>:<api client secret>

Path Parameters

string

required

System-generated unique card identifier

Response

PIN unblock accepted; read GET /cards/{id} for its pinStatus.

Using the API

API documentation

Unblock a card PIN

Authorizations

Path Parameters

Response