TabaPay Tokens

Store and manage bank accounts and payment cards.

TabaPay stores and manages payment cards and bank accounts securely for you.

For every payment card or bank account, TabaPay validates the incoming payment instrument and stores them as Account ID. This Account ID is what is provided back to you, so you do not have to manage the 16-digit payment card number or bank account. You will be able to create a payment using the Account ID with the Create Transaction API to push and pull funds.

In addition to storing these cards and bank accounts, TabaPay also updates the accounts using the Account Updater, which refreshes with the card networks.

You can also enable Duplicate Card Check to protect against fraudulent use of lost of stolen cards by rejecting the same card from being used under multiple accounts.

When in your flow should you create TabaPay Tokens (TabaPay Account ID)?
  1. First use Query Card to validate a card is in good standing.
  2. Use Create Account to create a TabaPay Token (accountID) for the card.
  3. The TabaPay token (accountID) can then be added to Create Transaction requests.

TabaPay Tokens (Create Account) Flow

The following workflows may appear right before a card payment or when adding payment info to your platform.

Card Accounts

  1. Customer initiates a card payment, or adds card payment info to your platform.
  2. You send Query Card API with ANI and AVS to verify the card information.
  3. TabaPay returns with API response with card details and eligibility for push, and pull.
  4. You send Create Account API request to add the card information.
  5. TabaPay returns with API response with accountID.
  6. You display relevant confirmation to your customer.

Bank Accounts

  1. Customer initiates a card payment, or adds card payment info to your platform.
  2. You send Query Bank API for any RTP, or FedNow (Coming Soon) payments.
  • Note: Query Bank is only needed for RTP, or FedNow transactions.
  1. TabaPay returns with API response with RTP account details.
  2. You send Create Account API request to add the bank account information.
  3. TabaPay returns with API response with accountID.
  4. You display relevant confirmation to your customer.

How TabaPay Tokens Work

Prerequisites

You should have access to Sandbox. To request access contact TabaPay Support or email [email protected].

General API Prerequisites

If you are using TabaPay Tokens for Source Account information, be sure to grab the accountID originally generated from Create Account.

Clients handling sensitive card data must comply with Payment Card Industry Data Security Standards (PCI-DSS).

Note: All requests should be in a compressed format.

⚠️

PCI Standards

Any client handling sensitive card information is required to meet a specified level of PCI DSS (Payment Card Industry Data Security Standards).

1. Create Account Request

Send the Create Account API request to create TabaPay Tokens.

{
  "card": {
    "accountNumber": "4111111111111111",
    "expirationDate": "202708"
  },
  "owner": {
    "name": {
      "company": "High Value Company",
      "first": "Test",
      "middle": "D",
      "last": "Name"
    },
    "address": {
      "line1": "123 Street",
      "city": "San Francisco",
      "state": "06",
      "zipcode": "94103",
      "country": "840"
    }
  },
  "referenceID": "Unique_refID123"
}
{
  "bank": {
    "routingNumber": "021000021",
    "accountNumber": "123456789",
    "accountType": "C"
  },
  "owner": {
    "name": {
      "first": "Owner",
      "middle": "Test",
      "last": "Name"
    },
    "address": {
      "line1": "123 Street",
      "city": "San Francisco",
      "state": "CA",
      "zipcode": "94103",
      "country": "840"
    }
  },
  "referenceID": "uniqueid123"
}

2. Create Account Response

For response field descriptions, refer to Create Transaction API Response.

{"SC":200,"EC":"0","accountID":"22CharTabaPayAccountID"}
{"SC":200,"EC":"0","accountID":"22CharacterBankTabaID1"}

Note: Each accountID is unique to one payment instrument.

3. Create Transaction Request

Use the Account ID to in a Create Transaction API request for both pull or push transactions.

Depending on whether you are performing a pull or push transaction, you will assign the Account ID to either the Source Account ID or Destination Account ID.

Note: When initiating the request, use only the Account ID. The request will fail if you include both payment account information (such as a payment card or bank account) and the Account ID in the same request.

For push transactions, use your SettlementAccountID. For pull transactions, you can use the AccountID of the customer's account.

{
    "accounts": {
        "sourceAccountID": "SettlementAccountID12345",
        "destinationAccountID": "CustomerAccountID123456"
    },
    "memo": "Payment to Bank Account B",
    "referenceID": "15character1234",
    "type": "push",
    "amount": "0.75"
}
{
  "accounts": {
        "sourceAccountID": "CustomerAccountID789012",
        "destinationAccountID": "SettlementAccountID12345"
    },
    "referenceID": "kdt0625a24",
    "type": "pull",
    "amount": "0.75",
}
Duplicate Card Checks with TabaPay Tokens

TabaPay offers checks against same PAN being used repeatedly under different accounts. Refer to Duplicate Card Check to understand how this works.

Get Started with some Code Samples!

A few samples to get you started!

Create Transaction with Accounts

Create Transaction API examples once you create your accountID.