Real-Time Loon is a real-time account updater service for card-on-file (COF) account information. With Real-Time Loon, you can securely update your customers’ payment card account information at the time of a transaction and avoid declines caused by account lifecycle events (e.g. expirations, reissuances, etc.). A Real-Time Loon request is for a single card per request. At this time, Real-Time Loon provides account updater support for Visa and Mastercard only.

This guide outlines the following Real-Time Loon processes, from registration to receiving your first update:

1. Request access to Loon.
2. Register your business with the card brands.
3. Authenticate and Encrypt with Loon.
4. Submit a Card Inquiry in real-time upon a transaction decline or a vault update.
5. Check response of the inquiry, if new data is available update vault or retry transaction.

Request Access

Contact us if you’re interested in Real-Time Loon. Once onboarded, you'll have access to our Loon Service Panel.

Register With Card Brands

Before you can start requesting and receiving updated card details from the card brands, Pagos must first register your business with Visa and Mastercard. Pagos will work with you directly to collect the necessary business details and complete this registration process. This process is mandatory and required by each card brand.

You can check the status of your enrollment on the Card Brand page in your Loon Service Panel.

Authenticating and Encrypting

To ensure only authorized entities can access our services, we authenticate the identity of each client that submits requests to Real-Time Loon services. Similarly, we require you to encrypt any customer account details before sending requests to Real-Time Loon. Learn more in our authentication and encryption guides.

To locate your API keys in the Loon Service Panel:

1. Log into your Loon account.
2. Click Developers in the main navigation.
3. Click Create API Key.
4. Save the Client Key and Private Key in your secure place for future reference.

🚧

Important

This is the only time you can view this Private Key.

You can navigate to the Developers page at any time to review, add, or deactivate API keys as needed.

Submit a Card Inquiry

You can submit card inquiries to Real-Time Loon on POST: /inquiry

📘

Note

There is only one account per request

Request JSON Fields

Inquiry Request

The inquiry request includes the following request JSON fields:

Account Request

The account request includes the following request JSON fields:

Example Request

// The account object in plain-text (before encryption)
{
  "accountNumber": "4025000000001002",
  "expiryYear": "2024",
  "expiryMonth": "09",
  "metadata": "51032475-bc83-46d8-8768-15e129f3c6e0"
}

// The request object (using JWT Token)
{
  "requestId": "5f954e17-27c2-46d5-b0ed-f28149267500",
  "network": "visa",
  "accountEncrypted": "erL...mY",
  "subMerchantId": null
}

Check the Inquiry Response

After you submit a successful inquiry to Real-Time Loon, you’ll receive an encrypted response. You can decrypt the response using your ResponseDecryptionKey. See our Real-Time Loon Encryption guide for a full example.

Response JSON Fields

Inquiry Response

The inquiry Response includes the following request JSON fields:

Account Response

The account response includes the following request JSON fields:

Example Request

// The request object
{
  "code": 200,
  "requestId": "8b764b09-5e2d-4562-8a74-6d04fbf574cd",
  "accountEncrypted": "erL...mY"
}
// The account object in plain-text (after decryption)
{
  "accountNumber": "4025000000001002",
  "expiryYear": "2024",
  "expiryMonth": "09",
  "newAccountNumber": "4025000000001102",
  "newExpiryYear": null,
  "newExpiryMonth": null,
  "responseCode": "LAE",
  "errorCode": null,
  "metadata": "51032475-bc83-46d8-8768-15e129f3c6e0"
}