Skip to main content

ChangeLogs

All recent API updates and changes are listed here, ordered by release date.

📆 28 Jul 2026

New APIs — Physical Card Management​

Assign Physical Card​

Added: New API to assign a pre-issued physical card to an existing cardholder.

Details:

  • Links a physical card, identified by its card number, to an existing cardholder
  • Applicable to the Cards program, where physical cards cannot be created directly via the Create Card API

Reset Pin​

Added: New API to reset the PIN for a physical card.

Details:

  • Allows resetting the PIN for physical cards issued via the Assign Physical Card API
  • Applicable only to the Cards program

Note: These APIs are available only for supported program implementations and may not be enabled for all clients.

Updated — Create Card​

Updated: Description clarified to reflect program-specific behavior.

Details:

  • For the Cards program, this API supports only virtual card creation; physical cards must be issued via the Assign Physical Card API
  • For Cards under Banking, this API supports both virtual and physical card creation directly
  • Clarified that virtual cards are activated automatically upon creation, while physical cards require activation via the Activate Card API

Updated — Activate Card​

Updated: Description clarified to reflect program-specific behavior.

Details:

  • For the Cards program, this API activates physical cards issued via the Assign Physical Card API, and sets the card PIN as part of activation
  • For Cards under Banking, this API activates physical cards issued directly via the Create Card API

New Guide — Secure Iframe Guide​

Added: New guide for displaying sensitive card details (card number, expiry, CVV) or PIN in a PCI-compliant manner using a secure popup window or iframe.

Details:

  • Covers integration steps for both the Cards program and Cards under Banking, as each uses a different iframe integration method
  • Includes supported style selectors, session behavior, and error handling

📆 14 Jul 2026

New Program-Specific APIs — Wallet & KYC​

Create Wallet​

Added: New API to create a wallet for a cardholder.

Details:

  • Creates a new wallet linked to a cardholder
  • Returns wallet details upon successful creation

Get Wallet Details​

Added: New API to retrieve wallet information.

Details:

  • Returns wallet balance and status
  • Provides wallet-related information for a specific wallet

Wallet Transaction History​

Added: New API to retrieve wallet transaction history.

Details:

  • Returns wallet credit and debit transactions
  • Supports transaction tracking and reconciliation
  • Provides transaction details for reporting and auditing purposes

Get Cardholder KYC​

Added: New API to retrieve the current KYC status of a cardholder.

Details:

  • Returns the current KYC status
  • Provides a document submission link when KYC is pending
  • Helps clients track onboarding progress

Get RFI Details​

Added: New API to retrieve Request For Information (RFI) details for a cardholder.

Details:

  • Returns all pending RFI information
  • Enables clients to identify missing documents or information

Respond to RFI​

Added: New API to facilitate RFI response submission.

Details:

  • Returns a secure document submission link
  • Allows cardholders to upload requested documents

Note: These wallet and KYC APIs are available only for supported program implementations and may not be enabled for all clients.

New Program-Specific API — Load Card​

Load Card​

Added: Recharge / load funds to an existing card.

Details:

  • Supports funding of active cards
  • Enables balance top-ups and card reloads

Note: This API are available only for supported program implementations and may not be enabled for all clients.

📆 10 Mar 2026

Get All Webhooks​

Updated: Endpoint structure and response format have been updated.

What Changed

  • New endpoint:
GET {{baseUrl}}/getallwebhooks?program_code={{Shared ProductID By Zoqq}}
  • Deprecated endpoint:
{{baseUrl}}/zoqq/api/v1/webhook/getallwebhook
  • Response now returns webhook data inside a data array
  • Added event_description field in the response

Impact

Clients must migrate to the new endpoint and update response parsing logic.

Subscribe Webhook​

Updated: Endpoint, payload structure, and authentication requirements have changed.

What Changed

  • New endpoint:
POST {{baseUrl}}/api/subscribe
  • Deprecated endpoint:
{{baseUrl}}/zoqq/api/v1/webhook/subscribe
  • Added required field:
{
  "sender_email": "user@example.com"
}
  • Added optional field:
{
  "updated_by": "admin"
}

  • subscription_type now supports:

    • w = Webhook
    • n = Notification

  • x-api-key must now be passed in the request body

Impact

Existing integrations must update their request payloads and endpoint URLs.

Update Webhook​

Updated: Endpoint, method type, and payload requirements have changed.

What Changed

  • New endpoint:
PATCH {{baseUrl}}/api/subscribe
  • Deprecated endpoint:
PUT {{baseUrl}}/zoqq/api/v1/webhook/update
  • HTTP method changed:
PUT → PATCH
  • New required fields:
{
  "subscription_type": "w",
  "agent_code": "AG001",
  "subagent_code": "SUB001",
  "program_code": "PROGRAM001",
  "company_code": "COMP001",
  "created_by": "admin",
  "updated_by": "admin",
  "x-api-key": "apikey"
}

Impact

Requests using the old payload structure will fail validation.

Delete Webhook​

Updated: Endpoint and payload requirements have changed.

What Changed

  • New endpoint:
DELETE {{baseUrl}}/api/subscribe
  • Deprecated endpoint:
DELETE {{baseUrl}}/zoqq/api/v1/webhook/delete
  • New required fields:
{
  "subscription_type": "w",
  "agent_code": "AG001",
  "subagent_code": "SUB001",
  "program_code": "PROGRAM001",
  "company_code": "COMP001",
  "created_by": "admin",
  "webhook_url": "https://example.com/webhook",
  "updated_by": "admin"
}

Impact

Old delete request payloads are no longer supported.

Get Card Limit API Removed​

Removed: Standalone Card Limit API.

What Changed

Card limit information is now available through the Get Card Details API.

Available Through Get Card Details

  • Purchase transaction limits
  • Cash withdrawal limits
  • Remaining purchase limit
  • Remaining withdrawal limit

Impact

Clients must migrate to Get Card Details to retrieve card limit information.

New API — Card Simulation​

Card Simulation​

Added: Card transaction simulation capabilities.

Details

  • Simulate authorization events
  • Simulate processing events
  • Simulate settlement events
  • Test transaction workflows before production go-live

📆 22 Jan 2026

Create Account​

Updated: Account type validation has changed.

What Changed

Only the following value is supported:

virtual_account

Unsupported values:

wallet_account
global_account

Error Returned

Invalid account type. Must be: virtual_account

Impact

All integrations must use virtual_account.

Close Account​

Updated: x-account-id header is now mandatory.

What Changed

Required header:

x-account-id

Error Returned

x-account-id is a required header and is missing

Impact

Requests without x-account-id will fail.

Create Cardholder​

Updated: Corrected endpoint path.

What Changed

Correct endpoint:

POST {{baseUrl}}/zoqq/api/v1/card/cardholder

Deprecated endpoint:

{{baseUrl}}/zoqq/api/v1/cardHolders

Impact

Clients using the old path will receive a 404 error.

Get All Cardholders​

Updated: Corrected endpoint path.

What Changed

Correct endpoint:

GET {{baseUrl}}/zoqq/api/v1/card/cardholder

Deprecated endpoint:

{{baseUrl}}/zoqq/api/v1/cardHolders

Impact

Clients must update integrations to use the corrected GET endpoint.

Activate Card​

Updated: Card ID must now be passed as a query parameter.

What Changed

Correct endpoint:

POST {{baseUrl}}/zoqq/api/v1/card/activate?id={{CardID}}
  • Request body is no longer required
  • Card ID must be supplied in the URL

Error Returned

id is a required parameter and is missing

Impact

Requests without the query parameter will fail.

Update Card​

Updated: Card ID moved to query parameter.

What Changed

Correct endpoint:

PATCH {{baseUrl}}/zoqq/api/v1/card?id={{CardID}}

Added request field:

{
  "updated_by": "admin"
}

Error Returned

id is a required parameter and is missing

Impact

Clients must update both URL and request payload.

Update Cardholder​

Updated: Cardholder ID moved to URL.

What Changed

Correct endpoint:

PATCH {{baseUrl}}/zoqq/api/v1/card/cardholder?id={{CardholderID}}
  • updated_by supported
  • updated_at supported
  • ID is no longer passed in request body

Impact

Requests without the URL parameter may result in 404 errors.

Get Card Transactions​

Updated: Card ID must be passed through the URL.

What Changed

Correct endpoint:

GET {{baseUrl}}/zoqq/api/v1/card/transaction?id={{CardID}}
  • Card ID is no longer supplied in the request body
  • Request body must remain empty

Impact

Clients must update integrations accordingly.

New APIs — Cards​

Cardholder Details​

Added: Retrieve complete information for a cardholder.

Delete Cardholder​

Added: Delete an existing cardholder.

Get All Cards by Cardholder ID​

Added: Retrieve all cards linked to a cardholder.

New API — Foreign Exchange​

Current Rate​

Added: Retrieve current FX rates.

Details​

  • Returns latest exchange rates
  • Supports currency pair lookups

API Playground​

Added: Interactive API testing for all endpoints.

Benefits​

  • Real-time request execution
  • Immediate response visibility
  • Faster integration testing
  • Simplified debugging
  • Sandbox validation support

📆 20 Dec 2025

Authentication API​

Updated: Added mandatory email field and simplified authentication headers.

What Changed

  • email is now required
  • Removed x-client-id
  • Only x-api-key is required

New Request

curl --location --request POST \
--url '{{baseUrl}}/api/v1/authentication/login' \
--header 'x-api-key: {{Shared X-API key By Zoqq}}' \
--header 'Content-Type: application/json' \
--data-raw '{
    "client_key": "{{ClientID}}",
    "client_secret": "{{ClientSecret}}",
    "email": "test@email.com"
}'

Old Request (Deprecated)

curl --location --request POST '{{baseUrl}}/api/v1/authentication/login' \
--header 'x-client-id: Shared By Zoqq' \
--header 'x-api-key: Shared By Zoqq' \
--data-raw '{
  "client_key":"key",
  "client_secret":"key"
}'

Impact

Clients must include the email field and remove the deprecated header.

Update Account API Removed​

Removed: Update Account API.

Reason

This API was previously used only to update account labels and is no longer required in the current workflow.

Previous Requirement

Required header:

x-account-id

Error returned:

x-account-id is a required header and is missing

Impact

Existing integrations using this endpoint must remove it from their implementation.

Future Consideration

This API may be reintroduced if broader account update functionality is required.

📆 27 Aug 2025

New APIs — Payout​

Get Beneficiary by ID​

Retrieves beneficiary details using a unique beneficiary identifier.

Delete Beneficiary​

Deletes an existing beneficiary using the Beneficiary ID.

Get Payout Status​

Checks the current status of a payout transaction.

Cancel Payout​

Cancels an initiated payout if cancellation is still permitted.

Scheduled Payout List​

Retrieves all scheduled payouts for an account.

New API — Webhook​

Retrieve Subscribed Webhook​

Retrieves all currently subscribed webhooks associated with the account.