Revision History


## Virtual Cards v1 Specification Revision History

This is a revision history noting significant changes to the Virtual Cards APIs.

| Date | API Version | Change Description | APIs Impacted |
|---|---|---|---|
| 2026-09-01 | 1.1.9 | Update TLS documentation to refer to the Chrome root store rather than the Mozilla CA Certification program. | all |
| 2025-10-22 | 1.1.8 | Add `bankWebsiteAccountSignupRequired` decline code. | retrieveVirtualCardNumber |
| 2025-05-01 | 1.1.7 | Add `unsupportedMerchant` decline code. | retrieveVirtualCardNumber |
| 2024-10-30 | 1.1.6 | Add clearer documentation around how to return multiple OTP phone number or email address options. | retrieveVirtualCardNumber |
| 2024-10-04 | 1.1.5 | Clarify wording around terms of service. | enroll |
| 2024-04-18 | 1.1.4 | Marking `merchantPlatform` in GetTransactionsResponse as optional | getTransactions |
| 2024-01-19 | 1.1.3 | Update GetTransaction docs about unknown enrollment/transactionListContinuationToken ID cases | getTransactions |
| 2023-12-21 | 1.1.2 | Clarify the Enroll ToS decline results are about externally managed acceptance | enroll |
| 2023-12-20 | 1.1.1 | Update documentation for `cardAccountClosed` and `cvn` fields. | enroll, retrieveVirtualCardNumber |
| 2023-09-29 | 1.1.0 | Deprecated `invalidCardDetails` and added `cardAccountClosed`, `panNoLongerValid`, `unknownPan`, and `incorrectExpiration` decline codes. | enroll |
| 2023-09-26 | 1.0.12 | Add retrieveVirtualCardNumber JSON request/response examples with challenges. | retrieveVirtualCardNumber |
| 2023-09-15 | 1.0.11 | Update example JSON requests and responses. | enroll, getTransactions, retrieveVirtualCardNumber, sendOtp |
| 2023-07-25 | 1.0.10 | Add additional info about enrollmentRequestId use cases. | Virtual Cards |
| 2023-07-10 | 1.0.9 | Clarify the stability of the hashed email address risk signal. | Virtual Cards |
| 2023-06-26 | 1.0.8 | Add email otp challenge. | Virtual Cards |
| 2023-05-18 | 1.0.7 | Add XID as card security code type for card security code challenge | Virtual Cards |
| 2023-05-05 | 1.0.6 | Add missing field length and regex info for some string fields. | Virtual Cards |
| 2023-02-10 | 1.0.5 | Adding Google TransactionEventNotification API | Virtual Cards |
| 2023-01-26 | 1.0.4 | Adding Payment integrator GetTransactions API | Virtual Cards |
| 2022-08-24 | 1.0.3 | Add card security code challenge. | Virtual Cards |
| 2022-07-01 | 1.0.2 | Update echo JSON example version numbers to match the rest of the spec. | echo |
| 2022-06-28 | 1.0.1 | Adding additional OTP decline signals. | Virtual Cards |
| 2022-06-28 | 1.0.0 | Finalizing the 1.0.0 spec version. | Virtual Cards |
| 2022-03-30 | 0.0.32 | Correct `cardAge` risk signal buckets and documentation. | Virtual Cards |
| 2022-03-14 | 0.0.31 | Adding `cardAge` and `numberOfBillingLastNames` risk signals. | Virtual Cards |
| 2022-02-07 | 0.0.30 | Marking `deviceRiskScore` as optional. | Virtual Cards |
| 2022-01-04 | 0.0.29 | Removing deprecated `deviceId` field. | Virtual Cards |
| 2021-12-13 | 0.0.28 | Clarifying valid characters for `challengeOptionId`. | Virtual Cards |
| 2021-10-28 | 0.0.27 | Renaming several fields for consistency with intent and the rest of the spec. |
| 2021-10-18 | 0.0.26 | Remove unused and unsupported `challengeRequired` response from `enroll` |
| 2021-09-29 | 0.0.25 | Move base path concept to host string on Overview pages. Add `basePath` field and drop `http` scheme from OpenAPI spec files. | Virtual Cards |
| 2021-09-24 | 0.0.24 | Cleanup: Remove deprecated fields, fix timestamp examples, fix doc typo. | Virtual Cards |
| 2021-09-22 | 0.0.23 | Add M1B risk signals. | Virtual Cards |
| 2021-09-20 | 0.0.22 | Renaming `fido` challenge option `platform_authenticated`. | Virtual Cards |
| 2021-09-17 | 0.0.21 | Update host documentation. | Google-hosted |
| 2021-08-25 | 0.0.20 | Add PIAID segment to POST URLs. | Google-hosted |
| 2021-08-11 | 0.0.19 | Removing an used field for card art. | Virtual Cards |
| 2021-08-11 | 0.0.18 | Updating `maskedPhoneNumber` format to four visible digits and clarifying the format of the OTP value. | Virtual Cards |
| 2021-08-11 | 0.0.17 | Renaming 'maxVerificationsAttempts' to 'maxVerificationAttempts'. | Virtual Cards |
| 2021-08-11 | 0.0.16 | Correcting the documentation for `maskedPhoneNumber`. | Virtual Cards |
| 2021-08-11 | 0.0.15 | Adding challenge support to RetrieveVirtualCardNumber. | Virtual Cards |
| 2021-08-11 | 0.0.14 | Adding SendOtp API. | Virtual Cards |
| 2021-07-20 | 0.0.13 | Update host documentation. | Virtual Cards |
| 2021-05-24 | 0.0.11 | Add decline reasons. | Virtual Cards |
| 2021-05-24 | 0.0.11 | Risk signals: deprecate `iphone` for `ios`. | Virtual Cards |
| 2021-05-19 | 0.0.10 | Fix typo. | Virtual Cards |
| 2021-05-18 | 0.0.9 | Added new risk signals, deprecated old ones. | Virtual Cards |
| 2021-05-05 | 0.0.8 | Moved devsite. | None |
| 2021-04-20 | 0.0.7 | Change `maskedEmailAddress` format examples. | Virtual Cards |
| 2021-04-20 | 0.0.6 | Add `merchantOrigin` to `MerchantDetails`. | Virtual Cards |
| 2021-04-19 | 0.0.5 | Fix typos in Terms of Service Acceptance. | Virtual Cards |
| 2021-04-16 | 0.0.4 | Add `deviceAccountAge` as a risk signal. | Virtual Cards |
| 2021-03-25 | 0.0.3 | Add M1 risk signals. | Virtual Cards |
| 2021-03-12 | 0.0.2 | Add `unenroll` API. | Virtual Cards |
| 2021-03-08 | 0.0.1 | Removed cvn from card object in `enroll` request. | Virtual Cards |