Update a customer's payment method
Update the attributes of a specific saved payment method for a customer.
Updating saved_for to customer is a one-way operation — you can't change it back to merchant.
Once updated, this payment method can no longer be used for merchant-initiated transactions (MIT), for example, to charge recurring payments. It can only be used when the customer is on the checkout page.
For more information, see:
Request
The ID of the Customer object.
The ID of the payment method.
Example: "Bearer sk_1234567890ABCdefGHIjklMNOpqrSTUvwxYZ_1234567890-Ab_cdeFGHijkLMNopq"
This parameter accepts the Merchant API Secret key to authorise requests coming from the merchant's backend.
It ensures that ensures that each request is authenticated and authorised by verifying the secret key. The secret key should be included in all request headers as a Bearer token.
For more information, see: Authentication
Possible values: [2024-09-01, 2025-10-16, 2025-12-04, 2026-03-12, 2026-04-20]
Example: "2026-04-20"
The version of the Merchant API, specified in YYYY-MM-DD format.
This endpoint is available from version 2024-09-01. If a version earlier than 2024-09-01 is provided, the endpoint returns a 404 response.
If not specified, you will receive an error.
For more information about API versioning, see: API versions.
Possible values: [customer]
Update the value of saved_for from merchant to customer.
Once updated, this payment method can no longer be used for merchant-initiated transactions (MIT). It can only be used when the customer is present on the checkout page.
| Value | Description |
|---|---|
customer | Restrict this payment method to customer-initiated transactions only. |
Response
OK
A saved card payment method.
The checks object (3DS, CVV, address verification) is not included as it is specific to the transactional payment context.
Unique identifier for the payment method.
Possible values: [card, revolut_pay, sepa_direct_debit]
The type of the payment method.
Possible values: [customer, merchant]
Indicates in which case this saved payment method can be used for payments.
| Value | Description |
|---|---|
customer | This payment method can be used only when the customer is on the checkout page. |
merchant | This payment method can be used without the customer being on the checkout page, and the merchant can initiate transactions, for example, to take payments for recurring transactions. |
The date and time the payment method was added.
The BIN (Bank Identification Number) of the payment card, typically the first 6-8 digits.
Possible length: >= 4 characters and <= 4 characters
The last four digits of the payment card number.
The expiry month of the payment card.
The expiry year of the payment card.
The name of the cardholder as it appears on the card.
Possible values: [visa, mastercard, american_express]
The brand of the payment card.
Possible values: [debit, credit, prepaid]
The funding type of the payment card.
The name of the card-issuing bank or institution.
Possible length: >= 2 characters and <= 2 characters
The ISO 3166-1 alpha-2 country code of the country where the payment card was issued.
The billing address associated with the payment method.
Possible length: <= 100 characters
Primary address line.
Possible length: <= 100 characters
Secondary address line, such as floor and apartment number.
Possible length: <= 100 characters
State or province of the address.
Possible length: <= 100 characters
City of the address.
Possible length: >= 2 characters and <= 2 characters
Pattern: Value must match regular expression ^[A-Z]{2}$
ISO 2-letter country code.
Possible length: <= 100 characters
Postal code of the address.