Introduction

This article provides instructions for merchants and partners on how to request Full Primary Account Number (PAN) Response for use with Cybersource’s Token Management Service (TMS), Payment Tokenization, or Recurring Billing. It also outlines the steps to securely retrieve unmasked PAN data via API after enablement.

Procedure

1. Requesting Full PAN Response

Follow these steps to enable Full PAN Response for your organization:

Step	Action	Details
1	Obtain the Request Form	Contact Client Services or submit a support case to obtain the correct request form for your platform (Cybersource or Visa Acceptance Platform). This ensures you receive the appropriate form for your account.
2	Submit Your Request	Complete the provided form. Only an account administrator may submit the formal request. Attach the completed form and open a support case with Cybersource Support. For instructions, see Support - Support Case Management . Specify the relevant merchant, vault, Organization ID, or portfolio Organization ID as applicable.
3	Approval Process	Visa’s Legal team will review your request. You will be notified once your request is approved and Full PAN Response is enabled for your account. Enablement may take up to one week after approval.

2. Retrieving Full PAN Data via REST API

Once Full PAN Response is enabled, you can retrieve unmasked PAN data using the Token Management Service REST API.

Requirements

Message-Level Encryption (MLE): Register an MLE security key for your Cybersource merchant account in the Enterprise Business Center (EBC).
For setup instructions, see the TMS REST API Developer Guide (pages 64–67) .

Steps

Step	Action	Details
1	Make the API Request	Use the “Retrieve an Instrument Identifier” or “Retrieve Payment Instrument” endpoints. Add the following header to your API request: `Accept: application/jose` See Developer Guide, page 97 for more details.
2	Handle the Response	The API will return an encrypted JWT containing the unmasked PAN data. Decrypt the JWT using the private key associated with your MLE key to access the full API JSON response, including the unmasked PAN.

Additional Information

For portfolio-level payment information decryption, integration with Meta Key and MLE is required.
Beginning April 2025, microform will support gateway-agnostic unmasked payment information retrieval for external processing, with MLE required for secure transfer.

For further assistance, please contact Client Services.

Was this article helpful?

Articles Recommended for You