Release Notes

2026

April 2026

New Outbound API:

• Visa B2B Payment Controls:
  • Client Outbound Events:
    • Push authentication request: Visa Commercial’s Virtual Card Authentication service transmits the authentication request to the Fintech, enabling them to initiate the authentication workflow with the end user through either one-time-password (OTP) verification or biometric authentication.
    • Push user-mapping response: Visa Commercial’s Virtual Card Authentication service will transmit the responses for user-mapping operations (create, read, update, and delete) for API calls in which the callback option has been enabled.
  • ACS Provider Outbound Events:
    • Push biometric result: Visa Commercial’s Virtual Card Authentication service will forward the biometric authentication result received from the Fintech to ACS provider, enabling them to continue the authentication process.
  • Availability: Public

New Inbound API:

• Visa Data Tokens:

  • Visa Cohorts APIs: Cohorts APIs are used for fetching the segment/cohort level data. Which included fetching the cohort metadata and the actual cohort/segment data at different levels.
    • POST Cohort queries: Queries cohort data based on the specified type and filters. Returns paginated results with configurable limit and offset
    • GET Cohorts metadata: Retrieves metadata information for available cohort types, including their descriptions and available filters
  • Availability: Restricted

• Visa Intelligent Commerce:

  • Visa Intelligent Commerce Agent APIs:
    • Consumer - Enroll Card: Partners can use the Enroll Card feature to register a Consumer's payment method in the VACP Platform and configure initial transaction settings. This process includes recording the Consumer's permission for enrollment, stored as assuranceData. If the consumer has also consented to the agent retrieving personalization signals during enrollment, this is recorded in the consentData field. The Enroll Card function is a backend API designed for secure server-to-server interactions.
    • Consumer - Initiate Purchase Instruction: The Initiate Purchase Instruction API enables consumers or partners to establish a transaction plan within the VACP Platform. This process records the Consumer's approval for the partner to use their Digital Card in a transaction, stored as assuranceData. It also allows for setting up consumer-defined restrictions and spending limits, also known as mandates. This API is designed for secure server-to-server communication, operating as a backend service.
    • Consumer - Update Purchase Instruction: The Update Purchase Instruction API enables consumers or partners to modify an existing transaction plan within the VACP Platform. This update process includes revising Digital Card details and adjusting consumer-defined restrictions and spending limits collectively referred to as mandates.
    • Consumer - Cancel Purchase Instruction: The Cancel Purchase Instruction API allows for the revocation of a previously established transaction plan.
    • Initiate Purchase and Get Payment Credentials: The Retrieve Payment Credentials API triggers the commencement of one or multiple transactions and retrieves the necessary payment credentials associated with the purchase(s).
    • Partner - Publish Transaction Event Notifications: The Confirmation API enables Partners or Participants to provide status updates and/or results for Instructions, Purchases, Orders, Shipping, and Payment Events (including Purchase Cancellations or Payment Authorizations).
  • Availability: Restricted

• Visa Offers Network:

  • Consent Service: Provides endpoints to manage user consents.
    • Create Consent: Create one or more consent records for a user. Supports multiple consent types in a single request.
    • Retrieve All Consent Status for a User: Retrieve all consent records for a specific user.
    • Retrieve a Specific Consent Status for a User: Retrieve a specific consent record for a user by consent type.
    • Delete a Specific Consent Record for a User: Delete a specific consent record for a user by consent type.
    • Remove All Consent for a User: Delete all consent records for a specific user (GDPR right to erasure).
  • Availability: Public

New Endpoint:

• Visa Direct Connect:

  • Notification API:
    • PayoutStatusNotification (Documentation only): The purpose of the API is to Enable Visa to provide updates of a payout transaction to the Originating Entity.
  • Availability: Public

• Visa Offers Network:

  • Offers Service:
    • Get and Filter Offers: Retrieves a paginated list of offers based on optional filters. Supports filtering by offer type, merchant name, and merchant category with pagination and sorting.
    • Update Offers: Updates existing merchants and offers in bulk. Allows modification of merchant details, offer details, or both. Merchants must exist before updating.
    • Delete Offer: Soft deletes a merchant and all associated offers by GOR Merchant ID (UUID). The merchant and offers are marked as inactive but remain in the system for historical tracking.
    • Get Offer by GOR Merchant ID: Retrieves a merchant and all associated offers by GOR's internal merchant ID (UUID format). Returns complete merchant details including offers, store locations, and identifiers.
  • Availability: Public

• Consumer Enrollment Service:

  • Get User Consents: Endpoint to get the consent status for a user.
  • Availability: Public

March 2026

Product Updates

New Endpoints:

• Click to Pay:

  • Secure Remote Commerce:
    • Checkout: The Checkout operation utilizes the Consumer chosen Digital Card and details of the current transaction to retrieve Payment Data and payment related data.
    • Initiate Identity Validation: The Initiate Identity Validation operation initiates a process to validate that a Consumer is in the possession of or has access to the Consumer Identity claimed.
    • Complete Identity Validation: The Complete Identity Validation operation determines whether data, provided by the Consumer as part of a second step of an identity validation process, is valid. It can also be used to check whether an out-of-band service was successful.
    • Identity Lookup: The Identity Lookup operation uses a provided consumer identity (email address or mobile phone number) to determine whether it is associated with an SRC profile.
  • Availability: Public

• Scan to Pay:

  • QR Transaction Status Enquiry: API to retrieve the QR transaction status.
  • Availability: Restricted

• B2B Virtual Account Payment Method:

  • Account Management Service:
    • Create offers under a Merchant: Creates or updates offers for existing merchants. The merchant must already exist in the system. This endpoint only accepts merchantId, merchantName, action, and offers fields.
    • Bulk Requisition Service: Unified endpoint for bulk virtual account operations. The action is determined by the 'action' field in the request body.
  • Availability: Public

February 2026

Product Updates

New Outbound APIs:

• B2B Virtual Account Payment Method:
  • Outbound Events:
    • Payment Expired: Payment Expired.
    • Requisition Details Updated: Requisition Details Updated.
    • Requisition Rule Updated: Requisition Rule Updated.
    • Payment Match Status Updated: Payment Match Status Updated.
    • Requisition Deleted: Requisition Deleted.
    • Requisition Expired: Requisition Expired.
    • Payment Canceled: Payment Canceled.
    • Bulk Requisition Status Updated: Bulk Requisition Status Updated.
  • Availability: Restricted

New Inbound APIs:

• Visa Receiver Directed Payouts:
  • Receiver Directed Payouts Alias Resolution:
    • Alias Resolve: This enables clients to check if an Alias or list of Aliases is available for Alias resolution.
    • Alias Inquiry: This enables clients to check if an Alias or list of Aliases is available for Alias resolution.
  • Receiver Directed Payouts Lifecycle Management:
    • Delete Payment Credential: Delete Payment Credential paymentcredential Id.
    • Get All Payment Credentials: Get all payment credentials by alias id.
    • Update Alias: Update Alias by Alias Id.
    • Get Alias Id from Value: Get Alias Id from Alias Value.
    • Get Alias: Get Alias by Alias Id.
    • Delete Alias: Delete Alias by Alias Id.
    • Update Payment Credential: Update Payment Credential by paymentcredential Id.
    • Get Payment Credential: Get payment credentials by paymentcredential Id.
  • Availability: Public

New Endpoints:

• Click to Pay:

  • SRC Passkey:
    • GSPA Checkout: The Checkout operation utilizes the Consumer’s chosen Digital Card and details of the current transaction to retrieve the payment related secure data. If present in the checkoutResponse attribute, the encryptedPayload or encryptedSignedPayload is encrypted according to JSON Web Encryption (JWE) specification RFC 7516 and the algorithm used for encryption is according to RFC 7518, Section 4.1.
  • Availability: Restricted

• Visa Offers Network:

  • Offers Service:
    • Create offers under a Merchant: Creates or updates offers for existing merchants. The merchant must already exist in the system. This endpoint only accepts merchantId, merchantName, action, and offers fields.
    • Update Offers for a Merchant: Updates existing offers for merchants. Use this endpoint to modify offer details, change offer status, or activate/deactivate offers.
    • Get Offers for a Specific Merchant: Retrieves all active offers associated with a specific merchant. Returns an array of offers with complete details including dates, discounts, and status.
    • Delete Offer for a Merchant: Soft deletes a specific offer by marking it as inactive. The offer record remains in the system but is no longer visible in active queries or available for customer use.
    • Create New Offers - Generic: Transforms the request payload based on client-specific mappings and forwards to /v1/offers. Requires X-GOR-CLIENT-ID header for client identification.
    • Update Offers - Generic: Transforms the request payload based on client-specific mappings and forwards to /v1/offers. Requires X-GOR-CLIENT-ID header for client identification.
  • Eligibility Service:
    • Get Segments By User ID: Returns segment details for the provided request parameters. Requires X-GOR-CLIENT-ID header for user enrollment validation.
    • Get Segments by Card ID: Returns segment details for the provided request parameters. Requires X-GOR-CLIENT-ID header for user enrollment validation.
    • Get Merchant Ranks by User ID: Returns merchantsRanks details for the provided request parameters.
    • Get Merchant Ranks by Card ID: Returns merchantsRanks details for the provided request parameters.
  • Payout Service:
    • Payout Request - Generic: Transforms the request payload based on client-specific mappings and forwards to /v1/payout. Requires X-GOR-CLIENT-ID header for client identification.
  • Ledger Service:
    • Ledger Add Event - Generic: Transforms the request payload based on client-specific mappings and forwards to /v1/event. Requires X-GOR-CLIENT-ID header for client identification.
  • Consumer Enrollment Service:
    • Consumer Enrollment Opt In - Generic: Transforms the request payload based on client-specific mappings and forwards to /v1/optIn. Requires X-GOR-CLIENT-ID header for client identification.
  • Availability: Restricted

• Visa Pilot Program Enablement:

  • QR Wrapper Service:
    • tranEnquiry: API provides services to retrieve Payment details for CYBS Flow.
  • Availability: Restricted

January 2026

Product Updates

New Product:

• Payment Account Tokenization: Payment Account Tokenization (PAT) is a Demand Deposit Account (DDA) tokenization solution following the same paradigm as a Token Service Provider, such as VTS. PAT substitutes a bank account number and replaces this with a surrogate value. This surrogate value is used for an RTP/ACH transaction. This enables banks to manage account payment risk exposure in several payment use cases (p2p, biller, RFP, open banking, wallets, etc.) by replacing account numbers with account tokens linked to attributes and token rules.

  • Availability: Public

• Visa Accounts Receivable Manager (Visa AR Manager): Visa Accounts Receivable Manager (Visa AR Manager) is designed to grow and maintain existing virtual card volume by automating the virtual card transaction process, addressing a significant pain point for B2B accepting merchants.

  • Availability: Public

New APIs:

• Visa Digital Wallet Enabler:

  • TR HCE API: TR HCE API
    • Get Keys: This message is used by the token requestor to request the keys from the TSP.
    • Get Provisioning Data: This message is used by the token requestor to fetch the provisioning data.
  • Availability: Public

• Visa Direct Connect:

  • Visa Direct Connect SDK: APIs for Visa Direct Connect SDK
    • Update Preferred Payment Credential: Update a payment credential as the preferred card.
  • Availability: Restricted

• Visa Id & Credential:

  • Batch Solution: Placeholder API for onboarding clients to VICA Batch solution.
    • Batch Enrollment and LCM Solution: Batch Enrollment and LCM Solution.
  • Availability: Restricted

• Visa Pilot Program Enablement:

  • VDCM Card Services: VDCM Card Services
    • Post Card Look Up: Post Card Look Up.
  • Availability: Restricted

• Visa Processing Performance Monitor:

  • DPS API: These APIs provide DPS transactions stats such as STIP and Declines.
    • Get Stip Statistics: Retrieve Stand-In Processing data summary.
    • Get Decline Statistics: Retrieve decline data summary.
  • Availability: Restricted

New Endpoints:

• Alias Directory Service:

  • Alias Resolution:
    • Alias Confirm: Retrieve information about an Alias and the payment credential(s) associated with the Alias. This will help confirm the identity of the person associated with the alias, ensuring secure and accurate transactions.
  • Availability: Public

• Visa Pilot Program Enablement:

  • QR Wrapper Service:
    • Enhanced Lookup: This Enhanced Lookup API is used by the wallets to get additional Merchant information by passing the scanned QR payload.
    • Refund Cybersource: Refund Cybersource API end point is used to void or refund the authorized transaction based on the time limit configured for each QR Connector.
    • Place Order: Place Order, hosts API end point to place the order to AliPay.
  • Availability: Restricted

Product Name Change:

• Visa AR Manager:
  • Changed product name to Visa Accounts Receivable Manager.