Skip to main content

Version 3.56.1

· 2 min read

Indication if a card is currently blocked in upcoming expiry webhook

Weavr sends Card notification webhooks to inform you of events related to the upcoming renewal and expiry of a card, so that you can ensure that the desired action takes place upon renewal or expiry: Card expiry and renewal

This includes for cards that are blocked, since the customer may still wish the card to be unblocked and renewed.

The webhook that provides advance reminders of expiring cards now includes detail of the card’s current blocked status.

If a card that is currently blocked is expiring, the End Customer cardholder, via the Embedder, can choose to let the blocked card expire without renewal, or can choose to renew the card and keep it in blocked state until any future action to unblock it. The only exception to this is where the reason a card is blocked is because it is “Lost”, in which case it cannot be renewed: instead, a new card would have been created at the time it was reported lost.

Additional webhook update when tracking is added to dispatched card

Weavr sends a Card notification webhook to inform you of events related to the upgrade of a virtual card to a physical card, including when a card has been dispatched: Card upgrade to physical details

Now, if a tracking code is received from our fulfilment centre after the original dispatched webhook, Weavr will send you an additional “Card upgrade to physical details” message with the manufacturingState still in DISPATCHED and containing the deliveryTrackingCode.

New bulk operations: Block/unblock/remove Card

End-customer businesses (i.e. Corporates) often have to perform certain actions in bulk or batches. Weavr has inbuilt support for operations in bulk, currently available in Beta, that can be managed as part of a Bulk Process for (and authorised by) a specific Corporate Identity.

Weavr has added three new operations related to the management of Cards that can be performed in bulk:

POST /bulks/managed_cards/{id}/block

POST /bulks/managed_cards/{id}/unblock

POST /bulks/managed_cards/{id}/remove


Version 3.56.0

· 2 min read

New webhook notification when the state of a card changes

Card webhook notifications inform you of events that happen in relation to payment cards of End Customers.

We have added a new webhook that is sent whenever one of the following events occurs:

  • Activate a physical card
  • Remove a managed card
  • Report a physical card as lost
  • Report a physical card as stolen
  • Card has expired
  • Block a managed card
  • Unblock a managed card The API documentation on the /managed_cards/state_change/watch webhook is found here: https://weavr-webhooks-api.redoc.ly/#tag/Managed-Cards

Improvements to the Incoming Wire Transfer simulator

Developers and QA engineers in your team can use our simulator features to test various payment actions, including Incoming Wire Transfers (IWTs). In the simulator area of the Embedder Portal (in Sandbox mode) we provide screens to simulate the receipt of an IWT - i.e. a wire transfer payment from an external source to an internal Managed Account. 2024.12.05 We have now enhanced the simulations to reflect more real-world details about how these transactions are processed in Weavr programmes, in particular to construct the details of a simulated IWT in the different available payment rails of SEPA, [UK] Faster Payments, and SWIFT.

WEB

WEB

WEB

As shown above, testers can simulate IWTs with specific sender information. (Which IWT methods are actually available in production depends on the scope of each embedded finance programme.)

Because IWTs are treated differently in UK programmes, we will also provide for simulating the following:

Simulate IWT by Account ID

It is also possible to simulate an IWT using Account ID. This is a quick and easy way to put funds on a Managed Account, that you may need for testing elsewhere. This method skips some of the steps when processing IWTs.

Note: IWT simulation features are also available via our Simulator API. If your engineering/QA team need support with either the GUI or API-based Simulator, we will be happy to support you via the normal channels.


Version 3.55.0

· 3 min read

Linked Accounts - further details for End Customer support

Embedder staff can find a list of all of a (Corporate) End Customer’s Linked Accounts in the Embedder Portal. In this interface we have added to the information panel to include the sort code and account number of the external account, to be used by Embedder staff for supporting End Customers with any queries.

WEB

We have also added a new data dashboard in the Embedder Portal to support the review and analysis of Linked Accounts. This shows Embedder staff key metrics to help with proactive troubleshooting of End Customer Linked Account setup processes:

WEB

The Linked Accounts data dashboard also features a funnel chart that visualises the Linked Account setup journey, showing the various steps which have to be completed.

Additionally, we have updated the SCA Events dashboard to include Linked Account IDs within the Details table for more comprehensive tracking.

You can find out more about Linked Accounts in our documentation here.

Data insights on Micro-enterprises

Programmes onboarding and servicing UK Corporates are required to track whether the End Customer business is a Micro-enterprise. We have added a new filter and charts to the Corporates data insights dashboard in the Embedder Portal to help Embedder staff manage Micro-enterprises in their programme, if applicable.

Filter Managed Cards by renewal type

Weavr offers two options in regards to renewal when a card reaches expiry: RENEW and NO_RENEW. For more information see the Card Renewals section in our documentation.

We have added renewalType as an option on the GET Managed Cards endpoint to allow you to filter the results by cards that are set to either RENEW or NO_RENEW.

Effected endpoint: GET /managed_cards

Webhooks for more granular KYC/KYB status changes

We have enhanced existing webhook functionality for tracking KYC and KYB process states to include webhooks when additional information is required at a certain step, so that the application cannot proceed until something is added or revised.

Weavr will now send webhooks at all of these stages: initiation, pending review, temporary rejection (indicated by an ‘Initiated’ status), and approval or rejection.

In the details passed with the webhook, we may supply a rejection reason (e.g. CorporateKybFailureReason - see API documentation) and there may be a customer-specific message from the support agent.

Affected webhooks:

Prevention of duplicate Consumer Identity creation

We are strengthening controls to ensure that an individual can only be added once per programme, when creating a Consumer Identity.

If an attempt is made by the Embedder to create a new Consumer, and Weavr considers it’s a probable duplicate within that programme, we will reject with a new error code 409 CONSUMER_ALREADY_EXISTS


Version 3.55.0

· 2 min read

Simulate card purchases in multiple currencies in Sandbox + clarified display of currencies

As a developer experimenting with the Weavr system for the first time, or working within a live programme to prototype and test your application against our API, you’ll want to simulate purchases on fake payment cards you’ve set up. You can do this in the Simulator accessed through the Embedder Portal:

WEB

Simulated card purchases are also available through the Simulator API here: https://weavr-simulator-api.redoc.ly/tag/Cards#operation/cards_card_id_purchase

Both methods now allow you to simulate purchases in any currency (using any ISO-4217 symbol). Assuming the currency of a card is in EUR or GBP, and a simulated card purchase is in some other currency, a built-in (approximate) currency conversion will be used.

As part of a path to support a wider range of currencies in card purchases, spend control rules, statements, analytics and so on, we have changed the display of all currencies in the Embedder Portal to be in a 3-letter ISO-4217 style (e.g. GBP, EUR instead of £, €).

Deprecation of Google Play SafetyNet Attestation

Google announced in 2022 that it is deprecating SafetyNet Attestation and the deadline for adoption of the new alternative, Play Integrity API is 31 January 2025. This affects Embedders using our biometrics solution in their mobile apps, requiring integrating an updated solution. As part of the update, developers on affected programmes will need to obtain an Integrity Checks API server key from Google Cloud and provide to Weavr for use in the Biometrics Authentication SDK.

This is one of several changes we are making in our mobile SDK from this month, and Weavr will reach out to affected programmes to discuss development and testing of updated solutions ahead of the deadline.


Version 3.55.0

· 5 min read
Kristina Gauci

Two-step login flow for Embedder Portal

We have updated the login flow for the Weavr Embedder Portal to ask for the user’s email to be submitted first, and then the password in a second step. WEB

Weavr Embedder Portal production first login screen 2024 10 This is part of the rollout of single-sign-on (SSO) for the Embedder Portal: if this is of interest in your programme, please contact your Account Manager or Support.

This applies only to the production instance of the Embedder Portal, not to the Sandbox instance.

Track physical payment card fulfilment status via webhooks

We are introducing a new webhook event to help Embedder systems track End Customer card orders and thus convey status changes around the fulfilment to the End Customers.

We recommend proactively keeping End Customer users updated, such as an employee due to receive a card, and a manager who placed the order for the employee to receive a card.

Please review the API documentation for this feature here: https://weavr-webhooks-api.redoc.ly/#operation/managed_cards_physical_cards_upgrade_watch

Webhooks are sent for each fulfilment status change (in the API known as the manufacturingState), as follows:

  • REQUESTED: Fulfilment of a physical card order has started.
  • SENT_FOR_FULFILLMENT: Printing and packaging is in progress.
  • DISPATCHED: The card is in the postal or courier system.
  • DELIVERED: The card has been activated.

If webhooks are enabled and configured, Embedder operational and support staff can review recent webhook events in the Embedder Portal via the Webhook Logs page: WEB

Payment card expiry details added in Embedder Portal

In a previous release [https://docs.weavr.io/blog/2024/02/27/v3.48/#new-feature-payment-card-renewals], Weavr added features to facilitate automatic renewal of expiring payment cards.

To help Embedder programme operations teams support End Customers with their payment cards, we’ve added renewal information to the Managed Cards dashboard in the Data Insights section of the Embedder Portal.

The following details are now shown as columns in the report tables:

  • Expiry Date - indicating when a Managed Card is set to expire;
  • Next Renewal Date - indicating when an automatic renewal process would commence, if it is set to renew.

Cards which are set NO_RENEW will still have a “Next Renewal Date”, which can be understood as the deadline for being able to change its setting to RENEW, and get the card renewal processed before the expiry date. This “Next Renewal Date” will therefore be ignored if the card remains set to NO_RENEW, and not auto-renewing is also the default if renewalType is not specified.

For more information please see the card renewals documentation.

New method of indicating assignment of a payment card

When a business (Corporate) assigns a payment card to an End User, typically an employee, this assignment is recorded at the time the card is created.

Previously we’ve used the the linkedUserId field within the threeDSecureAuthConfig object when creating a Managed Card [https://weavr-multi-api.redoc.ly/3.55.0/tag/Managed-Cards/#operation/managedCardCreate].

We are planning to deprecate this use of linkedUserId and replace it with a new method of indicating assignment of a payment card as described below.

(Note: within the same threeDSecureAuthConfig object we have already marked the field cardholderMobileNumber as deprecated.)

We now recommend using the new field userId to identify which End User (typically an Authorised User) a card is assigned to at creation.

Going forward this will be the supported way of noting the card assignment for purposes including:

  • 3DS checks
  • Mobile wallet provisioning

Please start using this method when creating new cards. We will communicate the deadline for deprecation of the previous linkedUserId field, and migration of existing assignments, in future release notes.

List view of registered Linked Accounts

Last month we introduced new features and policies to ensure all UK-based programmes are ready for the new regulatory regime relating to APP Fraud. [https://docs.weavr.io/blog/2024/09/18/v3.54.0/#changes-relating-to-wire-transfers-functionality-in-uk-programmes]

All End Customers in UK-based programmes can take advantage of the new Linked Accounts feature [https://docs.weavr.io/blog/2024/09/18/v3.54.0/#introducing-linked-accounts], and it is required for End Customers to have at least one Linked Account active within UK Cards-Focused programmes.

Embedder operations and support teams can now view information about Linked Accounts in the Embedder Portal, as a new tab in Corporates page (where this is applicable to the programme): WEB

Please reach out to Weavr for support on any aspects of the Linked Accounts feature, or to support End Customers with getting successfully set up.

Linked Account process API field change

In UK Cards-Focused programmes, End Customers need to set up at least one Linked Account to be able to fund their Managed Account(s).

One of the setup steps is a declaration of ownership via SCA-style challenge [https://docs.weavr.io/instruments/linked-accounts/linked-accounts-verifications/#declaration-of-ownership-via-sca-challenge].

We have changed an enum in “Get Linked Account verifications” [https://weavr-multi-api.redoc.ly/3.55.0/tag/Linked-Accounts/#operation/linkedAccountVerificationsGet] from "ROOT_USER_DECLARATION_SCA_CHALLENGE" to "USER_DECLARATION_SCA_CHALLENGE"

Please ensure you are referring to the current API documentation when implementing this new feature.

Bulk operations management API fields change

In previous release notes we announced Bulk API processing capabilities available on a Beta basis [https://docs.weavr.io/blog/2024/07/01/v3.51.0/#new-bulk-processing-capabilities-in-the-multi-api].

If you are working with the ‘GET all operations in a bulk’ endpoint please note we have made changes to the names and descriptions of fields in the operations array. Please review the documentation here: https://weavr-multi-api.redoc.ly/3.55.0/tag/Manage#operation/bulkIdOperations