Synonym of the bank card number

Receiving and storing bank card numbers is subject to the PCI DSS standard. For this reason, Yandex.Money stores bank card data on its own servers and provides the Counterparty with card synonyms skr_destinationCardSynonim and masks skr_destinationCardPanmask for showing the user, along with other card parameters that were detected during processing. The Counterparty can store the synonyms, masks, and additional card parameters on their side without risk of leaks: publishing this information will not lead to any financial loss or image discrediting.

The Counterparty places a form for entering card data on their website. After confirming input, the form data is sent to the address https://paymentcard.yamoney.ru/gates/card/storeCard in a POST method. The service processes the received data and uses the GET method to redirect the payer to the address specified in skr_successUrl or skr_errorUrl. If successful, the synonym, mask, and additional parameters of the payer's card are appended to the address.

Request for getting a card synonym

Request parameters for getting a card synonym

Parameter

Type

Description

skr_destinationCardNumber

xs:string, up to 25 characters

Bank card number.

skr_responseFormat

xs:string, up to 8 characters

Format of the response to the request. Possible values: redirect or json. If the parameter is omitted, redirect is used by default.

skr_errorUrl

xs:string, up to 250 characters

Redirect address for an error.

skr_successUrl

xs:string, up to 250 characters

Redirect address if successful.

Code sample for a page for storing the card number on the Yandex.Money side and getting its synonym

<html>
    <body>
        <form action=https://paymentcard.yamoney.ru/gates/card/storeCard method=post>
        <input type=text name=skr_destinationCardNumber> <br>
        <input type=hidden name=skr_responseFormat value=redirect> <br>
        <input type=text name="skr_errorUrl" value="http://money.yandex.ru"> <br>
        <input type=text name="skr_successUrl" value="http://money.yandex.ru"> <br> 
        <input type=submit value="Save">
    </body>
</html>

Parameters of the response to the request

Parameter

Type

Description

Required parameters
skr_destinationCardPanmask

xs:string, up to 25 characters

Bank card mask.

skr_destinationCardSynonim

xs:string, up to 100 characters

Bank card synonym.

reason

xs:string, up to 100 characters

Result of data processing:

  • success if successful,
  • cardinvalid if failed.

Additional parameters

skr_destinationCardBankName

xs:string, up to 200 characters

Name of the card-issuing bank.

skr_destinationCardCountryCode

xs:string, up to 3 characters

Digital code of the card-issuing country.

skr_destinationCardPaymentSystem

xs:string, up to 100 characters

Name of the card's payment system.

skr_destinationCardProductName

xs:string, up to 1000 characters

Name of the card product.

skr_destinationCardProductCode

xs:string, up to 20 characters

Code of the card product

Example of a redirect format response

[skr_successUrl]/?skr_destinationCardProductCode=P&skr_destinationCardProductName=Visa+Gold&skr_destinationCardSynonim=4878b27eaec2022c5a6a4e82d971a6271bf6fcd8_scn&skr_destinationCardType=Visa&skr_destinationCardCountryCode=616&skr_destinationCardBankName=Norwegian+Visa-Bankgroup&skr_destinationCardPanmask=444444******4448

Example of a JSON format response for successfully saving the card number

{"storeCard":{"skr_destinationCardSynonim":"e651e9fd23d00efa97fc713682fcc7f86faeb846_scn","skr_destinationCardPanmask":"471408*****1089"}}

Example of a JSON format response for failure to save the card number

{"storeCard":{"reason":"cardinvalid"}}

The Counterparty uses the synonym of the card number received in the response from Yandex.Money deposit requests. Yandex.Money uses the received synonym to determine the recipient's card number.