Platform / Banking / Cards
Banking · Cards

Issue cards instantly. Control them obsessively.

Virtual or physical. Visa or Mastercard. Single-use, vendor-locked, employee expense, AP settlement. Real-time spend controls, MCC blocks, live freezes, and a native sync to AP.

<3s
To issue virtual
3 days
Physical ship time
Yes
Cash-back on AP
CARD VAULT
PAYOUTS·VIRTUALVISA
4815 ●●●● ●●●● 2103
SARAH CHEN
EXPENSE · ENG
02/29
AP·SINGLE-USEMC
5247 ●●●● ●●●● 8847
AWS · INV-1248
$12,840 · LOCK
10/26
PAYOUTS·PHYSICALVISA
4815 ●●●● ●●●● 4421
JONAS K.
TRAVEL · OPS
04/28
VENDOR-LOCKMC
5247 ●●●● ●●●● 9201
TANAKA STUDIOS
¥2.4M · MONTHLY
12/27
Active cards
2,847
MTD spend
$4.2M
Cash-back
$63K
Why Cards

Four card types. One control plane.

Single-use AP cards

One card per invoice, locked to the vendor and amount. No vendor lock-in to scary "keep my card on file" forms.

Employee expense

Virtual by default, physical on request. Category limits, MCC blocks, live receipt capture, auto-sync to NetSuite.

Vendor-lock cards

One card per vendor. Locks to their MCC and name. Auto-block anyone else trying to charge.

Features

Spend that can't go sideways.

Every control finance has ever wished for, exposed as an API parameter.

01 · Issue
Instant virtual issuance

PAN, CVV, expiry returned in the API response. Use it in under 3 seconds.

02 · Ship
Physical cards worldwide

Chip-and-PIN, contactless, 3DS. Ship to 60 countries in 3-5 days.

03 · Limits
Per-card spend caps

Daily, weekly, monthly, lifetime. Rolling or reset. Auto-decline on breach.

04 · MCC
MCC allow/block lists

Engineering cards block 7995 (gambling). Travel cards allow 4511 (airlines).

05 · Vendor
Merchant name lock

Lock to a specific merchant. Decline if the swipe comes from anyone else.

06 · Freeze
Real-time freeze

API call freezes a card in <100ms. Issuer-level, not authorization-level.

07 · Receipts
Receipt capture via SMS

We text the cardholder after every swipe. They reply with a photo. We OCR.

08 · 3DS
3D Secure

Built-in 3DS2 challenge flow. SMS or authenticator, admin-configurable.

09 · Rewards
Cash-back on AP

Pay vendor invoices via card, earn competitive cash-back. Auto-credited to your operating balance. Rate set in your contract.

10 · Apple/Google
Apple Pay & Google Pay

Push-provisioning from our SDK. One tap, card lives in Wallet.

11 · Transactions
Real-time auth webhooks

Decline dynamically. Check the invoice, the budget, the weather. You decide.

12 · GL
GL coding at swipe

Cardholder picks the GL account in our mobile app. Synced to NetSuite same day.

How it works

From request to swipe in 4 steps.

1
Request

Employee, vendor, or AP agent requests a card. In-app, by Slack, or by API.

2
Configure

Set type, limits, MCC rules, vendor lock, expiry. Or use a template.

3
Issue

Virtual: PAN back in <3s. Physical: shipped same day, 3-5 days in hand.

4
Spend

Swipe, tap, online. Every auth streams to your ledger and AP sync.

Developers

Issue cards programmatically.

One endpoint, a dozen controls. Hook into auth.created to approve or decline in your own logic.

Issue single-useAuth webhook
const card = await payouts.cards.create({
  type:          "virtual_single_use",
  funding:       "acc_usd_operating",
  limit:         { amount: 1284000, period: "total" },
  merchant_lock: "AMAZON WEB SERVICES",
  mcc_allow:     ["7372"],
  label:         "AWS · INV-1248",
});

// -> { id, pan, cvv, exp_month, exp_year, ... }
Questions

Cards FAQ.

Visa or Mastercard?
+
Both. Pick at issue time. Default is Visa for the US, Mastercard for EU.
How does cash-back work?
+
Cash-back on invoice-matched card swipes, auto-credited to your operating balance monthly. Your rate is set in your contract — talk to sales for current tiers.
Can I block specific merchants?
+
Yes. MCC blocklists, merchant-name blocklists, and real-time decline rules via webhook.
What about fraud?
+
Zero liability on all unauthorized use. 3DS2 by default for online. Velocity rules, geofencing, and our AI fraud model run on every auth.

Issue your first card today.