What is a Prepaid Card Issuing API
A prepaid card issuing API allows businesses to programmatically create cards, manage limits, top up balances, and track transactions in real time. This is the foundation for building corporate expense programs, ad budgets, and fintech products.
Prepaid cards differ from debit cards in that they are linked not to a bank account but to a pre-loaded balance — this reduces risk and simplifies control.
Key Provider Characteristics
- Card types: Visa, Mastercard, both networks
- Usage regions: where the card will work for payments
- Sandbox: test environment for development
- Webhooks: real-time transaction notifications
- Spending controls: blocking by MCC category
- Funding methods: ACH, Wire, crypto, platform balance
Top Providers 2026
Stripe Issuing
The best starting point for most companies. Excellent documentation, powerful test environment, Visa and Mastercard support. Available in the US, EU, UK, Australia. Authorization rules via Stripe Radar.
Pricing: $0 for issuance, $0.20 + 0.2% per transaction in the US.
Lithic
Specializes in programmable prepaid cards. Allows real-time webhook authorization — you can approve or decline transactions based on your own business logic.
Pricing: from $0.10/card/month + transaction fees.
Marqeta
Enterprise solution. Used by Klarna, Square, Affirm. Powerful spending controls, physical card support, JIT funding (just-in-time).
Pricing: individual, minimum volume required.
Wallester
European provider with fast onboarding. Supports Visa, operates in EU/EEA. Well-suited for advertising agencies.
Marix
Specialized platform for media buying and ad spend. Fast card issuance without lengthy integration, works with popular advertising platforms.
Step-by-Step API Integration Process
- Choose a provider based on your regions and volumes.
- Register and complete KYB (business verification).
- Get API keys for sandbox and production environments.
- Implement the integration:
- Card creation endpoint (
POST /cards) - Funding endpoint (
POST /funding) - Transaction webhook handler
- Card creation endpoint (
- Test in sandbox with test card numbers.
- Launch in production and issue your first real card.
FAQ
Is PCI DSS certification required for card issuing API? When using a provider with tokenization (Stripe, Lithic) — full PCI DSS is not needed. SAQ A or SAQ A-EP compliance is sufficient. If you store PANs — full PCI DSS is required.
Can limits be set by transaction type (MCC)? Yes. Stripe Issuing, Lithic, and Marqeta support blocking/allowing transactions by MCC category. For example, allow only Facebook (MCC 7311) and Google (MCC 7372).
Which provider is best for advertising spend? Marix and Wallester specialize in this segment. Stripe Issuing also works but requires more complex spending controls configuration for advertising platforms.