> ## Documentation Index
> Fetch the complete documentation index at: https://www.marqeta.com/docs/llms.txt
> Use this file to discover all available pages before exploring further.

# Reveal PIN

> Reveals the personal identification number (PIN) of an eligible existing card.

<div className="mb-4 flex items-center gap-2"><span className="rounded-lg font-bold px-1.5 py-0.5 text-sm leading-5 bg-blue-400/20 text-blue-700 dark:text-blue-400">POST</span><span className="flex items-center gap-0.5 font-mono text-sm"><span className="text-gray-400">/</span><span className="font-medium text-gray-800 dark:text-white">{"pins"}</span><span className="text-gray-400">/</span><span className="font-medium text-gray-800 dark:text-white">{"reveal"}</span></span></div>

Reveals the personal identification number (PIN) of an existing card. The card must be in `ACTIVE` state, or in `SUSPENDED` state with a suspend reason that's on the allow list configured for your program; PIN Reveal remains blocked for cards in any other state. Marqeta evaluates only the card's most recent suspend reason. If a card is re-suspended with a different reason, the latest reason determines eligibility. Marqeta configures the allow list of suspend reasons eligible for PIN Reveal per program. To set up this allow list, contact your Marqeta representative. Be aware that while a cardholder can only set a four-digit PIN using the Marqeta Set PIN widget or `PUT /pins` API, you can or might see a four-, five-, or six-digit PIN in cases where your cardholders have set a new PIN at an automated teller machine.

<Danger>
  **Warning**<br />Only use this endpoint to access a PIN in order to reveal it to its cardholder. Do not use this endpoint for the purpose of storing a PIN at any location.
</Danger>

Sending a request to this endpoint requires PCI DSS compliance. You must comply with PCI DSS data security requirements if you want to store, transmit, or process sensitive card data such as the cardholder's primary account number (PAN), personal identification number (PIN), and card expiration date.

If you want to update a card's PIN instead, send a `PUT` request to the `/pins` endpoint. See [Create or Update PIN](/docs/core-api/pins/create-update) on this page for details.

Revealing a card's PIN is a two-step process. You must first create a new control token for the card by sending a `POST` request to `/pins/controltoken`, and then use that token to reveal the PIN.

<h2 id="_request_body_3">
  Request body
</h2>

| Fields | Description |
| - | - |
| cardholder\_verification\_method<br />string<br />Required | The supplemental method used to verify the cardholder's identity before revealing the card's personal identification number (PIN).<br />The possible cardholder verification methods are:<br />- **BIOMETRIC\_FACE:** In-app authentication via facial recognition<br />- **BIOMETRIC\_FINGERPRINT:** In-app authentication via biometric fingerprint<br />- **EXP\_CVV:** In-app authentication by entering the card's expiration date and card verification value (CVV)<br />- **LOGIN:** In-app authentication by re-entering the app password<br />- **OTP:** Two-factor authentication involving a one-time password (OTP)<br />- **OTP\_CVV:** Two-factor authentication involving the card's CVV and an OTP<br />- **OTHER:** Authentication that relies on other secure methods<br />**Allowable Values:**<br />`BIOMETRIC_FACE`, `BIOMETRIC_FINGERPRINT`, `LOGIN`, `EXP_CVV`, `OTP_CVV`, `OTP`, `OTHER` |
| control\_token<br />string<br />Required | Unique value generated as a result of issuing a `POST` request to the `/pins/controltoken` endpoint. This value cannot be updated.<br />**Allowable Values:**<br />1–36 chars |

<h2 id="_sample_request_body_3">
  Sample request body
</h2>

```json JSON lines wrap theme={null}
{
  "control_token": "b4647c9a-d4b8-4091-a5ff-dd67a7bb9ffc",
  "cardholder_verification_method": "BIOMETRIC_FINGERPRINT"
}
```

<h2 id="_sample_response_body_2">
  Sample response body
</h2>

```json JSON lines wrap theme={null}
{ 
"pin": "string"
}
```


## Related topics

- [Control Center in the Marqeta Dashboard](/docs/developer-guides/control-center-dashboard.md)
- [PINs Overview](/docs/core-api/pins.md)
- [Create or update PIN](/docs/core-api/pins/create-update.md)
- [Create PIN control token](/docs/core-api/pins/create-control-token.md)
- [About UX Toolkit](/docs/developer-guides/about-ux-toolkit.md)