Viewing credit card details for non-PCI compliant partners

As a non-PCI compliant, you can manage payment workflows and track guest card updates even if you aren’t PCI compliant. While full card details remain hidden for security, Rentals United provides non-sensitive data and automated notifications to help you identify when to attempt or retry a charge.

Track card details

When you retrieve a reservation via the API, the response includes a masked data container. This allows you to verify card information at a glance.

The metadata includes:

  • Last 4 digits: The final four digits of the credit card.
  • Card type: Details on whether it is a channel-issued virtual card.
  • Activation date: The time when the virtual card becomes active.
  • Expiration date: The month and year the non-virtual card expires.
  • Card brand: The brand of the card (for example Visa, Mastercard).
  • Last modification date: The timestamp of when the card was last updated.

Response for virtual card:

<CreditCardPartialInfo>
<Last4>4242</Last4>
       <IsVirtual>true</IsVirtual>
       <CardType>MASTERCARD</CardType>
       <DateEntered>2026-04-13 13:40:00</DateEntered>
       <VccActivationDate>2026-04-12 00:00:00</VccActivationDate>
       <VccExpirationDate>2027-10-12 00:00:00</VccExpirationDate>
</CreditCardPartialInfo>

Modification notifications

Rentals United notifies you whenever a guest updates their payment details on the booking channel. When a card is updated, the RLNM notification includes the new metadata and the modification timestamp. This serves as a trigger for your system to re-attempt the payment process.

Note: If the booking channel doesn't provide credit card details, the card container will be omitted.

Access card details

Credit card details for non-PCI partners can be accessed only through the API response payload. Follow the steps below to view the card details for your reservations.

Step by step:

  1. Retrieve reservation details using the Rentals United API, for example use the  Pull_ListReservations_RQ method.
  2. Locate the CreditCardPartialInfo container in the response payload.
  3. Review the credit card details.

FAQs

Is this update safe for non-PCI compliant partners? Yes. The metadata provided (last 4 digits and expiry) is considered non-sensitive and does not bring your system into PCI scope.

What happens if a guest updates a card on the channel? Rentals United detects the change and sends an automated notification. You can then pull the updated metadata via the API to see that a new card is available.

Was this article helpful?
0 out of 0 found this helpful