CARD PRIME D 3.0
Lifecycle, onboarding and KYC, personalized and instant issuance, embossing, HSM services, digital and virtual cards, back office.
cardprime.us
CARD PRIME D 3.0 · Card Management System
From stranger to cardholder, in one visit.
Onboarding, KYC, a printed card and a PIN set inside the HSM — one journey, one system. Then the same card as a wallet token and a virtual card in your app.
Personalized & instant
Multi-vendor embossing
Digital & virtual
EN · AR
PRIME BANK
Debit · Instant
5398 76•• •••• ••••
Cardholder
A. NASSER
Valid thru
09/31
01 · Lifecycle
A card has a life. The system keeps the record.
PAN generation from BIN, sequence and a Luhn check digit. A status machine the whole platform agrees on. Add-on cards, bulk generation, and a history that cannot be edited after the fact.
One status, everywhere
The ATM, the switch, the branch terminal and the mobile app all read the same card status from the same place. There is no second opinion about whether a card is blocked.
- PAN generation: BIN + sequence + Luhn, per card product
- Status machine: active, blocked, temporarily blocked, closed, replaced, renewed, reissued
- Add-on cards under a primary cardholder, with their own limits
- Bulk generation for campaign and branch stock
- Immutable history — every transition recorded with actor, reason and time
02 · Instant
Four steps at a KIOSK, and they walk out with a card.
Identity capture, instant KYC, product selection, card printed on the spot and the PIN set through the HSM. Pre-activation means the card works on the first tap — no separate activation call.
1
Onboard
Identity and document capture at the KIOSK or the branch counter, in English or Arabic.
≈ 55 seconds2
Instant KYC
Verification hooks run live; duplicate and eligibility checks resolve before the card exists.
≈ 85 seconds3
Issue
A card is drawn from pre-generated stock and printed on the spot against the chosen product.
≈ 65 seconds4
PIN & activate
The cardholder sets a PIN through the HSM. Pre-activation makes it live before they leave.
≈ 43 seconds
0:00
elapsed · onboarding to first tap
Indicative timings for a KIOSK journey with instant KYC and instant issuance. Actual duration depends on the KYC provider and the document set.
03 · Embossing
More than one vendor, on purpose.
Personalisation files are built to each vendor's own format, encrypted with that vendor's PGP key, delivered over SFTP, and reconciled against the acknowledgement that comes back. Switching vendors is configuration, not a project.
01 · Build
Per-vendor perso format: embossing text, magnetic tracks, ICC data, artwork reference.
02 · Encrypt
PGP encryption with the vendor's public key. Clear-text perso data never leaves the vault.
03 · Deliver
SFTP exchange on the agreed schedule, with delivery receipts held against the batch.
04 · Reconcile
Acknowledgement and rejection handling per card, so nothing is assumed produced.
Vendor A · perso format A
Vendor B · perso format B
Vendor C · perso format C
Each vendor carries its own profile and keys. Routing a card product to a different vendor is a configuration change with maker-checker, not a code release.
04 · Digital
The same card, without the plastic.
Issuer-side token lifecycle for Mastercard digital cards, and a Virtual Card SDK that puts a card inside your own mobile app — created, displayed, frozen and unfrozen by the cardholder.
•••• 4417
Virtual · active
Freeze
Controls
Limits
Add to wallet
Grocery · POSUSD 4,200
Top-up · e-comUSD 12.00
ATM · AdenUSD 25,000
Tokens the issuer controls
Provision, suspend, resume and delete run from the issuer side, with cardholder verification and a token-to-card mapping the back office can actually read.
- Mastercard MDES: issuer-side token lifecycle, cardholder verification, token-to-card mapping
- Virtual Card SDK for Android and iOS, embedded in your own app
- Create, display, freeze and unfreeze from the app; controls and limits per card
- Tap-and-pay enablement on NFC point of sale
- Scheme enrolment handled in the integration and certification workstream
05 · Controls
Limits that mean something at the terminal.
Per product, per card, per channel and per currency — with temporary controls a branch officer can set and a maker-checker queue behind them.
| Channel | Per transaction | Daily | Count / day | Currency |
|---|---|---|---|---|
| ATM — ON-US | USD 150,000 | USD 600,000 | 6 | USD |
| ATM — OFF-US | USD 100,000 | USD 300,000 | 4 | USD · SAR · USD |
| POS | USD 400,000 | USD 1,200,000 | 12 | USD · SAR · USD |
| E-commerce | USD 200,000 | USD 400,000 | 8 | USD |
| Contactless — no PIN | USD 25,000 | USD 100,000 | 5 | USD |
| Cash deposit | not limited | USD 2,000,000 | 4 | USD |
Illustrative values. Limits are configuration per product, per card, per channel and per currency, with temporary overrides that expire on their own.
06 · The vault
PIN and CVV never leave the HSM.
PVV and IBM offset PIN methods; CVV1, CVV2 and iCVV generated and verified inside the hardware security module only. Key-ID indirection means the application never holds a key — it holds a reference.
KEYS
HSM only
PIN and CVV operations, key storage, key ceremonies under dual control.
DATA
Masked & tokenised
PAN masked on screens, reports and APIs; SHA-512 tokens for cross-system references.
ACCESS
Maker-checker
On every card, limit and configuration change, with a full audit trail.
API
JWT · OTP · rate limit
Expiry and blacklist, time-based OTP, rate limiting and audit logging everywhere.
The suite
One vendor across card, ATM and switch.
CARD PRIME D 3.0 is one of three products delivered as a single programme, on one data model — which is why card status, terminal behaviour and switch routing never disagree.
Gen ATM NGK 2.0
NDC driving for NCR and GRG, ATM Service, device and cash monitoring, electronic journal, estate management.
T-NET
ISO 8583 routing for ON-US and OFF-US, scheme connectivity, FX, risk, fraud and AML hooks, clearing, settlement and chargebacks.
by TantraFino
Next step
Put a card in a customer's hand today.
Tell us your BIN plan, card products and where the customer starts — branch, KIOSK or app. We will come back with an issuance design, an embossing plan and a delivery schedule.