Card activation

Currency authorization and card activation by integration mode.

Card activation bridges account verification and spending capability. This page covers the currency authorization users complete during activation and the authentication patterns that protect card details, for both Managed Custody Mode and External Wallet Access Mode.

Currency authorization and enablement

For regulatory reasons, your users must authorize currencies for payment. To prevent payments from failing at the point of purchase, include currency authorization in the card activation flow.

Enable all currencies by default to maximize payment success. For wallet partners, currencies must be enabled via EIP-7702 to batch the transactions.

Managed Custody Mode

Figma reference: Managed Custody Mode card activation

Authentication requirement

Every "View card" action requires re-authentication, for both activated and inactive cards. Card details are highly sensitive information, comparable to physical card access. Gating them protects against unauthorized access: someone with temporary access to an unlocked phone still cannot read the full card number and CVV. It also follows the industry standard set by financial apps, and it builds trust by tying card access to a verification step users recognize. Authentication adds friction, but the trade-off is acceptable because users expect this measure for financial data.

In Managed Custody Mode, users authenticate with their UR credentials (Google Sign-In or email one-time password (OTP)) to view card details, and they activate through your standard authentication flow via UR's webview. Currency authorization is included within the activation flow.

External Wallet Access Mode

Figma reference: External Wallet Access Mode card activation

Authentication requirement

Every "View card" action requires wallet authentication, for both activated and inactive cards. The same reasoning applies as in Managed Custody Mode: it protects against unauthorized access, follows industry standards, and creates a security ritual that builds trust.

In External Wallet Access Mode, users authenticate with their wallet (for example, biometric or PIN) to view card details. The wallet signature proves ownership and intent. To activate the card, users sign with their wallet, and currency authorization is recommended as part of the activation flow.

Viewing sensitive card data (full number, CVV) requires cryptographic proof of wallet ownership every time.