- A valid API key — see Obtain API credentials
- An existing
payment_tokenvalue
Reefpay uses soft-delete for payment tokens:
- The token status changes from
activetoinactive. - The token record is retained for audit and transaction history.
- Any future transaction that references the token will be rejected.
- Existing completed transactions linked to the token are unaffected.
This action is irreversible
Once deleted, a token cannot be reactivated. To use the same payment method again, create a new token.
Send DELETE /v1/payment_tokens/{token}.
curl -X DELETE \
https://api.dev.paradisegateway.net/v1/payment_tokens/PAYMENT_TOKEN-01KFDKXMQ637EKEAY410MSQSXB \
-H "APIKEY: YOUR-API-KEY"A 200 response confirms the soft-delete. The returned token now has status: inactive.
{
"payment_token": "PAYMENT_TOKEN-01KFDKXMQ637EKEAY410MSQSXB",
"object": "payment_token",
"type": "card",
"status": "inactive",
"customer_id": "CUSTOMER-01KFDKXMQ637EKEAY410MSQSXB",
"is_default": false,
"nickname": "My Business Visa",
"card": {
"brand": "visa",
"last_four": "1111",
"bin": "411111",
"funding": "credit"
},
"correlation_id": "d4e5f6a7-b8c9-0123-def0-1234567890ab"
}Key observations:
statusis nowinactiveis_defaultis automatically set tofalse
| Scenario | Action |
|---|---|
| Customer requests removal of payment method | Delete the token |
| Card reported lost or stolen | Delete and create a new token with the replacement card |
| Compliance requirement (data minimization) | Delete tokens no longer needed |
| Card expired and will not be renewed | Delete the token |
If you delete a token that was the customer's default (is_default: true), no other token is automatically promoted to default. You should explicitly set a new default using Update stored payment method with is_default: true.
- Store a card for future use — create a replacement token
- About stored payment methods