# Create a Virtual Card

> Coming soon, upon request — this feature is turned on for your tenant by the Aurea team. [Contact us](https://www.aureahub.com/contact)

Issue a virtual card to the user, ready to use.

## Overview

- The user must have accepted the card terms (`card-issuer-tos`, [Accept Terms](https://docs.aureahub.com/docs/cards-terms-accept.md)): otherwise `403` `CARD_TERMS_REQUIRED`.
- A card created inactive is activated at once. `201` with the card, as [List Cards](https://docs.aureahub.com/docs/cards-list.md) answers it.
- No body. Inside the card program session.
- **Illustrative example.** These are the fields Aurea writes for every card; their values are the card program's.

## Endpoint

### `POST /v1/cards/virtual`

Authentication: bearer token required.

Creates a virtual card for the user.

**Responses**

`201` Created (illustrative)

```json
{
  "id": "c4f1a2b3-…",
  "token": "9876543210",
  "lastFour": "4821",
  "isVirtual": true,
  "statusCode": 1000,
  "statusName": "Active",
  "isFrozen": false,
  "activatedAt": "2026-10-14T09:00:00.000Z"
}
```

`403` Card Terms

```json
{
  "error": "ForbiddenError",
  "message": "…",
  "details": { "code": "CARD_TERMS_REQUIRED" }
}
```

**Example request**

```bash
curl -X POST https://api.aureahub.com/v1/cards/virtual \
  -H "Authorization: Bearer YOUR_ACCESS_TOKEN"
```

---

Web version: https://docs.aureahub.com/#cards-virtual-create