Get Restricted Merchants

Get restricted merchants

curl --request GET \
  --url https://api.fyatu.com/api/v3.20/restricted-merchants \
  --header 'Authorization: Bearer <token>'

const options = {method: 'GET', headers: {Authorization: 'Bearer <token>'}};

fetch('https://api.fyatu.com/api/v3.20/restricted-merchants', options)
  .then(res => res.json())
  .then(res => console.log(res))
  .catch(err => console.error(err));

<?php

$curl = curl_init();

curl_setopt_array($curl, [
  CURLOPT_URL => "https://api.fyatu.com/api/v3.20/restricted-merchants",
  CURLOPT_RETURNTRANSFER => true,
  CURLOPT_ENCODING => "",
  CURLOPT_MAXREDIRS => 10,
  CURLOPT_TIMEOUT => 30,
  CURLOPT_HTTP_VERSION => CURL_HTTP_VERSION_1_1,
  CURLOPT_CUSTOMREQUEST => "GET",
  CURLOPT_HTTPHEADER => [
    "Authorization: Bearer <token>"
  ],
]);

$response = curl_exec($curl);
$err = curl_error($curl);

curl_close($curl);

if ($err) {
  echo "cURL Error #:" . $err;
} else {
  echo $response;
}

package main

import (
	"fmt"
	"net/http"
	"io"
)

func main() {

	url := "https://api.fyatu.com/api/v3.20/restricted-merchants"

	req, _ := http.NewRequest("GET", url, nil)

	req.Header.Add("Authorization", "Bearer <token>")

	res, _ := http.DefaultClient.Do(req)

	defer res.Body.Close()
	body, _ := io.ReadAll(res.Body)

	fmt.Println(string(body))

}

require 'uri'
require 'net/http'

url = URI("https://api.fyatu.com/api/v3.20/restricted-merchants")

http = Net::HTTP.new(url.host, url.port)
http.use_ssl = true

request = Net::HTTP::Get.new(url)
request["Authorization"] = 'Bearer <token>'

response = http.request(request)
puts response.read_body

{
  "success": true,
  "status": 200,
  "message": "Restricted merchants retrieved",
  "data": {
    "currency": "USD",
    "merchants": [
      {
        "merchantName": "megaplaza"
      },
      {
        "merchantId": "GAMBLING*BET SHOP"
      }
    ]
  }
}

GET

restricted-merchants

Get restricted merchants

curl --request GET \
  --url https://api.fyatu.com/api/v3.20/restricted-merchants \
  --header 'Authorization: Bearer <token>'

const options = {method: 'GET', headers: {Authorization: 'Bearer <token>'}};

fetch('https://api.fyatu.com/api/v3.20/restricted-merchants', options)
  .then(res => res.json())
  .then(res => console.log(res))
  .catch(err => console.error(err));

<?php

$curl = curl_init();

curl_setopt_array($curl, [
  CURLOPT_URL => "https://api.fyatu.com/api/v3.20/restricted-merchants",
  CURLOPT_RETURNTRANSFER => true,
  CURLOPT_ENCODING => "",
  CURLOPT_MAXREDIRS => 10,
  CURLOPT_TIMEOUT => 30,
  CURLOPT_HTTP_VERSION => CURL_HTTP_VERSION_1_1,
  CURLOPT_CUSTOMREQUEST => "GET",
  CURLOPT_HTTPHEADER => [
    "Authorization: Bearer <token>"
  ],
]);

$response = curl_exec($curl);
$err = curl_error($curl);

curl_close($curl);

if ($err) {
  echo "cURL Error #:" . $err;
} else {
  echo $response;
}

package main

import (
	"fmt"
	"net/http"
	"io"
)

func main() {

	url := "https://api.fyatu.com/api/v3.20/restricted-merchants"

	req, _ := http.NewRequest("GET", url, nil)

	req.Header.Add("Authorization", "Bearer <token>")

	res, _ := http.DefaultClient.Do(req)

	defer res.Body.Close()
	body, _ := io.ReadAll(res.Body)

	fmt.Println(string(body))

}

require 'uri'
require 'net/http'

url = URI("https://api.fyatu.com/api/v3.20/restricted-merchants")

http = Net::HTTP.new(url.host, url.port)
http.use_ssl = true

request = Net::HTTP::Get.new(url)
request["Authorization"] = 'Bearer <token>'

response = http.request(request)
puts response.read_body

{
  "success": true,
  "status": 200,
  "message": "Restricted merchants retrieved",
  "data": {
    "currency": "USD",
    "merchants": [
      {
        "merchantName": "megaplaza"
      },
      {
        "merchantId": "GAMBLING*BET SHOP"
      }
    ]
  }
}

Overview

Returns the merchants currently blocked at the card network. A restricted merchant is declined at authorization time for every card you issue.

Restrictions are keyed by currency at the card network and shared across all of your programs — so there’s no program in the path. It defaults to USD; pass ?currency= only if you operate cards in another currency. Restricting is an operator action performed by Fyatu — reach out to your account manager to add or remove entries.

Query Parameters

Parameter	Type	Default	Description
`currency`	string	`USD`	Currency the restrictions are keyed by

Merchant Object

Field	Type	Description
`merchantName`	string	Blocked by partial name match — any merchant whose name contains this value is declined
`merchantId`	string	Blocked by exact descriptor match

Each entry has at least one of the two.

In the sandbox environment there are no real merchants, so this endpoint returns a small set of static example entries. Use it to validate your integration’s response handling; the live environment returns the real restriction list.

Example

curl https://api.fyatu.com/api/v3.20/restricted-merchants \
  -H "Authorization: Bearer $FYATU_API_KEY"

const resp = await fetch(
  'https://api.fyatu.com/api/v3.20/restricted-merchants',
  { headers: { 'Authorization': `Bearer ${process.env.FYATU_API_KEY}` } }
);
const { data } = await resp.json();
console.log(`${data.merchants.length} restricted merchant(s) for ${data.currency}`);

import os, requests

resp = requests.get(
    'https://api.fyatu.com/api/v3.20/restricted-merchants',
    headers={'Authorization': f'Bearer {os.environ["FYATU_API_KEY"]}'}
)
data = resp.json()['data']
for m in data['merchants']:
    print(m.get('merchantName') or m.get('merchantId'))

Success Response (200)

{
  "success": true,
  "status": 200,
  "message": "Restricted merchants retrieved",
  "data": {
    "currency": "USD",
    "merchants": [
      { "merchantName": "megaplaza" },
      { "merchantId": "GAMBLING*BET SHOP" }
    ]
  },
  "meta": {
    "requestId": "req_01HXY123456ABCDEF",
    "platform": "Fyatu CaaS",
    "timestamp": "2026-05-26T10:00:00Z"
  }
}

Error Codes

Code	HTTP	Cause
`PROVIDER_ERROR`	500	Card network unavailable — retry with exponential back-off
`INSUFFICIENT_SCOPE`	403	Key lacks `cards:read` scope

Authorizations

Authorization

string

header

required

API key from the FYATU CaaS portal. Pass as Authorization: Bearer <key>.

Query Parameters

currency

string

default:USD

Currency the restrictions are keyed by (default USD)

Response

200 - application/json

Restricted merchants retrieved

success

boolean

status

integer

message

string

data

object

Show child attributes

Account

Products

Cardholders

Cards

Webhooks

Overview

Query Parameters

Merchant Object

Example

Success Response (200)

Error Codes

Authorizations

Query Parameters

Response

​Overview

​Query Parameters

​Merchant Object

​Example

​Success Response (200)

​Error Codes

Authorizations

Query Parameters

Response

Overview

Query Parameters

Merchant Object

Example

Success Response (200)

Error Codes