> **Description:** A chronological record of all significant changes, updates, and improvements made to the MobilePay Online PSP API, including new features, bug fixes, and deprecation notices.

# MobilePay Online changelog

All notable changes to the current API will be documented here.
To learn about API versioning, see
[API lifecycle](https://developer.vippsmobilepay.com/docs/knowledge-base/api-lifecycle.md).

Changes that affect multiple APIs are documented in the [general changelog](https://developer.vippsmobilepay.com/docs/changelog.md).

## Upcoming change May 2025

To support 8-digit BINs for Visa and Mastercard, we will change the `maskedCardNumber` for Visa and Mastercard token callbacks.
With this change, you'll receive the first 8 digits and the last 4 digits of the card number.

**Example**:
Old format:
`"maskedCardNumber":"479645XXXXXX1234"`
New format:
`"maskedCardNumber":"47969485XXXX1234"`

**What you need to do:**

Make sure your systems can handle both the 6-digit and 8-digit BIN formats during the transition period.

*Example of [Visa Token Service (VTS) response](https://developer.vippsmobilepay.com/docs/APIs/psp-mp-api/mp-psp-api-guide.md#delegated-authentication-for-visa-card):*

```json title="VisaTokenCallbackPayload"
{
   "paymentId":"8dab9219-ab03-4524-bae7-f0ad55119da5",
   "authorizationAttemptId":"32eedb2b-a536-4eb6-b618-c2d6c1bf7aab",
   "cardType":"VISA-CREDIT",
   "cardIssuedInCountryCode":"DK",
   "maskedCardNumber":"47969485XXXX1234",
   "tokenMethod":"VTS",
   "tokenData":{
      "vPaymentDataID":"da17bd1568bdc8b418d71cf80c44ea02",
      "cryptogramInfo":{
         "cryptogram":"/wAAAAwAUkMTObMAAAAAgS0AAAA=",
         "eci":"07"
      },
      "paymentInstrument":{
         "last4":"1234",
         "paymentType":{
            "cardBrand":"VISA"
         },
         "paymentAccountReference":"V0010013020217426481676671969"
      },
      "tokenInfo":{
         "token":"4895737462013403",
         "last4":"3403",
         "expirationDate":{
            "month":"02",
            "year":"2023"
         }
      }
   },
   "isDelegatedAuthentication": false
}
```

*Example of [Mastercard S4C (MS4C) response](https://developer.vippsmobilepay.com/docs/APIs/psp-mp-api/mp-psp-api-guide.md#delegated-authentication-for-mastercard):*

```json title="MastercardTokenCallbackPayload"
{
   "paymentId":"1ba21790-5e10-4db1-8e90-330fb41916e7",
   "authorizationAttemptId":"3205ec7c-2d50-49d2-95dc-326e34edce47",
   "cardType":"MC-CREDIT",
   "cardIssuedInCountryCode":"DK",
   "maskedCardNumber":"52047345XXXX4792",
   "tokenMethod":"MC S4C",
   "tokenData":{
      "token":{
         "paymentToken":"5204731613942625",
         "tokenExpirationMonth":"05",
         "tokenExpirationYear":"2024",
         "paymentAccountReference":"AAAAAAAAAAAAAAAAAAAAAAAAAAAAA"
      },
      "dynamicData":{
         "dynamicDataType":"CARD_APPLICATION_CRYPTOGRAM_SHORT_FORM",
         "dynamicDataValue":"MD1eEaqbngDNAy0iuRqOAAADFEA="
      },
      "eci":"06"
   }
}
```

## November 2024

* Landing page: More robust handling of retries.
  See [General changelog](https://developer.vippsmobilepay.com/docs/changelog.md#landing-page-more-robust-handling-of-retries) for details.

> **Full site overview:** For every page in this documentation, read [https://developer.vippsmobilepay.com/llms.txt](https://developer.vippsmobilepay.com/llms.txt).