Skip to content

// DEVELOPER API · v3.4

ONE REST SURFACE.
25 CARRIERS.
SUB-900MS SETTLEMENT.

A single OAuth2 endpoint exposes Verizon, AT&T, T-Mobile, Cricket, Tracfone, Mint, 22 MVNOs, plus the full open-loop Visa / Mastercard / Amex / Discover catalog — and ships PINs in under 4 seconds after the 896 ms median settlement lands.

Request API Access View Sandbox Keys
896ms Median Settlement
25+ Carrier Endpoints
99.97% Fulfillment Rate
1.4k Live SKUs

// 01 · AUTH & SANDBOX

Auth, sandbox keys, and a 4-line first request — get a PIN delivered in your dev environment before lunch.

BigPrepaid uses OAuth2 client-credentials. POST your client_id and client_secret to the token endpoint, receive a 1,800-second bearer, and start hitting /v3/orders immediately. No IP allowlist, no out-of-band webhook dance, no PDF onboarding packet.

  • SANDBOX_BASEhttps://sandbox.bigprepaid.io
  • PROD_BASEhttps://api.bigprepaid.io
  • TOKEN_TTL1,800s (refresh 60s before expiry)
  • RATE_LIMIT120 req/s · burst 240
  • SANDBOX_KEYSIssued in <90s after /api/access submission

Sandbox returns synthetic SKUs from the full 1,400-SKU catalog — every endpoint behaves like production, but no real PINs are minted, no real cards are burned, and no money moves. Switch from sandbox. to api. in the base URL and you're live.

curl Node Python Go 
# 1 · fetch a bearer
curl -X POST https://api.bigprepaid.io/oauth/token \
  -d "grant_type=client_credentials" \
  -u "CLIENT_ID:CLIENT_SECRET"

# 2 · place a wholesale PIN order
curl -X POST https://api.bigprepaid.io/v3/orders \
  -H "Authorization: Bearer $TOKEN" \
  -H "Content-Type: application/json" \
  -d '{
    "sku":   "VZW-PIN-$25",
    "qty":   1,
    "mode":  "digital",
    "ref":   "DEV-TEST-001"
  }'

# 3 · response — PIN delivered in 3.8s
{
  "order_id": "ord_4Hf82…zQ91",
  "status":   "delivered",
  "pin":      "7924 1138 2049 3310",
  "settle_ms": 871
}

// 02 · ENDPOINT MATRIX

Five endpoint families, one OAuth2 token, 1,400+ SKUs.

Each family maps cleanly to the rail a fintech architect already operates on — bill-pay gateways, neo-bank ledgers, retail POS middleware, telecom MVNX stacks. All five answer to the same bearer, the same idempotency-key contract, and the same webhook signature scheme (HMAC-SHA256, rotating every 90 days).

  1. 01

    Postpaid & MVNO Pool

    Verizon, AT&T, T-Mobile, Cricket, Tracfone, Mint, Consumer Cellular, and 22 other MVNO carriers on a single POST /v3/orders. Live distributor pricing, refreshed every 60 seconds from carrier and issuer feeds.

    • SKUs580+
    • Avg settle812ms
    • Endpoints25 carriers
    View Postpaid Reference →
  2. 02

    Open-Loop Visa / MC / Amex / Discover

    Master Distributor status on all four open-loop networks. Physical embossed cards, virtual PANs, and tokenized mobile credentials settle in one ledger row, with BIN-level metadata ready for your KYC ledger.

    • SKUs210+
    • Avg settle744ms
    • Networks4 open-loop
    View Open-Loop Reference →
  3. 03

    Closed-Loop Gift Card Rails

    Direct integrations with Blackhawk, InComm, PaySign, and Greenlight bypass the aggregator markup. Activations, balance lookups, and refund voids share a single normalized schema across 240+ retailer brands.

    • SKUs420+
    • Avg settle3.1s (e-code)
    • Aggregators4 direct
    View Gift Card Reference →
  4. 04

    Transit & Closed-Loop Stored Value

    Transit authorities, university card programs, and corporate-stored-value wallets exposed through the same /v3/orders surface. Supports batch-issuance runs and per-card serialization.

    • SKUs95+
    • Avg settle1.4s
    • Issuers18 programs
    View Transit Reference →
  5. 05

    Bill-Pay & Top-Up

    Carrier bill-pay collections, utility top-ups, and government disbursements. The same webhook handler that consumes an order also consumes a payment-acknowledged callback — no second integration.

    • SKUs110+
    • Avg settle1.9s
    • Payees410 billers
    View Bill-Pay Reference →
Schematic of the five BigPrepaid API endpoint families in a mono dashboard grid

// FIG. 2.3 — Five endpoint families answered by a single OAuth2 token. Same idempotency contract. Same HMAC-SHA256 webhook signature. Same 99.97% fulfillment SLA since 2017.

// 02 · REQUEST ↔ RESPONSE

POST /v2/fulfillment — a complete request and a complete PIN-delivery response.

One signed POST against a single catalog SKU returns a serialized PIN payload, an MD5 checksum you can verify on receipt, and a sub-second settlement timestamp. No webhook polling, no out-of-band confirmation, no aggregator markup.

REQ POST /v2/fulfillment · application/json v2.4.1 · sig_ok 
// authenticated request · HMAC-SHA256 over body
POST   https://api.bigprepaid.com/v2/fulfillment
Authorization: Bearer bp_live_4e8a…f19c
X-BP-Signature: t=1731014400,v1=8b3c…d4e0
X-BP-Account:   acc_9f2c1a
Content-Type:  application/json

{
  "sku":        "VZW-RFL-$50-ENA",
  "quantity":   50,
  "format":     "pin+e_code",
  "delivery":   "sync",
  "idempotency_key": "ord_20241107_8821a",
  "ship_to":    "queue:reseller_7741",
  "metadata": {
    "register_id": "REG-MIA-014",
    "cashier":    "jlopez"
  }
}
RES · 200 OK settled in 847ms · 50/50 PINs delivered LIVE 
{
  "status":              "fulfilled",
  "order_id":            "ord_20241107_8821a",
  "txn_id":              "txn_a72c41d8",
  "sku":                 "VZW-RFL-$50-ENA",
  "units_delivered":     50,
  "cost_per_unit_cents": 4410,
  "total_charged_cents": 220500,
  "settlement_ms":       847,
  "serial_mode":         "sequential_random",
  "checksum_md5":        "9c1e…f0a3",
  "pins": [
    { "n": 1,  "code": "5467-0029-1184-22", "exp": "2027-11-30" },
    { "n": 2,  "code": "5467-0029-1184-85", "exp": "2027-11-30" },
    { "n": 3,  "code": "5467-0029-1185-04", "exp": "2027-11-30" },
    /* … 47 additional units truncated … */
    { "n": 50, "code": "5467-0029-1231-71", "exp": "2027-11-30" }
  ],
  "rebate_applied_cents": 3969,
  "remaining_credit_cents": 41821
}
endpoint POST /v2/fulfillment auth Bearer + HMAC-SHA256 v1 formats pin · e_code · physical_card sla p95 < 900ms · 99.97% fulfillment
// 03 · API BENCHMARKS

Measured at the edge, not aspirational on a slide.

Production telemetry across 8.3 million fulfilled transactions since inception. These are the numbers an architecture review board will ask you to defend — we publish them so you don't have to dig for them.

  • MEDIAN SETTLEMENT p50
    312ms

    Across 4.1M POST /v2/fulfillment calls between Jan–Sep 2024. Measured from TLS-accept to PIN payload written.

  • P95 SETTLEMENT p95
    847ms

    Worst 5% of traffic still completes under our published 900ms sub-second SLA. No batching, no shadow queue.

  • CATALOG COVERAGE SKUs
    1,400+

    Wireless, gift card, open-loop Visa/Mastercard/Amex/Discover, transit, and bill-pay — one signed token to reach all of it.

  • FULFILLMENT RATE UPTIME
    99.97%

    8.3M transactions since inception. The remaining 0.03% are refunded, auto-credited, and reissued — never silently dropped.

  • CARRIER CONNECTIONS MVNO
    25/25

    Verizon, AT&T, T-Mobile, Cricket, Tracfone, Mint, plus 19 regional MVNOs. Unified REST schema — same auth, same response envelope.

  • REBATE RETURNED 2024 YTD
    $7.4M

    Settlement rebate tiers between 1.8% and 4.2% of monthly turnover, paid to resellers as account credit on the 5th of each month.

  • DEALER DESK ANSWER AHT
    17sec

    24/7 US-based prepaid specialists — no tier-1 script readers, no offshore escalation queue. Someone who has shipped a SIM lot picks up.

  • BREACH EVENTS SINCE 2017
    0

    $412M annualized prepaid volume routed through an ISO 27001-certified platform with SOC 2 Type II audited annually by Schellman & Co.

// 04 · INTEGRATIONS & AUDITED POSTURE

Direct integrations and audited compliance — answers your security questionnaire in one panel.

BigPrepaid holds Master Distributor status with the four major open-loop networks and ships direct API integrations into the industry's largest prepaid aggregators. No middlemen, no re-tiering, no surprise markup.

Issuer & processor partners

Audit & compliance posture

  • SOC 2 Type II Audited annually since 2019 by Schellman & Co., LLC. Full report under NDA on request.
  • ISO 27001 Certified Information security management system covering every endpoint that touches $412M in annualized volume.
  • AML / BSA & KYC Program 31 licensed prepaid compliance specialists on staff. Sanctions screening, EDD, and SAR workflow built into onboarding.
  • PCI-DSS Aligned Settlement Cardholder data never stored on our perimeter. Settlement tokens, tokenized refunds, and net-30 credit rails.

Procurement team wants the SOC 2 letter, the penetration-test summary, or the BCP / DR attestation? Send the request, you'll have it inside one business day.

REQUEST SECURITY DOCS →