Credit and debit card

Online cards with rate and payout time on the first line.

Tokenization, installments up to 12x, automatic retries, antifraud and 3DS 2.0 on the same API. The number you see here is the number in the table, in the contract and on the statement.

Create account Read the docs

Open sandbox, test cards for every scenario.

Credit MDR

0.50% + R$ 0.05
Settlement

D+1 (with advance)
Included

3DS, antifraud, retry

How it works

Tokenize, charge, receive

The card never touches your server in clear. You keep a token and charge as many times as you need.

Tokenize in the browser

The JS SDK captures the card data and returns a token. The number never hits your server; PCI scope stays with Ducavo.

Create the charge

A POST with amount, installments and the token. 3DS 2.0 and antifraud come on by default: you turn them on with a boolean.

Receive confirmation

Webhook charge.approved with the net amount, per-installment payout time and the invoice id, if issued together.

Included features

What comes without a premium plan

No 3DS add-on, no separately billed antifraud, no premium plan to unlock retries.

PCI-scope tokenization

The card number only enters the browser SDK. Your server only stores the token, without inheriting PCI scope.

Installments up to 12x

Per-tier fee published on /pricing. You show installments with interest already calculated in the checkout.

3DS 2.0 and antifraud

Authentication that shifts chargeback liability to the issuer, with an antifraud score in the same response.

Automatic retries

Declined charges go back into the queue with staggered delay (3, 7 and 14 days). You get a webhook per attempt.

Recurring on the same endpoint

The same token becomes a monthly or annual subscription. No migrating product, no separate recurring plan.

Chargebacks handled via API

Got a dispute? We return the evidence expected by the brand and you respond by endpoint, with deadline per status.

Proof

One charge across 4 languages

Copy, paste your test key, run. Self-service sandbox key, no sales call before the first request.

import { Ducavo } from '@ducavo/sdk';

const ducavo = new Ducavo(process.env.DUCAVO_SECRET_KEY);

// Tokeniza o cartão no browser (o número nunca passa pelo seu servidor)
const cardToken = await ducavo.card.tokens.create({
  number: '4111 1111 1111 1111',
  holder: 'JOSE DA SILVA',
  expiration: '12/2029',
  cvv: '123'
});

// Cobrança de R$ 199,00 em 12x com 3DS e antifraude
const charge = await ducavo.card.charges.create({
  amount: 19900,
  installments: 12,
  card: cardToken.id,
  antifraud: true,
  threeDs: true
});

from ducavo import Ducavo

ducavo = Ducavo(os.environ['DUCAVO_SECRET_KEY'])

# Tokeniza o cartão no browser (o número nunca passa pelo seu servidor)
card_token = ducavo.card.tokens.create(
    number='4111 1111 1111 1111',
    holder='JOSE DA SILVA',
    expiration='12/2029',
    cvv='123',
)

# Cobrança de R$ 199,00 em 12x com 3DS e antifraude
charge = ducavo.card.charges.create(
    amount=19900,
    installments=12,
    card=card_token.id,
    antifraud=True,
    three_ds=True,
)

$ducavo = new Ducavo($_ENV['DUCAVO_SECRET_KEY']);

// Tokeniza o cartão no browser (o número nunca passa pelo seu servidor)
$cardToken = $ducavo->card->tokens->create([
    'number' => '4111 1111 1111 1111',
    'holder' => 'JOSE DA SILVA',
    'expiration' => '12/2029',
    'cvv' => '123',
]);

// Cobrança de R$ 199,00 em 12x com 3DS e antifraude
$charge = $ducavo->card->charges->create([
    'amount' => 19900,
    'installments' => 12,
    'card' => $cardToken->id,
    'antifraud' => true,
    'threeDs' => true,
]);

client := ducavo.New(os.Getenv("DUCAVO_SECRET_KEY"))

// Tokeniza o cartão no browser (o número nunca passa pelo seu servidor)
cardToken, _ := client.Card.Tokens.Create(&ducavo.CardTokenParams{
    Number:     "4111 1111 1111 1111",
    Holder:     "JOSE DA SILVA",
    Expiration: "12/2029",
    CVV:        "123",
})

// Cobrança de R$ 199,00 em 12x com 3DS e antifraude
charge, _ := client.Card.Charges.Create(&ducavo.CardChargeParams{
    Amount:       19900,
    Installments: 12,
    Card:         cardToken.ID,
    Antifraud:    true,
    ThreeDS:      true,
})

Tokenize, charge in 12x, 3DS and antifraud on by default.

Pricing

One fee per method, no hidden add-on

3DS and antifraud included. No per-transaction fee, no monthly fee, no premium plan to unlock recurring.

No per-transaction fee, no monthly fee, no premium plan.

See the full pricing table

Credit at sight per sale	0,50% + R$ 0,05
Credit installments (2x-12x) per installment	0,50% + R$ 0,05
Online debit per sale	0,50% + R$ 0,05
Antifraud and 3DS per sale	Free

Fiscal edge

Charged on card, invoice in the same request

Most card platforms don't issue invoices, or only through a paid third-party integration. On Ducavo, charge and invoice are one POST.

NF-e or NFS-e per declared CFOP
Automatic cancellation on refund
Invoice status webhook alongside the payment

card-com-nf.ts

await ducavo.card.charges.create({
  amount: 19900,
  installments: 3,
  card: cardToken,
  invoice: {
    issue: true,
    cfop: '5102'
  }});

See the invoicing product

FAQ

Frequently asked questions about online cards

What's the online credit card fee?

0.50% + R$ 0.05 per sale on credit at sight, including 3DS 2.0 and antifraud. The 2x to 12x tiers have the per-installment fee published on /pricing, and the same number appears in the title, hero and table.

When do I receive a 12x installment sale?

Default is D+30 calendar days per installment, and API-based advance at 0.50% on the advanced amount, activated when you want. The per-installment payout time appears in the first fold of the table, never hidden in a FAQ.

Do I need to be PCI-certified to integrate?

No. The card number only enters the browser JS SDK and comes back as a token. Your server handles the token; PCI scope stays with Ducavo.

What happens in a chargeback?

3DS 2.0 shifts fraud liability to the issuer. When a dispute lands, you receive the charge.disputed event with the evidence expected by the brand and respond via endpoint within the deadline.

Do you accept online debit?

Yes. Online debit is the product most gateways skip because it requires 3DS authentication. On Ducavo it's there, with 3DS and confirmation webhook, same endpoint as credit, with the rate published in the table.

Can my onboarding be declined?

Onboarding is reviewed (regulatory requirement). The difference is the process: declared deadline, written reason when something is missing, and a real person answering in chat. No empty 'subject to risk analysis' clause.

Payment methods

Everything you need to get paid

One API, every payment method. Integrate once and offer Pix, card, boleto and more.

Accept cards in minutes

Sandbox with test cards for approval, decline, 3DS and chargeback. Move to production whenever you want.

Create my account Talk to a specialist