Compromised Payment Credential Export

POSThttps://api.deepinfo.com/v1/cti/compromised-payment-credentials/search:export

Exports every record matching filters (no pagination). format=csv returns CSV text; format=json returns a JSON array. Large exports can time out: narrow them with filters.

Example

Request

curl

curl -X POST 'https://api.deepinfo.com/v1/cti/compromised-payment-credentials/search:export?format=csv' \
  -H 'apikey: YOUR_API_KEY' \
  -H 'Accept: application/json' \
  -H 'Content-Type: application/json' \
  -d '{}'

Python

import requests

url = "https://api.deepinfo.com/v1/cti/compromised-payment-credentials/search:export"

params = {
    "format": "csv"
}

headers = {
    "apikey": "YOUR_API_KEY",
    "Accept": "application/json",
    "Content-Type": "application/json"
}

payload = {}

response = requests.post(url, params=params, headers=headers, json=payload)
response.raise_for_status()
print(response.json())

JavaScript

const url = "https://api.deepinfo.com/v1/cti/compromised-payment-credentials/search:export?format=csv";

const response = await fetch(url, {
  method: "POST",
  headers: {
    "apikey": "YOUR_API_KEY",
    "Accept": "application/json",
    "Content-Type": "application/json"
  },
  body: JSON.stringify({}),
});

const data = await response.json();
console.log(data);

package main

import (
	"fmt"
	"io"
	"net/http"
	"strings"
)

func main() {
	payload := strings.NewReader(`{}`)

	req, err := http.NewRequest("POST", "https://api.deepinfo.com/v1/cti/compromised-payment-credentials/search:export?format=csv", payload)
	if err != nil {
		panic(err)
	}
	req.Header.Set("apikey", "YOUR_API_KEY")
	req.Header.Set("Accept", "application/json")
	req.Header.Set("Content-Type", "application/json")

	res, err := http.DefaultClient.Do(req)
	if err != nil {
		panic(err)
	}
	defer res.Body.Close()

	body, err := io.ReadAll(res.Body)
	if err != nil {
		panic(err)
	}
	fmt.Println(string(body))
}

Java

import java.net.URI;
import java.net.http.HttpClient;
import java.net.http.HttpRequest;
import java.net.http.HttpResponse;

public class Main {
    public static void main(String[] args) throws Exception {
        HttpRequest request = HttpRequest.newBuilder()
            .uri(URI.create("https://api.deepinfo.com/v1/cti/compromised-payment-credentials/search:export?format=csv"))
            .header("apikey", "YOUR_API_KEY")
            .header("Accept", "application/json")
            .header("Content-Type", "application/json")
            .POST(HttpRequest.BodyPublishers.ofString("{}"))
            .build();

        HttpResponse<String> response = HttpClient.newHttpClient()
            .send(request, HttpResponse.BodyHandlers.ofString());

        System.out.println(response.body());
    }
}

using System;
using System.Net.Http;
using System.Text;

using var client = new HttpClient();

var request = new HttpRequestMessage(HttpMethod.Post, "https://api.deepinfo.com/v1/cti/compromised-payment-credentials/search:export?format=csv");
request.Headers.Add("apikey", "YOUR_API_KEY");
request.Headers.Add("Accept", "application/json");
request.Content = new StringContent("{}", Encoding.UTF8, "application/json");

using var response = await client.SendAsync(request);
Console.WriteLine(await response.Content.ReadAsStringAsync());

PHP

<?php

$curl = curl_init();

curl_setopt_array($curl, [
    CURLOPT_URL => 'https://api.deepinfo.com/v1/cti/compromised-payment-credentials/search:export?format=csv',
    CURLOPT_RETURNTRANSFER => true,
    CURLOPT_CUSTOMREQUEST => 'POST',
    CURLOPT_HTTPHEADER => [
        'apikey: YOUR_API_KEY',
        'Accept: application/json',
        'Content-Type: application/json',
    ],
    CURLOPT_POSTFIELDS => '{}',
]);

$response = curl_exec($curl);

if ($response === false) {
    throw new RuntimeException(curl_error($curl));
}

echo $response . PHP_EOL;

Ruby

require 'net/http'
require 'uri'

uri = URI('https://api.deepinfo.com/v1/cti/compromised-payment-credentials/search:export?format=csv')

request = Net::HTTP::Post.new(uri)
request['apikey'] = 'YOUR_API_KEY'
request['Accept'] = 'application/json'
request['Content-Type'] = 'application/json'
request.body = '{}'

response = Net::HTTP.start(uri.hostname, uri.port, use_ssl: uri.scheme == 'https') do |http|
  http.request(request)
end

puts response.body

Response

200 OK · text/csv

Response Body

id,pan,pan_masked,pan_last_four,bin,dedup_key,luhn_valid,expiry_year,expiry_month,expiry_raw,is_expired,has_cvv,card_brand,card_type,card_level,issuer_name,issuer_country,check_status,is_validated_live,confidence,source_format,network,leak_name,source_url,first_seen,last_seen,times_seen,hackishness,harvest_url,co_listed_card_count,other_context,state

Content-Type: text/csv; charset=utf-8
deepinfo-request-id: 00000000-0000-4000-8000-0000356d0001

Request

curl

curl -X POST 'https://api.deepinfo.com/v1/cti/compromised-payment-credentials/search:export?format=invalid_value' \
  -H 'apikey: YOUR_API_KEY' \
  -H 'Accept: application/json' \
  -H 'Content-Type: application/json' \
  -d '{}'

Python

import requests

url = "https://api.deepinfo.com/v1/cti/compromised-payment-credentials/search:export"

params = {
    "format": "invalid_value"
}

headers = {
    "apikey": "YOUR_API_KEY",
    "Accept": "application/json",
    "Content-Type": "application/json"
}

payload = {}

response = requests.post(url, params=params, headers=headers, json=payload)
response.raise_for_status()
print(response.json())

JavaScript

const url = "https://api.deepinfo.com/v1/cti/compromised-payment-credentials/search:export?format=invalid_value";

const response = await fetch(url, {
  method: "POST",
  headers: {
    "apikey": "YOUR_API_KEY",
    "Accept": "application/json",
    "Content-Type": "application/json"
  },
  body: JSON.stringify({}),
});

const data = await response.json();
console.log(data);

package main

import (
	"fmt"
	"io"
	"net/http"
	"strings"
)

func main() {
	payload := strings.NewReader(`{}`)

	req, err := http.NewRequest("POST", "https://api.deepinfo.com/v1/cti/compromised-payment-credentials/search:export?format=invalid_value", payload)
	if err != nil {
		panic(err)
	}
	req.Header.Set("apikey", "YOUR_API_KEY")
	req.Header.Set("Accept", "application/json")
	req.Header.Set("Content-Type", "application/json")

	res, err := http.DefaultClient.Do(req)
	if err != nil {
		panic(err)
	}
	defer res.Body.Close()

	body, err := io.ReadAll(res.Body)
	if err != nil {
		panic(err)
	}
	fmt.Println(string(body))
}

Java

import java.net.URI;
import java.net.http.HttpClient;
import java.net.http.HttpRequest;
import java.net.http.HttpResponse;

public class Main {
    public static void main(String[] args) throws Exception {
        HttpRequest request = HttpRequest.newBuilder()
            .uri(URI.create("https://api.deepinfo.com/v1/cti/compromised-payment-credentials/search:export?format=invalid_value"))
            .header("apikey", "YOUR_API_KEY")
            .header("Accept", "application/json")
            .header("Content-Type", "application/json")
            .POST(HttpRequest.BodyPublishers.ofString("{}"))
            .build();

        HttpResponse<String> response = HttpClient.newHttpClient()
            .send(request, HttpResponse.BodyHandlers.ofString());

        System.out.println(response.body());
    }
}

using System;
using System.Net.Http;
using System.Text;

using var client = new HttpClient();

var request = new HttpRequestMessage(HttpMethod.Post, "https://api.deepinfo.com/v1/cti/compromised-payment-credentials/search:export?format=invalid_value");
request.Headers.Add("apikey", "YOUR_API_KEY");
request.Headers.Add("Accept", "application/json");
request.Content = new StringContent("{}", Encoding.UTF8, "application/json");

using var response = await client.SendAsync(request);
Console.WriteLine(await response.Content.ReadAsStringAsync());

PHP

<?php

$curl = curl_init();

curl_setopt_array($curl, [
    CURLOPT_URL => 'https://api.deepinfo.com/v1/cti/compromised-payment-credentials/search:export?format=invalid_value',
    CURLOPT_RETURNTRANSFER => true,
    CURLOPT_CUSTOMREQUEST => 'POST',
    CURLOPT_HTTPHEADER => [
        'apikey: YOUR_API_KEY',
        'Accept: application/json',
        'Content-Type: application/json',
    ],
    CURLOPT_POSTFIELDS => '{}',
]);

$response = curl_exec($curl);

if ($response === false) {
    throw new RuntimeException(curl_error($curl));
}

echo $response . PHP_EOL;

Ruby

require 'net/http'
require 'uri'

uri = URI('https://api.deepinfo.com/v1/cti/compromised-payment-credentials/search:export?format=invalid_value')

request = Net::HTTP::Post.new(uri)
request['apikey'] = 'YOUR_API_KEY'
request['Accept'] = 'application/json'
request['Content-Type'] = 'application/json'
request.body = '{}'

response = Net::HTTP.start(uri.hostname, uri.port, use_ssl: uri.scheme == 'https') do |http|
  http.request(request)
end

puts response.body

Response

400 Bad Request · application/json

Response Body

{
  "code": 10400,
  "parameters": [
    {
      "param": "format",
      "details": [
        "Select a valid choice."
      ]
    }
  ],
  "solution": "https://docs.deepinfo.com/reference/"
}

Content-Type: application/json
deepinfo-request-id: 00000000-0000-4000-8000-0000356d0001

Request

curl

curl -X POST 'https://api.deepinfo.com/v1/cti/compromised-payment-credentials/search:export?format=csv' \
  -H 'apikey: YOUR_API_KEY' \
  -H 'Accept: application/json' \
  -H 'Content-Type: application/json' \
  -d '{
  "filters": {
    "must": [
      {
        "name": "pan",
        "type": "eq",
        "value": "<value>"
      },
      {
        "name": "pan_masked",
        "type": "eq",
        "value": "<value>"
      },
      {
        "name": "pan_last_four",
        "type": "eq",
        "value": "<value>"
      },
      {
        "name": "bin",
        "type": "eq",
        "value": "<value>"
      },
      {
        "name": "dedup_key",
        "type": "eq",
        "value": "<value>"
      },
      {
        "name": "card_brand",
        "type": "eq",
        "value": "<value>"
      },
      {
        "name": "card_type",
        "type": "eq",
        "value": "<value>"
      },
      {
        "name": "card_level",
        "type": "eq",
        "value": "<value>"
      },
      {
        "name": "issuer_name",
        "type": "eq",
        "value": "<value>"
      },
      {
        "name": "issuer_country",
        "type": "eq",
        "value": "<value>"
      },
      {
        "name": "check_status",
        "type": "eq",
        "value": "<value>"
      },
      {
        "name": "confidence",
        "type": "eq",
        "value": "<value>"
      },
      {
        "name": "leak_name",
        "type": "eq",
        "value": "<value>"
      },
      {
        "name": "source_url",
        "type": "eq",
        "value": "<value>"
      },
      {
        "name": "harvest_url",
        "type": "eq",
        "value": "<value>"
      },
      {
        "name": "state",
        "type": "eq",
        "value": "<value>"
      },
      {
        "name": "expiry_year",
        "type": "eq",
        "value": 0
      },
      {
        "name": "expiry_month",
        "type": "eq",
        "value": 0
      },
      {
        "name": "first_seen",
        "type": "eq",
        "value": "<date-time>"
      },
      {
        "name": "last_seen",
        "type": "eq",
        "value": "<date-time>"
      },
      {
        "name": "times_seen",
        "type": "eq",
        "value": 0
      },
      {
        "name": "hackishness",
        "type": "eq",
        "value": 0
      },
      {
        "name": "co_listed_card_count",
        "type": "eq",
        "value": 0
      },
      {
        "name": "luhn_valid",
        "type": "eq",
        "value": true
      },
      {
        "name": "has_cvv",
        "type": "eq",
        "value": true
      },
      {
        "name": "is_validated_live",
        "type": "eq",
        "value": true
      }
    ]
  },
  "sort": [
    {
      "field": "pan_last_four",
      "order": "desc"
    }
  ]
}'

Python

import requests

url = "https://api.deepinfo.com/v1/cti/compromised-payment-credentials/search:export"

params = {
    "format": "csv"
}

headers = {
    "apikey": "YOUR_API_KEY",
    "Accept": "application/json",
    "Content-Type": "application/json"
}

payload = {
    "filters": {
        "must": [
            {
                "name": "pan",
                "type": "eq",
                "value": "<value>"
            },
            {
                "name": "pan_masked",
                "type": "eq",
                "value": "<value>"
            },
            {
                "name": "pan_last_four",
                "type": "eq",
                "value": "<value>"
            },
            {
                "name": "bin",
                "type": "eq",
                "value": "<value>"
            },
            {
                "name": "dedup_key",
                "type": "eq",
                "value": "<value>"
            },
            {
                "name": "card_brand",
                "type": "eq",
                "value": "<value>"
            },
            {
                "name": "card_type",
                "type": "eq",
                "value": "<value>"
            },
            {
                "name": "card_level",
                "type": "eq",
                "value": "<value>"
            },
            {
                "name": "issuer_name",
                "type": "eq",
                "value": "<value>"
            },
            {
                "name": "issuer_country",
                "type": "eq",
                "value": "<value>"
            },
            {
                "name": "check_status",
                "type": "eq",
                "value": "<value>"
            },
            {
                "name": "confidence",
                "type": "eq",
                "value": "<value>"
            },
            {
                "name": "leak_name",
                "type": "eq",
                "value": "<value>"
            },
            {
                "name": "source_url",
                "type": "eq",
                "value": "<value>"
            },
            {
                "name": "harvest_url",
                "type": "eq",
                "value": "<value>"
            },
            {
                "name": "state",
                "type": "eq",
                "value": "<value>"
            },
            {
                "name": "expiry_year",
                "type": "eq",
                "value": 0
            },
            {
                "name": "expiry_month",
                "type": "eq",
                "value": 0
            },
            {
                "name": "first_seen",
                "type": "eq",
                "value": "<date-time>"
            },
            {
                "name": "last_seen",
                "type": "eq",
                "value": "<date-time>"
            },
            {
                "name": "times_seen",
                "type": "eq",
                "value": 0
            },
            {
                "name": "hackishness",
                "type": "eq",
                "value": 0
            },
            {
                "name": "co_listed_card_count",
                "type": "eq",
                "value": 0
            },
            {
                "name": "luhn_valid",
                "type": "eq",
                "value": True
            },
            {
                "name": "has_cvv",
                "type": "eq",
                "value": True
            },
            {
                "name": "is_validated_live",
                "type": "eq",
                "value": True
            }
        ]
    },
    "sort": [
        {
            "field": "pan_last_four",
            "order": "desc"
        }
    ]
}

response = requests.post(url, params=params, headers=headers, json=payload)
response.raise_for_status()
print(response.json())

JavaScript

const url = "https://api.deepinfo.com/v1/cti/compromised-payment-credentials/search:export?format=csv";

const response = await fetch(url, {
  method: "POST",
  headers: {
    "apikey": "YOUR_API_KEY",
    "Accept": "application/json",
    "Content-Type": "application/json"
  },
  body: JSON.stringify({
    filters: {
      must: [
        {
          name: "pan",
          type: "eq",
          value: "<value>"
        },
        {
          name: "pan_masked",
          type: "eq",
          value: "<value>"
        },
        {
          name: "pan_last_four",
          type: "eq",
          value: "<value>"
        },
        {
          name: "bin",
          type: "eq",
          value: "<value>"
        },
        {
          name: "dedup_key",
          type: "eq",
          value: "<value>"
        },
        {
          name: "card_brand",
          type: "eq",
          value: "<value>"
        },
        {
          name: "card_type",
          type: "eq",
          value: "<value>"
        },
        {
          name: "card_level",
          type: "eq",
          value: "<value>"
        },
        {
          name: "issuer_name",
          type: "eq",
          value: "<value>"
        },
        {
          name: "issuer_country",
          type: "eq",
          value: "<value>"
        },
        {
          name: "check_status",
          type: "eq",
          value: "<value>"
        },
        {
          name: "confidence",
          type: "eq",
          value: "<value>"
        },
        {
          name: "leak_name",
          type: "eq",
          value: "<value>"
        },
        {
          name: "source_url",
          type: "eq",
          value: "<value>"
        },
        {
          name: "harvest_url",
          type: "eq",
          value: "<value>"
        },
        {
          name: "state",
          type: "eq",
          value: "<value>"
        },
        {
          name: "expiry_year",
          type: "eq",
          value: 0
        },
        {
          name: "expiry_month",
          type: "eq",
          value: 0
        },
        {
          name: "first_seen",
          type: "eq",
          value: "<date-time>"
        },
        {
          name: "last_seen",
          type: "eq",
          value: "<date-time>"
        },
        {
          name: "times_seen",
          type: "eq",
          value: 0
        },
        {
          name: "hackishness",
          type: "eq",
          value: 0
        },
        {
          name: "co_listed_card_count",
          type: "eq",
          value: 0
        },
        {
          name: "luhn_valid",
          type: "eq",
          value: true
        },
        {
          name: "has_cvv",
          type: "eq",
          value: true
        },
        {
          name: "is_validated_live",
          type: "eq",
          value: true
        }
      ]
    },
    sort: [
      {
        field: "pan_last_four",
        order: "desc"
      }
    ]
  }),
});

const data = await response.json();
console.log(data);

package main

import (
	"fmt"
	"io"
	"net/http"
	"strings"
)

func main() {
	payload := strings.NewReader(`{
  "filters": {
    "must": [
      {
        "name": "pan",
        "type": "eq",
        "value": "<value>"
      },
      {
        "name": "pan_masked",
        "type": "eq",
        "value": "<value>"
      },
      {
        "name": "pan_last_four",
        "type": "eq",
        "value": "<value>"
      },
      {
        "name": "bin",
        "type": "eq",
        "value": "<value>"
      },
      {
        "name": "dedup_key",
        "type": "eq",
        "value": "<value>"
      },
      {
        "name": "card_brand",
        "type": "eq",
        "value": "<value>"
      },
      {
        "name": "card_type",
        "type": "eq",
        "value": "<value>"
      },
      {
        "name": "card_level",
        "type": "eq",
        "value": "<value>"
      },
      {
        "name": "issuer_name",
        "type": "eq",
        "value": "<value>"
      },
      {
        "name": "issuer_country",
        "type": "eq",
        "value": "<value>"
      },
      {
        "name": "check_status",
        "type": "eq",
        "value": "<value>"
      },
      {
        "name": "confidence",
        "type": "eq",
        "value": "<value>"
      },
      {
        "name": "leak_name",
        "type": "eq",
        "value": "<value>"
      },
      {
        "name": "source_url",
        "type": "eq",
        "value": "<value>"
      },
      {
        "name": "harvest_url",
        "type": "eq",
        "value": "<value>"
      },
      {
        "name": "state",
        "type": "eq",
        "value": "<value>"
      },
      {
        "name": "expiry_year",
        "type": "eq",
        "value": 0
      },
      {
        "name": "expiry_month",
        "type": "eq",
        "value": 0
      },
      {
        "name": "first_seen",
        "type": "eq",
        "value": "<date-time>"
      },
      {
        "name": "last_seen",
        "type": "eq",
        "value": "<date-time>"
      },
      {
        "name": "times_seen",
        "type": "eq",
        "value": 0
      },
      {
        "name": "hackishness",
        "type": "eq",
        "value": 0
      },
      {
        "name": "co_listed_card_count",
        "type": "eq",
        "value": 0
      },
      {
        "name": "luhn_valid",
        "type": "eq",
        "value": true
      },
      {
        "name": "has_cvv",
        "type": "eq",
        "value": true
      },
      {
        "name": "is_validated_live",
        "type": "eq",
        "value": true
      }
    ]
  },
  "sort": [
    {
      "field": "pan_last_four",
      "order": "desc"
    }
  ]
}`)

	req, err := http.NewRequest("POST", "https://api.deepinfo.com/v1/cti/compromised-payment-credentials/search:export?format=csv", payload)
	if err != nil {
		panic(err)
	}
	req.Header.Set("apikey", "YOUR_API_KEY")
	req.Header.Set("Accept", "application/json")
	req.Header.Set("Content-Type", "application/json")

	res, err := http.DefaultClient.Do(req)
	if err != nil {
		panic(err)
	}
	defer res.Body.Close()

	body, err := io.ReadAll(res.Body)
	if err != nil {
		panic(err)
	}
	fmt.Println(string(body))
}

Java

import java.net.URI;
import java.net.http.HttpClient;
import java.net.http.HttpRequest;
import java.net.http.HttpResponse;

public class Main {
    public static void main(String[] args) throws Exception {
        String body = """
            {
              "filters": {
                "must": [
                  {
                    "name": "pan",
                    "type": "eq",
                    "value": "<value>"
                  },
                  {
                    "name": "pan_masked",
                    "type": "eq",
                    "value": "<value>"
                  },
                  {
                    "name": "pan_last_four",
                    "type": "eq",
                    "value": "<value>"
                  },
                  {
                    "name": "bin",
                    "type": "eq",
                    "value": "<value>"
                  },
                  {
                    "name": "dedup_key",
                    "type": "eq",
                    "value": "<value>"
                  },
                  {
                    "name": "card_brand",
                    "type": "eq",
                    "value": "<value>"
                  },
                  {
                    "name": "card_type",
                    "type": "eq",
                    "value": "<value>"
                  },
                  {
                    "name": "card_level",
                    "type": "eq",
                    "value": "<value>"
                  },
                  {
                    "name": "issuer_name",
                    "type": "eq",
                    "value": "<value>"
                  },
                  {
                    "name": "issuer_country",
                    "type": "eq",
                    "value": "<value>"
                  },
                  {
                    "name": "check_status",
                    "type": "eq",
                    "value": "<value>"
                  },
                  {
                    "name": "confidence",
                    "type": "eq",
                    "value": "<value>"
                  },
                  {
                    "name": "leak_name",
                    "type": "eq",
                    "value": "<value>"
                  },
                  {
                    "name": "source_url",
                    "type": "eq",
                    "value": "<value>"
                  },
                  {
                    "name": "harvest_url",
                    "type": "eq",
                    "value": "<value>"
                  },
                  {
                    "name": "state",
                    "type": "eq",
                    "value": "<value>"
                  },
                  {
                    "name": "expiry_year",
                    "type": "eq",
                    "value": 0
                  },
                  {
                    "name": "expiry_month",
                    "type": "eq",
                    "value": 0
                  },
                  {
                    "name": "first_seen",
                    "type": "eq",
                    "value": "<date-time>"
                  },
                  {
                    "name": "last_seen",
                    "type": "eq",
                    "value": "<date-time>"
                  },
                  {
                    "name": "times_seen",
                    "type": "eq",
                    "value": 0
                  },
                  {
                    "name": "hackishness",
                    "type": "eq",
                    "value": 0
                  },
                  {
                    "name": "co_listed_card_count",
                    "type": "eq",
                    "value": 0
                  },
                  {
                    "name": "luhn_valid",
                    "type": "eq",
                    "value": true
                  },
                  {
                    "name": "has_cvv",
                    "type": "eq",
                    "value": true
                  },
                  {
                    "name": "is_validated_live",
                    "type": "eq",
                    "value": true
                  }
                ]
              },
              "sort": [
                {
                  "field": "pan_last_four",
                  "order": "desc"
                }
              ]
            }""";

        HttpRequest request = HttpRequest.newBuilder()
            .uri(URI.create("https://api.deepinfo.com/v1/cti/compromised-payment-credentials/search:export?format=csv"))
            .header("apikey", "YOUR_API_KEY")
            .header("Accept", "application/json")
            .header("Content-Type", "application/json")
            .POST(HttpRequest.BodyPublishers.ofString(body))
            .build();

        HttpResponse<String> response = HttpClient.newHttpClient()
            .send(request, HttpResponse.BodyHandlers.ofString());

        System.out.println(response.body());
    }
}

using System;
using System.Net.Http;
using System.Text;

using var client = new HttpClient();

var body = """
    {
      "filters": {
        "must": [
          {
            "name": "pan",
            "type": "eq",
            "value": "<value>"
          },
          {
            "name": "pan_masked",
            "type": "eq",
            "value": "<value>"
          },
          {
            "name": "pan_last_four",
            "type": "eq",
            "value": "<value>"
          },
          {
            "name": "bin",
            "type": "eq",
            "value": "<value>"
          },
          {
            "name": "dedup_key",
            "type": "eq",
            "value": "<value>"
          },
          {
            "name": "card_brand",
            "type": "eq",
            "value": "<value>"
          },
          {
            "name": "card_type",
            "type": "eq",
            "value": "<value>"
          },
          {
            "name": "card_level",
            "type": "eq",
            "value": "<value>"
          },
          {
            "name": "issuer_name",
            "type": "eq",
            "value": "<value>"
          },
          {
            "name": "issuer_country",
            "type": "eq",
            "value": "<value>"
          },
          {
            "name": "check_status",
            "type": "eq",
            "value": "<value>"
          },
          {
            "name": "confidence",
            "type": "eq",
            "value": "<value>"
          },
          {
            "name": "leak_name",
            "type": "eq",
            "value": "<value>"
          },
          {
            "name": "source_url",
            "type": "eq",
            "value": "<value>"
          },
          {
            "name": "harvest_url",
            "type": "eq",
            "value": "<value>"
          },
          {
            "name": "state",
            "type": "eq",
            "value": "<value>"
          },
          {
            "name": "expiry_year",
            "type": "eq",
            "value": 0
          },
          {
            "name": "expiry_month",
            "type": "eq",
            "value": 0
          },
          {
            "name": "first_seen",
            "type": "eq",
            "value": "<date-time>"
          },
          {
            "name": "last_seen",
            "type": "eq",
            "value": "<date-time>"
          },
          {
            "name": "times_seen",
            "type": "eq",
            "value": 0
          },
          {
            "name": "hackishness",
            "type": "eq",
            "value": 0
          },
          {
            "name": "co_listed_card_count",
            "type": "eq",
            "value": 0
          },
          {
            "name": "luhn_valid",
            "type": "eq",
            "value": true
          },
          {
            "name": "has_cvv",
            "type": "eq",
            "value": true
          },
          {
            "name": "is_validated_live",
            "type": "eq",
            "value": true
          }
        ]
      },
      "sort": [
        {
          "field": "pan_last_four",
          "order": "desc"
        }
      ]
    }
    """;

var request = new HttpRequestMessage(HttpMethod.Post, "https://api.deepinfo.com/v1/cti/compromised-payment-credentials/search:export?format=csv");
request.Headers.Add("apikey", "YOUR_API_KEY");
request.Headers.Add("Accept", "application/json");
request.Content = new StringContent(body, Encoding.UTF8, "application/json");

using var response = await client.SendAsync(request);
Console.WriteLine(await response.Content.ReadAsStringAsync());

PHP

<?php

$body = <<<'JSON'
{
  "filters": {
    "must": [
      {
        "name": "pan",
        "type": "eq",
        "value": "<value>"
      },
      {
        "name": "pan_masked",
        "type": "eq",
        "value": "<value>"
      },
      {
        "name": "pan_last_four",
        "type": "eq",
        "value": "<value>"
      },
      {
        "name": "bin",
        "type": "eq",
        "value": "<value>"
      },
      {
        "name": "dedup_key",
        "type": "eq",
        "value": "<value>"
      },
      {
        "name": "card_brand",
        "type": "eq",
        "value": "<value>"
      },
      {
        "name": "card_type",
        "type": "eq",
        "value": "<value>"
      },
      {
        "name": "card_level",
        "type": "eq",
        "value": "<value>"
      },
      {
        "name": "issuer_name",
        "type": "eq",
        "value": "<value>"
      },
      {
        "name": "issuer_country",
        "type": "eq",
        "value": "<value>"
      },
      {
        "name": "check_status",
        "type": "eq",
        "value": "<value>"
      },
      {
        "name": "confidence",
        "type": "eq",
        "value": "<value>"
      },
      {
        "name": "leak_name",
        "type": "eq",
        "value": "<value>"
      },
      {
        "name": "source_url",
        "type": "eq",
        "value": "<value>"
      },
      {
        "name": "harvest_url",
        "type": "eq",
        "value": "<value>"
      },
      {
        "name": "state",
        "type": "eq",
        "value": "<value>"
      },
      {
        "name": "expiry_year",
        "type": "eq",
        "value": 0
      },
      {
        "name": "expiry_month",
        "type": "eq",
        "value": 0
      },
      {
        "name": "first_seen",
        "type": "eq",
        "value": "<date-time>"
      },
      {
        "name": "last_seen",
        "type": "eq",
        "value": "<date-time>"
      },
      {
        "name": "times_seen",
        "type": "eq",
        "value": 0
      },
      {
        "name": "hackishness",
        "type": "eq",
        "value": 0
      },
      {
        "name": "co_listed_card_count",
        "type": "eq",
        "value": 0
      },
      {
        "name": "luhn_valid",
        "type": "eq",
        "value": true
      },
      {
        "name": "has_cvv",
        "type": "eq",
        "value": true
      },
      {
        "name": "is_validated_live",
        "type": "eq",
        "value": true
      }
    ]
  },
  "sort": [
    {
      "field": "pan_last_four",
      "order": "desc"
    }
  ]
}
JSON;

$curl = curl_init();

curl_setopt_array($curl, [
    CURLOPT_URL => 'https://api.deepinfo.com/v1/cti/compromised-payment-credentials/search:export?format=csv',
    CURLOPT_RETURNTRANSFER => true,
    CURLOPT_CUSTOMREQUEST => 'POST',
    CURLOPT_HTTPHEADER => [
        'apikey: YOUR_API_KEY',
        'Accept: application/json',
        'Content-Type: application/json',
    ],
    CURLOPT_POSTFIELDS => $body,
]);

$response = curl_exec($curl);

if ($response === false) {
    throw new RuntimeException(curl_error($curl));
}

echo $response . PHP_EOL;

Ruby

require 'net/http'
require 'uri'

uri = URI('https://api.deepinfo.com/v1/cti/compromised-payment-credentials/search:export?format=csv')

request = Net::HTTP::Post.new(uri)
request['apikey'] = 'YOUR_API_KEY'
request['Accept'] = 'application/json'
request['Content-Type'] = 'application/json'
request.body = <<~'JSON'.chomp
  {
    "filters": {
      "must": [
        {
          "name": "pan",
          "type": "eq",
          "value": "<value>"
        },
        {
          "name": "pan_masked",
          "type": "eq",
          "value": "<value>"
        },
        {
          "name": "pan_last_four",
          "type": "eq",
          "value": "<value>"
        },
        {
          "name": "bin",
          "type": "eq",
          "value": "<value>"
        },
        {
          "name": "dedup_key",
          "type": "eq",
          "value": "<value>"
        },
        {
          "name": "card_brand",
          "type": "eq",
          "value": "<value>"
        },
        {
          "name": "card_type",
          "type": "eq",
          "value": "<value>"
        },
        {
          "name": "card_level",
          "type": "eq",
          "value": "<value>"
        },
        {
          "name": "issuer_name",
          "type": "eq",
          "value": "<value>"
        },
        {
          "name": "issuer_country",
          "type": "eq",
          "value": "<value>"
        },
        {
          "name": "check_status",
          "type": "eq",
          "value": "<value>"
        },
        {
          "name": "confidence",
          "type": "eq",
          "value": "<value>"
        },
        {
          "name": "leak_name",
          "type": "eq",
          "value": "<value>"
        },
        {
          "name": "source_url",
          "type": "eq",
          "value": "<value>"
        },
        {
          "name": "harvest_url",
          "type": "eq",
          "value": "<value>"
        },
        {
          "name": "state",
          "type": "eq",
          "value": "<value>"
        },
        {
          "name": "expiry_year",
          "type": "eq",
          "value": 0
        },
        {
          "name": "expiry_month",
          "type": "eq",
          "value": 0
        },
        {
          "name": "first_seen",
          "type": "eq",
          "value": "<date-time>"
        },
        {
          "name": "last_seen",
          "type": "eq",
          "value": "<date-time>"
        },
        {
          "name": "times_seen",
          "type": "eq",
          "value": 0
        },
        {
          "name": "hackishness",
          "type": "eq",
          "value": 0
        },
        {
          "name": "co_listed_card_count",
          "type": "eq",
          "value": 0
        },
        {
          "name": "luhn_valid",
          "type": "eq",
          "value": true
        },
        {
          "name": "has_cvv",
          "type": "eq",
          "value": true
        },
        {
          "name": "is_validated_live",
          "type": "eq",
          "value": true
        }
      ]
    },
    "sort": [
      {
        "field": "pan_last_four",
        "order": "desc"
      }
    ]
  }
JSON

response = Net::HTTP.start(uri.hostname, uri.port, use_ssl: uri.scheme == 'https') do |http|
  http.request(request)
end

puts response.body

This request template has no response: keep the filters you need, set their values and send it.

Authentication

Send your API key in the apikey request header.

Query Parameters

Parameter	Required	Description
`format`	Optional	One of: `json`, `csv`. Example`csv`

Request Body

Parameter	Type	Required	Description
`filters`	object	Optional	See Filtering below
`sort`	array	Optional	List of `{field, order}`

application/json

{}

Filtering

Example body:

JSON

{
  "filters": {
    "must": [
      {
        "name": "state",
        "type": "eq",
        "value": "<value>"
      }
    ]
  },
  "sort": [
    {
      "field": "pan_last_four",
      "order": "desc"
    }
  ]
}

See Getting Started → Search & Filters for the operators.

The Request Template example holds this body with every filter of this endpoint, one entry per field, each with an operator the field accepts and a placeholder value. Copy it, keep the filters you need and set their values.

Searchable Fields

Grouped by the operators they accept (measured against the API; sending another operator returns 400).

Operators eq in startswith endswith contains_any contains_all exists

Field	Description
`pan`	The full card number (primary account number) found in the leak. Treat it as sensitive.
`pan_masked`	The card number in masked form, with part of the digits hidden.
`pan_last_four`	The last four digits of the card number.
`bin`	The card's bank identification number (BIN), the leading digits of the card number that identify the issuer.
`dedup_key`	A de-duplication key for the card record.
`card_brand`	The card brand: `visa`, `mastercard`, `amex`, `discover` or `unionpay`.
`card_type`	The card type: `credit`, `debit` or `prepaid`.
`card_level`	The card's product level: `classic`, `gold`, `world`, `platinum`, `business`, `signature`, `standard` or `enhanced`.
`issuer_name`	The name of the card's issuer.
`issuer_country`	The country of the card's issuer.
`check_status`	The result of checking the card: `approved`, `declined` or `unknown`, which is the default.
`confidence`	The platform's confidence level for the record: `high`, `medium` or `low` (CONFIDENCE).
`leak_name`	The names of the leaks the card was found in, as a list.
`source_url`	The address of the source where the card was found.
`harvest_url`	The address the card record was harvested (collected) from, recorded separately from `source_url`.
`state`	The card record's state: `newly_detected` or `unresolved` while active; once inactive, `not_applicable` or `verified_resolved` (set by the platform) or `ignored`, `risk_accepted`, `marked_as_resolved` or `marked_as_false_positive` (set by you).

Operators eq in gte lte exists

Field	Description
`expiry_year`	The card's expiry year; it can be empty.
`expiry_month`	The card's expiry month, as a number; it can be empty.
`first_seen`	When the card was first seen (UTC date-time).
`last_seen`	When the card was last seen, shown as LAST SEEN (UTC date-time).
`times_seen`	How many times the card was seen (TIMES SEEN).
`hackishness`	The record's hackishness score (HACKISHNESS), the same kind of score as on dark web search results.
`co_listed_card_count`	The number of cards listed together with this card in its source.

Operators eq exists

Field	Description
`luhn_valid`	Whether the card number passes the Luhn check, the check-digit test that valid card numbers pass.
`has_cvv`	Whether the leaked record includes the card's security code (CVV).
`is_validated_live`	Whether the card has been validated as live.

Operators Not measured

Field	Description
`source_format`	The kind of source the card was found in: `structured_dump`, `checker_bot`, `stealer_log`, `bare_ccn` or `other`.
`network`	Network names recorded for the card record, as a list of strings.

Sortable Fields

Field	Description
`pan_last_four`	The last four digits of the card number.
`bin`	The card's bank identification number (BIN), the leading digits of the card number that identify the issuer.
`expiry_year`	The card's expiry year; it can be empty.
`card_brand`	The card brand: `visa`, `mastercard`, `amex`, `discover` or `unionpay`.
`issuer_country`	The country of the card's issuer.
`check_status`	The result of checking the card: `approved`, `declined` or `unknown`, which is the default.
`confidence`	The platform's confidence level for the record: `high`, `medium` or `low` (CONFIDENCE).
`source_format`	The kind of source the card was found in: `structured_dump`, `checker_bot`, `stealer_log`, `bare_ccn` or `other`.
`first_seen`	When the card was first seen (UTC date-time).
`last_seen`	When the card was last seen, shown as LAST SEEN (UTC date-time).
`times_seen`	How many times the card was seen (TIMES SEEN).
`hackishness`	The record's hackishness score (HACKISHNESS), the same kind of score as on dark web search results.
`co_listed_card_count`	The number of cards listed together with this card in its source.
`state`	The card record's state: `newly_detected` or `unresolved` while active; once inactive, `not_applicable` or `verified_resolved` (set by the platform) or `ignored`, `risk_accepted`, `marked_as_resolved` or `marked_as_false_positive` (set by you).

Examples

Selecting one loads it into the request and response panels.

Reference updated September 27, 2026