From v1.5.0, every card-management action on MPChat — applying for a new card, viewing the full PAN / CVV, freezing or unfreezing, and deleting — verifies with your Passkey instead of the legacy 6-digit payment password. This article maps every card action to its exact verification step, including the new "one-tap card application" flow on v1.6.0+.

Card actions are single-step Passkey verifications: Face ID / fingerprint / PIN, no additional 2FA on top. The Passkey replaces the payment password you used to type in earlier app versions.

When you tap Apply now on the card-application screen, MPChat directly fires the Passkey sheet. After biometric confirmation, the application fee is charged from your USDT balance and the card is issued — that is the entire flow. (Starting v1.6.0, MPChat issues new cards in USDT only; see How to apply for an MPChat card with one tap.) If you have not added a Passkey yet, MPChat shows the "add Passkey first" onboarding sheet before continuing.

By default the card UI shows a masked PAN (e.g. 4123 ⋯ 5678) and hides the CVV. Tap the 👁 reveal icon next to the PAN, or Reveal CVV on the card details page. The system Passkey sheet appears; on biometric confirmation the full PAN, expiry, and CVV are shown for a short window (auto-hides after a few seconds for shoulder-surf safety).

This rule applies to every "view full card information" entry — including when binding the card to Apple Pay / Alipay / WeChat. See the relevant guide: How to bind MPChat virtual card to Alipay and WeChat.

From the card actions menu, tap Freeze card. MPChat asks for Passkey confirmation. After biometric pass, the card status switches to Frozen and any new authorization will be declined by the issuer. Existing pending authorizations follow the merchant's normal release timeline (see What does "Authorized" mean? How long until it settles?).

Tap Unfreeze card. MPChat fires the Passkey sheet; on confirmation the card returns to Active and starts accepting new authorizations again.

Exception — temporary card lock by the issuer. If the card was put on hold by MPChat / the card-issuing partner due to suspicious activity, you cannot unfreeze it yourself. Tapping unfreeze toasts "System temporary freeze, cannot be unfrozen by yourself". Contact support, who will work with the issuer to release it; once released, MPChat sends an in-app notification and the status returns to Active.

Card deletion is final, so MPChat shows a confirmation dialog explicitly listing the consequences (no recovery, residual balance handling, etc.) before the Passkey sheet. After biometric confirmation the card is removed from your account and cannot be re-applied as the same card type once deleted.

The same dialog as other flows appears: "Passkey verification failed. Please try again or switch the verification method." Tap Got it, then either retry biometrics, use the cross-device QR option in the system sheet, or fall back to the Reset Passkey flow if the device is permanently unavailable.