Every card, accounted for.
Custody and dispatch for every card your bank holds
Cardvoy follows each captured ATM card, new card, PIN mailer and cheque book from the moment it leaves your control to the moment it reaches the customer, the issuer or certified destruction. Built for banks in Pakistan, Bangladesh and the GCC, with each regulator’s rules built in.
Built at the request of Samba Bank Limited, with requirements proven in a proof of concept for Mobilink Microfinance Bank.
The problem
Cards are physical. Most banks still track them on paper.
An ATM keeps a card. A branch gets a list from the switch the next morning, if the file arrives. The card sits in a drawer, the customer calls the helpline, a courier loses a consignment and nobody knows whose desk it was on. Regulators set working-day deadlines and destruction rules, and the bank proves them with registers kept in spreadsheets.
Deadlines missed quietly
Retention periods run in working days across holidays and weekends that differ by country. Nobody sees a card going overdue until a complaint arrives.
Handover by trust
Cards are handed over on a signature in a register. The customer’s ID is not checked against the bank’s records and nobody can prove later who took the card.
Couriers as a black box
Consignments, tracking numbers and courier invoices live in e-mails and spreadsheets. PIN mailers travel with cards. Overcharges are paid because nobody can check them.
How it works
Capture, route, hold, hand over, prove.
- Capture every card the minute an ATM keeps it, from the switch API, a file or a manual entry, with duplicates and unknown terminals stopped.
- Route each card by explainable rules to the branch, the card centre, the issuer or destruction, with a working-day deadline on the country calendar.
- Hold it under dual custody, with physical receipt confirmed and every move recorded.
- Hand over only to the right person: one-time code to the registered mobile, ID matched to the customer record, signature on screen.
- Prove every step to auditors and the regulator from a hash-chained audit trail and ready-made registers.
Platform
Everything between the ATM and the customer, in one product
In v1.0 available in the product todayv1.1 · Q1 2027 planned release and quarterOn request delivered per bank on request
Capture feed and intake
Every card an ATM keeps enters Cardvoy within minutes: from the switch API, a switch or EJ file, the CCRS, or a manual entry with a reason.
In v1.0
Details →Routing rules and SLA clock
Each captured card gets a destination and a deadline the moment it arrives.
In v1.0
Details →Branch custody and customer handover
The branch confirms each card physically, keeps it under dual custody and hands it over only to the right person: one-time code to the registered mobile, ID number matched to the customer record, and a signature on screen.
In v1.0
Details →Card centre (CFC) vault
Cards the branch cannot hand over move to a card fulfilment centre in sealed, tracked consignments.
In v1.0
Details →Issuer returns and certified destruction
Off-us cards go back to their issuer within the regulator’s deadline, and unclaimed cards are destroyed under dual control with witnesses and a numbered certificate, exactly as the country pack requires.
In v1.0
Details →Dispatch and consignments
One dispatch engine for everything a bank sends: new and replacement cards, PIN mailers, cheque books and documents, to customers, branches and card centres.
In v1.0
Details →Courier integration
Couriers update Cardvoy the way they already work: a signed webhook, a status file or the courier portal.
In v1.0
Details →Customer tracking and self-service
Customers get an SMS with a private tracking link.
In v1.0
Details →Courier invoice audit
Cardvoy knows what every consignment should cost.
In v1.0
Details →AI risk radar
Every capture gets an explainable risk score.
In v1.0
Details →Dashboards and regulator returns
Dashboards for branches, card centres, operations and executives, and the registers and returns each regulator asks for, from the same data.
In v1.0
Details →Maker-checker, roles and audit
The server, not the screen, enforces who may do what.
In v1.0
Details →Configuration and company customisation
Three layers: the Cardvoy core, your country pack and your organisation.
In v1.0
Details →Integration API
A documented REST API for the switch, card management system, core banking and couriers.
In v1.0
Details →One core, many markets
A new country is a pack, not a project.
The Cardvoy core is the same for every bank. A country pack adds the regulator’s deadlines, destruction rules, ID types, calendars and languages. Your organisation layer holds your branches, card centres, couriers, templates and approval rules, without code. The pack stops any setting the regulator does not allow.
Solutions
For every institution that holds or sends cards
Commercial banks
Large branch networks, several card centres, many couriers and full regulator returns.
Learn more →
Microfinance and branchless banks
Lean teams, agent and branchless models, doorstep delivery and OTP handover.
Learn more →
Islamic banks
The same controls with your own labels, templates and Arabic or Urdu customer messages.
Learn more →
Digital banks and card issuers
High card volumes, API-first dispatch, customer self-service tracking.
Learn more →Where we work
Local rules, local languages, local hosting.
Each country pack carries its regulator’s deadlines with the circular and clause that set them, so a bank in Karachi, Dhaka, Riyadh or Dubai starts with its own rules configured. Customer data stays where the regulator requires it: in-country cloud, the bank’s private cloud or its own data centre.
- SBP
- Bangladesh Bank
- SAMA
- CBUAE
- CBB
- CBK
- CBO
- QCB
Trust by design
Controls an auditor can test, not promises
Maker-checker in the server
A checker is never the maker, enforced in the database transaction.
Hash-chained audit trail
Every entry seals the one before; verify the chain in one click.
Card numbers protected
Tokenised and encrypted on arrival; full number only under dual control.
Signed licences
Editions, modules and limits in a cryptographically signed licence key.
Built with banks
Shaped by real card operations teams
Samba Bank Limited asked SMH Global to build Cardvoy as a world-class card custody and dispatch system. Its key requirements came from a proof of concept for Mobilink Microfinance Bank, and apply to every bank. SMH Global has built banking, reconciliation and card systems for banks since 2013.
Names and logos belong to their owners and are shown to identify engagements, not as endorsements.
See Cardvoy with your own process.
Book a walkthrough: we configure your branches, CFC, couriers and country pack in a private POC and run a captured card from ATM to customer while you watch.