This generic response shows if you're not logged in, or if the business's "Disable Email Validation Security" setting is off (the default) and your account's email hasn't been validated yet. Verify your email from /email_validation first, then try adding the card again.