Create

curl --request POST \
  --url https://sandbox-payment-b2b.singapay.id/api/v1.0/cardless-withdrawals/create \
  --header 'Authorization: Bearer <token>' \
  --header 'Content-Type: application/json' \
  --header 'X-PARTNER-ID: <api-key>' \
  --header 'X-Signature: <x-signature>' \
  --header 'X-Timestamp: <x-timestamp>' \
  --data '
{
  "account_id": "01K946KF851RK7FX075GJHBVKF",
  "reference_number": "REF-20260610-001",
  "customer_name": "Budi Santoso",
  "customer_id": "CUST-00123",
  "amount": 500000,
  "vendor_code": "CLWD_BRI"
}
'

import requests

url = "https://sandbox-payment-b2b.singapay.id/api/v1.0/cardless-withdrawals/create"

payload = {
    "account_id": "01K946KF851RK7FX075GJHBVKF",
    "reference_number": "REF-20260610-001",
    "customer_name": "Budi Santoso",
    "customer_id": "CUST-00123",
    "amount": 500000,
    "vendor_code": "CLWD_BRI"
}
headers = {
    "X-Signature": "<x-signature>",
    "X-Timestamp": "<x-timestamp>",
    "Authorization": "Bearer <token>",
    "X-PARTNER-ID": "<api-key>",
    "Content-Type": "application/json"
}

response = requests.post(url, json=payload, headers=headers)

print(response.text)

const options = {
  method: 'POST',
  headers: {
    'X-Signature': '<x-signature>',
    'X-Timestamp': '<x-timestamp>',
    Authorization: 'Bearer <token>',
    'X-PARTNER-ID': '<api-key>',
    'Content-Type': 'application/json'
  },
  body: JSON.stringify({
    account_id: '01K946KF851RK7FX075GJHBVKF',
    reference_number: 'REF-20260610-001',
    customer_name: 'Budi Santoso',
    customer_id: 'CUST-00123',
    amount: 500000,
    vendor_code: 'CLWD_BRI'
  })
};

fetch('https://sandbox-payment-b2b.singapay.id/api/v1.0/cardless-withdrawals/create', options)
  .then(res => res.json())
  .then(res => console.log(res))
  .catch(err => console.error(err));

<?php

$curl = curl_init();

curl_setopt_array($curl, [
  CURLOPT_URL => "https://sandbox-payment-b2b.singapay.id/api/v1.0/cardless-withdrawals/create",
  CURLOPT_RETURNTRANSFER => true,
  CURLOPT_ENCODING => "",
  CURLOPT_MAXREDIRS => 10,
  CURLOPT_TIMEOUT => 30,
  CURLOPT_HTTP_VERSION => CURL_HTTP_VERSION_1_1,
  CURLOPT_CUSTOMREQUEST => "POST",
  CURLOPT_POSTFIELDS => json_encode([
    'account_id' => '01K946KF851RK7FX075GJHBVKF',
    'reference_number' => 'REF-20260610-001',
    'customer_name' => 'Budi Santoso',
    'customer_id' => 'CUST-00123',
    'amount' => 500000,
    'vendor_code' => 'CLWD_BRI'
  ]),
  CURLOPT_HTTPHEADER => [
    "Authorization: Bearer <token>",
    "Content-Type: application/json",
    "X-PARTNER-ID: <api-key>",
    "X-Signature: <x-signature>",
    "X-Timestamp: <x-timestamp>"
  ],
]);

$response = curl_exec($curl);
$err = curl_error($curl);

curl_close($curl);

if ($err) {
  echo "cURL Error #:" . $err;
} else {
  echo $response;
}

package main

import (
	"fmt"
	"strings"
	"net/http"
	"io"
)

func main() {

	url := "https://sandbox-payment-b2b.singapay.id/api/v1.0/cardless-withdrawals/create"

	payload := strings.NewReader("{\n  \"account_id\": \"01K946KF851RK7FX075GJHBVKF\",\n  \"reference_number\": \"REF-20260610-001\",\n  \"customer_name\": \"Budi Santoso\",\n  \"customer_id\": \"CUST-00123\",\n  \"amount\": 500000,\n  \"vendor_code\": \"CLWD_BRI\"\n}")

	req, _ := http.NewRequest("POST", url, payload)

	req.Header.Add("X-Signature", "<x-signature>")
	req.Header.Add("X-Timestamp", "<x-timestamp>")
	req.Header.Add("Authorization", "Bearer <token>")
	req.Header.Add("X-PARTNER-ID", "<api-key>")
	req.Header.Add("Content-Type", "application/json")

	res, _ := http.DefaultClient.Do(req)

	defer res.Body.Close()
	body, _ := io.ReadAll(res.Body)

	fmt.Println(string(body))

}

HttpResponse<String> response = Unirest.post("https://sandbox-payment-b2b.singapay.id/api/v1.0/cardless-withdrawals/create")
  .header("X-Signature", "<x-signature>")
  .header("X-Timestamp", "<x-timestamp>")
  .header("Authorization", "Bearer <token>")
  .header("X-PARTNER-ID", "<api-key>")
  .header("Content-Type", "application/json")
  .body("{\n  \"account_id\": \"01K946KF851RK7FX075GJHBVKF\",\n  \"reference_number\": \"REF-20260610-001\",\n  \"customer_name\": \"Budi Santoso\",\n  \"customer_id\": \"CUST-00123\",\n  \"amount\": 500000,\n  \"vendor_code\": \"CLWD_BRI\"\n}")
  .asString();

require 'uri'
require 'net/http'

url = URI("https://sandbox-payment-b2b.singapay.id/api/v1.0/cardless-withdrawals/create")

http = Net::HTTP.new(url.host, url.port)
http.use_ssl = true

request = Net::HTTP::Post.new(url)
request["X-Signature"] = '<x-signature>'
request["X-Timestamp"] = '<x-timestamp>'
request["Authorization"] = 'Bearer <token>'
request["X-PARTNER-ID"] = '<api-key>'
request["Content-Type"] = 'application/json'
request.body = "{\n  \"account_id\": \"01K946KF851RK7FX075GJHBVKF\",\n  \"reference_number\": \"REF-20260610-001\",\n  \"customer_name\": \"Budi Santoso\",\n  \"customer_id\": \"CUST-00123\",\n  \"amount\": 500000,\n  \"vendor_code\": \"CLWD_BRI\"\n}"

response = http.request(request)
puts response.read_body

{
  "response_code": "SP000",
  "response_message": "Successfully",
  "data": {
    "transaction_id": "CW-20251024-0001",
    "reference_number": "REF-20260610-001",
    "transaction_status": {
      "code": "01",
      "desc": "Initiated"
    },
    "post_timestamp": "1766978961000",
    "processed_timestamp": "",
    "expired_at": "1766982561000",
    "customer": {
      "id": "CUST-00123",
      "name": "Budi Santoso"
    },
    "otp_number": "847291",
    "vendor_code": "CLWD_BRI",
    "gross_amount": {
      "currency": "IDR",
      "value": "508000"
    },
    "fee": {
      "currency": "IDR",
      "value": "8000"
    },
    "net_amount": {
      "currency": "IDR",
      "value": "500000"
    },
    "balance_after": {
      "currency": "IDR",
      "value": "0"
    }
  }
}

{
  "response_code": "SP004",
  "response_message": "Duplicate Reference Number",
  "data": {
    "account_id": "01K946KF851RK7FX075GJHBVKF",
    "reference_number": "REF-20260610-001",
    "customer_name": "Budi Santoso",
    "customer_id": "CUST-00123",
    "amount": 500000,
    "vendor_code": "CLWD_BRI",
    "message": "Transaction with this reference number already exists"
  }
}

{
  "response_code": "SP016",
  "response_message": "Signature Invalid",
  "data": {
    "account_id": "01K946KF851RK7FX075GJHBVKF",
    "reference_number": "REF-20260610-001",
    "amount": 500000,
    "customer_name": "Budi Santoso",
    "customer_id": "CUST-00123",
    "vendor_code": "CLWD_BRI",
    "message": "Unauthorized. Invalid X-SIGNATURE"
  }
}

{
  "response_code": "SP003",
  "response_message": "Insufficient Balance",
  "data": {
    "transaction_id": "CW-20251024-0002",
    "reference_number": "REF-20260610-002",
    "transaction_status": {
      "code": "06",
      "desc": "Failed"
    },
    "post_timestamp": "1766978961000",
    "processed_timestamp": "1766978961000",
    "expired_at": "",
    "customer": {
      "id": "CUST-00123",
      "name": "Budi Santoso"
    },
    "otp_number": "",
    "vendor_code": "CLWD_BRI",
    "gross_amount": {
      "currency": "IDR",
      "value": "508000"
    },
    "fee": {
      "currency": "IDR",
      "value": "8000"
    },
    "net_amount": {
      "currency": "IDR",
      "value": "500000"
    },
    "balance_after": {
      "currency": "IDR",
      "value": ""
    },
    "failed_code": "SP003",
    "failed_reason": "Insufficient Balance"
  }
}

{
  "response_code": "SP020",
  "response_message": "Merchant Account Not Found",
  "data": {
    "message": "Merchant Account ID Not Found"
  }
}

{
  "response_code": "SP018",
  "response_message": "Validation error",
  "data": {
    "account_id": "01K946KF851RK7FX075GJHBVKF",
    "reference_number": "REF-20260610-001",
    "customer_name": "Budi Santoso",
    "customer_id": "CUST-00123",
    "amount": 500000,
    "vendor_code": "CLWD_BRI",
    "message": "Validation error 'amount': 'The amount must be at least 50000.'"
  }
}

{
  "response_code": "SP002",
  "response_message": "General Failure",
  "data": {
    "message": "Feature Unavailable yet"
  }
}

Cardless Withdrawal (SOON)

Create

Initiates a cardless withdrawal, debits the account, and returns an OTP for ATM cash collection. Only fixed denominations (multiples of 50,000) are accepted. The target account is specified in the request body (account_id), not in the URL path. This endpoint is rate-limited. See Response Code for SP000–SP020 definitions and merchant actions. CRITICAL: This is a money-out operation requiring X-Signature and X-Timestamp authentication.

POST

api

v1.0

cardless-withdrawals

create

Create

curl --request POST \
  --url https://sandbox-payment-b2b.singapay.id/api/v1.0/cardless-withdrawals/create \
  --header 'Authorization: Bearer <token>' \
  --header 'Content-Type: application/json' \
  --header 'X-PARTNER-ID: <api-key>' \
  --header 'X-Signature: <x-signature>' \
  --header 'X-Timestamp: <x-timestamp>' \
  --data '
{
  "account_id": "01K946KF851RK7FX075GJHBVKF",
  "reference_number": "REF-20260610-001",
  "customer_name": "Budi Santoso",
  "customer_id": "CUST-00123",
  "amount": 500000,
  "vendor_code": "CLWD_BRI"
}
'

import requests

url = "https://sandbox-payment-b2b.singapay.id/api/v1.0/cardless-withdrawals/create"

payload = {
    "account_id": "01K946KF851RK7FX075GJHBVKF",
    "reference_number": "REF-20260610-001",
    "customer_name": "Budi Santoso",
    "customer_id": "CUST-00123",
    "amount": 500000,
    "vendor_code": "CLWD_BRI"
}
headers = {
    "X-Signature": "<x-signature>",
    "X-Timestamp": "<x-timestamp>",
    "Authorization": "Bearer <token>",
    "X-PARTNER-ID": "<api-key>",
    "Content-Type": "application/json"
}

response = requests.post(url, json=payload, headers=headers)

print(response.text)

const options = {
  method: 'POST',
  headers: {
    'X-Signature': '<x-signature>',
    'X-Timestamp': '<x-timestamp>',
    Authorization: 'Bearer <token>',
    'X-PARTNER-ID': '<api-key>',
    'Content-Type': 'application/json'
  },
  body: JSON.stringify({
    account_id: '01K946KF851RK7FX075GJHBVKF',
    reference_number: 'REF-20260610-001',
    customer_name: 'Budi Santoso',
    customer_id: 'CUST-00123',
    amount: 500000,
    vendor_code: 'CLWD_BRI'
  })
};

fetch('https://sandbox-payment-b2b.singapay.id/api/v1.0/cardless-withdrawals/create', options)
  .then(res => res.json())
  .then(res => console.log(res))
  .catch(err => console.error(err));

<?php

$curl = curl_init();

curl_setopt_array($curl, [
  CURLOPT_URL => "https://sandbox-payment-b2b.singapay.id/api/v1.0/cardless-withdrawals/create",
  CURLOPT_RETURNTRANSFER => true,
  CURLOPT_ENCODING => "",
  CURLOPT_MAXREDIRS => 10,
  CURLOPT_TIMEOUT => 30,
  CURLOPT_HTTP_VERSION => CURL_HTTP_VERSION_1_1,
  CURLOPT_CUSTOMREQUEST => "POST",
  CURLOPT_POSTFIELDS => json_encode([
    'account_id' => '01K946KF851RK7FX075GJHBVKF',
    'reference_number' => 'REF-20260610-001',
    'customer_name' => 'Budi Santoso',
    'customer_id' => 'CUST-00123',
    'amount' => 500000,
    'vendor_code' => 'CLWD_BRI'
  ]),
  CURLOPT_HTTPHEADER => [
    "Authorization: Bearer <token>",
    "Content-Type: application/json",
    "X-PARTNER-ID: <api-key>",
    "X-Signature: <x-signature>",
    "X-Timestamp: <x-timestamp>"
  ],
]);

$response = curl_exec($curl);
$err = curl_error($curl);

curl_close($curl);

if ($err) {
  echo "cURL Error #:" . $err;
} else {
  echo $response;
}

package main

import (
	"fmt"
	"strings"
	"net/http"
	"io"
)

func main() {

	url := "https://sandbox-payment-b2b.singapay.id/api/v1.0/cardless-withdrawals/create"

	payload := strings.NewReader("{\n  \"account_id\": \"01K946KF851RK7FX075GJHBVKF\",\n  \"reference_number\": \"REF-20260610-001\",\n  \"customer_name\": \"Budi Santoso\",\n  \"customer_id\": \"CUST-00123\",\n  \"amount\": 500000,\n  \"vendor_code\": \"CLWD_BRI\"\n}")

	req, _ := http.NewRequest("POST", url, payload)

	req.Header.Add("X-Signature", "<x-signature>")
	req.Header.Add("X-Timestamp", "<x-timestamp>")
	req.Header.Add("Authorization", "Bearer <token>")
	req.Header.Add("X-PARTNER-ID", "<api-key>")
	req.Header.Add("Content-Type", "application/json")

	res, _ := http.DefaultClient.Do(req)

	defer res.Body.Close()
	body, _ := io.ReadAll(res.Body)

	fmt.Println(string(body))

}

HttpResponse<String> response = Unirest.post("https://sandbox-payment-b2b.singapay.id/api/v1.0/cardless-withdrawals/create")
  .header("X-Signature", "<x-signature>")
  .header("X-Timestamp", "<x-timestamp>")
  .header("Authorization", "Bearer <token>")
  .header("X-PARTNER-ID", "<api-key>")
  .header("Content-Type", "application/json")
  .body("{\n  \"account_id\": \"01K946KF851RK7FX075GJHBVKF\",\n  \"reference_number\": \"REF-20260610-001\",\n  \"customer_name\": \"Budi Santoso\",\n  \"customer_id\": \"CUST-00123\",\n  \"amount\": 500000,\n  \"vendor_code\": \"CLWD_BRI\"\n}")
  .asString();

require 'uri'
require 'net/http'

url = URI("https://sandbox-payment-b2b.singapay.id/api/v1.0/cardless-withdrawals/create")

http = Net::HTTP.new(url.host, url.port)
http.use_ssl = true

request = Net::HTTP::Post.new(url)
request["X-Signature"] = '<x-signature>'
request["X-Timestamp"] = '<x-timestamp>'
request["Authorization"] = 'Bearer <token>'
request["X-PARTNER-ID"] = '<api-key>'
request["Content-Type"] = 'application/json'
request.body = "{\n  \"account_id\": \"01K946KF851RK7FX075GJHBVKF\",\n  \"reference_number\": \"REF-20260610-001\",\n  \"customer_name\": \"Budi Santoso\",\n  \"customer_id\": \"CUST-00123\",\n  \"amount\": 500000,\n  \"vendor_code\": \"CLWD_BRI\"\n}"

response = http.request(request)
puts response.read_body

{
  "response_code": "SP000",
  "response_message": "Successfully",
  "data": {
    "transaction_id": "CW-20251024-0001",
    "reference_number": "REF-20260610-001",
    "transaction_status": {
      "code": "01",
      "desc": "Initiated"
    },
    "post_timestamp": "1766978961000",
    "processed_timestamp": "",
    "expired_at": "1766982561000",
    "customer": {
      "id": "CUST-00123",
      "name": "Budi Santoso"
    },
    "otp_number": "847291",
    "vendor_code": "CLWD_BRI",
    "gross_amount": {
      "currency": "IDR",
      "value": "508000"
    },
    "fee": {
      "currency": "IDR",
      "value": "8000"
    },
    "net_amount": {
      "currency": "IDR",
      "value": "500000"
    },
    "balance_after": {
      "currency": "IDR",
      "value": "0"
    }
  }
}

{
  "response_code": "SP004",
  "response_message": "Duplicate Reference Number",
  "data": {
    "account_id": "01K946KF851RK7FX075GJHBVKF",
    "reference_number": "REF-20260610-001",
    "customer_name": "Budi Santoso",
    "customer_id": "CUST-00123",
    "amount": 500000,
    "vendor_code": "CLWD_BRI",
    "message": "Transaction with this reference number already exists"
  }
}

{
  "response_code": "SP016",
  "response_message": "Signature Invalid",
  "data": {
    "account_id": "01K946KF851RK7FX075GJHBVKF",
    "reference_number": "REF-20260610-001",
    "amount": 500000,
    "customer_name": "Budi Santoso",
    "customer_id": "CUST-00123",
    "vendor_code": "CLWD_BRI",
    "message": "Unauthorized. Invalid X-SIGNATURE"
  }
}

{
  "response_code": "SP003",
  "response_message": "Insufficient Balance",
  "data": {
    "transaction_id": "CW-20251024-0002",
    "reference_number": "REF-20260610-002",
    "transaction_status": {
      "code": "06",
      "desc": "Failed"
    },
    "post_timestamp": "1766978961000",
    "processed_timestamp": "1766978961000",
    "expired_at": "",
    "customer": {
      "id": "CUST-00123",
      "name": "Budi Santoso"
    },
    "otp_number": "",
    "vendor_code": "CLWD_BRI",
    "gross_amount": {
      "currency": "IDR",
      "value": "508000"
    },
    "fee": {
      "currency": "IDR",
      "value": "8000"
    },
    "net_amount": {
      "currency": "IDR",
      "value": "500000"
    },
    "balance_after": {
      "currency": "IDR",
      "value": ""
    },
    "failed_code": "SP003",
    "failed_reason": "Insufficient Balance"
  }
}

{
  "response_code": "SP020",
  "response_message": "Merchant Account Not Found",
  "data": {
    "message": "Merchant Account ID Not Found"
  }
}

{
  "response_code": "SP018",
  "response_message": "Validation error",
  "data": {
    "account_id": "01K946KF851RK7FX075GJHBVKF",
    "reference_number": "REF-20260610-001",
    "customer_name": "Budi Santoso",
    "customer_id": "CUST-00123",
    "amount": 500000,
    "vendor_code": "CLWD_BRI",
    "message": "Validation error 'amount': 'The amount must be at least 50000.'"
  }
}

{
  "response_code": "SP002",
  "response_message": "General Failure",
  "data": {
    "message": "Feature Unavailable yet"
  }
}

Authorizations

Authorization

string

header

required

JWT issued by POST /api/v1.1/access-token/b2b. Send Authorization: Bearer <token>.

X-PARTNER-ID

string

header

required

Merchant API key (Credential.api_key). Required on every request.

Headers

X-Signature

string

required

HMAC-SHA512 hex signature, computed as HMAC_SHA512(clientSecret, "{HTTP_METHOD}:{REQUEST_URI}:{ACCESS_TOKEN}:{SHA256_HEX(MINIFIED_BODY)}:{X_TIMESTAMP}"). MINIFIED_BODY is the request body with object keys recursively sorted alphabetically and re-serialised with no whitespace. ACCESS_TOKEN is the bearer token without the Bearer prefix. Missing header returns 422 (response_code=SP018); signature mismatch returns 401 (response_code=SP016).

X-Timestamp

string<date-time>

required

Timestamp of the request; used as part of the signed string. Missing header returns 422 (response_code=SP018).

Body

application/json

Target account, reference number, customer details, withdrawal amount, and payment channel selection.

Request body for initiating a new cardless withdrawal transaction. The target account is specified in the body (account_id), not in the URL path.

account_id

string

required

Unique identifier (ULID) of the merchant account to debit. The account must be active and belong to the authenticated merchant.

Maximum string length: 99

Example:

"01K946KF851RK7FX075GJHBVKF"

reference_number

string

required

Unique merchant reference for this withdrawal within the account. Used for idempotency; a duplicate reference returns HTTP 400 with response code SP004.

Maximum string length: 64

Example:

"REF-20260610-001"

customer_name

string

required

Name of the end customer performing the ATM withdrawal.

Maximum string length: 100

Example:

"Budi Santoso"

customer_id

string

required

Merchant-side identifier of the end customer.

Maximum string length: 50

Example:

"CUST-00123"

amount

number

required

Net withdrawal amount in IDR. Must be a multiple of 50,000, between 50,000 and 1,000,000 inclusive. Values that are not a multiple of 50,000 return HTTP 422 with response code SP018.

Required range: 50000 <= x <= 1000000

Example:

500000

vendor_code

string

required

Code identifying the cardless withdrawal payment channel. Contact support for the list of available vendor codes.

Maximum string length: 50

Example:

"CLWD_BRI"

Response

SP000 Successfully — withdrawal initiated (data.transaction_status.code is 01). The data.otp_number holds the OTP for ATM redemption. Note: data.balance_after is always "0" on this response — it is not the actual post-debit balance; use the show or list endpoint to read the real account balance.

Custom v2 envelope for cardless withdrawal create and cancel. Success uses SP000 (HTTP 200).

response_code

string

required

SingaPay custom business response code.

Example:

"SP000"

response_message

string

required

Human-readable label paired with response_code.

Example:

"Successfully"

data

object

required

data on successful create or cancel (HTTP 200, response_code SP000).

Show child attributes

Getting Started

Security

Accept Money

Send Money

Transaction Records

Money Accounts

Webhook

Create

Authorizations

Headers

Body

Response